$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: g9dgXHM8RMwVgVCbmuyKSmA83FyG+v50l6oPGT4R4RY= Subject key identifier: 5E:61:FA:0B:C1:A6:19:FB:C8:71:DE:DC:CF:48:E5:66:C4:7A:B1:4C Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 2988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 290B Signing time: Tue 12 May 2026 15:36:29 +0000 Manifest this update: Tue 12 May 2026 15:36:28 +0000 Manifest next update: Tue 19 May 2026 15:36:28 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: y+ZscOH19LpvYXi8Hk5yaFwsAWbRRGw6Qzep+LFsBfk=) 2: 57D5BBF870F211F086293675C4F9AE02.roa (hash: DeKhzeI6csoLVB/N7GeSeQ/TlM+YbpCUPGuUuLwXV4E=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: 9cZ6L/GPvQKK4pJ4l7g4uN4OgEx5HSReU5gKVwtDiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10632 (0x2988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: May 12 15:36:28 2026 GMT Not After : May 19 15:36:28 2026 GMT Subject: CN=6a0348fd-5e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:8f:de:78:1b:29:7f:e2:a5:d3:45:e3:21: 38:a9:54:ef:de:ed:20:64:21:cc:9e:a1:fa:68:51: 07:ae:70:b0:6b:a7:9e:88:8f:1b:52:ad:ac:15:40: d6:8b:f7:cf:08:75:b3:b2:85:e2:55:2f:c4:cc:5c: 84:5a:0f:4e:7a:06:0c:3c:ed:44:9f:85:c9:d8:cf: 9e:7f:84:aa:10:65:b7:a3:d3:e6:93:3f:07:f9:6b: 17:79:6c:82:7a:c1:db:69:ed:7e:f0:47:ce:5e:04: 62:08:e9:cb:bb:0c:f7:74:c6:f0:4f:16:60:9e:4d: 84:35:30:1f:1e:44:43:58:44:b6:30:cf:e0:8b:e5: fb:d6:52:81:67:3e:25:1e:69:a8:04:78:1b:bb:6a: 10:7d:ff:a7:fc:52:46:c2:a0:c4:c6:86:07:a6:c0: cf:c4:cb:e5:b0:66:a6:c0:c0:f0:21:37:3c:cc:3e: 9c:38:13:40:8f:d3:dc:86:7b:52:b5:b7:a7:58:00: 29:b4:ce:0f:eb:94:2a:c0:4e:e1:52:96:81:10:a0: e6:d2:c9:c5:fb:fa:d1:e7:95:44:1e:83:8d:fc:e8: 90:d4:27:b8:5f:ae:9a:e4:a0:66:f5:6d:7d:87:76: 7e:07:cf:5b:33:4e:87:a4:e1:d1:d9:96:a6:1e:9a: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:FA:0B:C1:A6:19:FB:C8:71:DE:DC:CF:48:E5:66:C4:7A:B1:4C X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:52:fd:71:cf:ce:ec:e7:df:ac:14:d8:2b:1f:fb:04:29:e8: 90:a6:4c:b9:a2:10:6f:1b:b5:b7:7e:a5:2d:d7:f1:73:67:81: 2e:41:f8:cb:ee:b4:3c:f7:b4:6d:99:f6:fa:ed:e5:ff:f2:7a: eb:6b:f8:83:a6:bb:dd:28:30:12:cb:7a:10:39:29:22:36:ec: cc:2d:f7:3d:c0:86:3b:eb:02:62:58:f0:97:ba:8f:e0:94:14: 5b:78:05:03:df:50:a6:32:22:d7:be:ce:15:b6:52:5e:8a:c8: 0e:d5:e2:40:05:77:76:6a:b8:14:a7:b4:d4:44:0b:7d:88:1f: 0d:4d:57:c7:20:0d:ce:c3:2e:d7:04:16:80:a6:bd:30:45:0d: f5:1b:e7:e0:bb:75:4b:95:da:b1:93:54:e2:13:62:76:43:1b: c1:7f:b6:dc:27:05:0d:07:9e:83:85:83:27:12:1f:03:9e:9d: 01:04:e1:64:5a:73:8b:04:c1:e3:12:75:37:10:1b:49:be:f5: 07:b5:3a:81:09:94:46:c8:13:7a:da:94:3d:e4:ce:42:04:ce: 86:01:96:25:79:10:3b:6d:cb:e7:ca:6c:d5:ed:09:09:85:b9: 68:59:9d:34:80:4c:81:50:10:ba:55:e1:bb:db:17:3f:78:47: b7:d5:f0:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwNTEyMTUzNjI4WhcNMjYwNTE5MTUzNjI4WjAYMRYwFAYD VQQDEw02YTAzNDhmZC01ZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wqP3ngbKX/ipdNF4yE4qVTv3u0gZCHMnqH6aFEHrnCwa6eeiI8bUq2sFUDW i/fPCHWzsoXiVS/EzFyEWg9OegYMPO1En4XJ2M+ef4SqEGW3o9Pmkz8H+WsXeWyC esHbae1+8EfOXgRiCOnLuwz3dMbwTxZgnk2ENTAfHkRDWES2MM/gi+X71lKBZz4l HmmoBHgbu2oQff+n/FJGwqDExoYHpsDPxMvlsGamwMDwITc8zD6cOBNAj9PchntS tbenWAAptM4P65QqwE7hUpaBEKDm0snF+/rR55VEHoON/OiQ1Ce4X66a5KBm9W19 h3Z+B89bM06HpOHR2ZamHpqYOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5h+gvB phn7yHHe3M9I5WbEerFMMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhlL9cc/O7OffrBTYKx/7BCnokKZMuaIQbxu1t36lLdfxc2eBLkH4y+60PPe0 bZn2+u3l//J662v4g6a73SgwEst6EDkpIjbszC33PcCGO+sCYljwl7qP4JQUW3gF A99QpjIi177OFbZSXorIDtXiQAV3dmq4FKe01EQLfYgfDU1XxyANzsMu1wQWgKa9 MEUN9Rvn4Lt1S5XasZNU4hNidkMbwX+23CcFDQeeg4WDJxIfA56dAQThZFpziwTB 4xJ1NxAbSb71B7U6gQmURsgTetqUPeTOQgTOhgGWJXkQO23L58ps1e0JCYW5aFmd NIBMgVAQulXhu9sXP3hHt9XwPQ== -----END CERTIFICATE-----Generated at Wed May 13 08:15:23 2026 by rpki-client