$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: S0Lywl+3qDJ4jA/wFNQSQpZJnR4Uz88ysAHR33Zoats= Subject key identifier: 63:C0:46:37:EE:B1:54:5B:30:E6:5A:E9:ED:37:AE:5E:D3:72:6F:82 Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 17CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 17BD Signing time: Tue 12 May 2026 16:34:32 +0000 Manifest this update: Tue 12 May 2026 16:34:31 +0000 Manifest next update: Tue 19 May 2026 16:34:31 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: dBeCGerXSYajGRXvP9qjvjpTydRXezkU9i/Dmjwfs1A=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6091 (0x17cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: May 12 16:34:31 2026 GMT Not After : May 19 16:34:31 2026 GMT Subject: CN=6a035697-4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:6e:9f:0b:c2:24:3e:d3:a3:9f:49:10:06: 2b:2a:4f:d4:70:d4:f6:76:f1:a7:78:b3:3b:ef:91: b1:54:d8:d8:91:fb:2f:db:53:a6:a0:02:71:08:69: cc:b3:6c:58:9e:e1:83:f8:7e:e6:f7:4d:37:b1:26: f0:60:14:a3:ea:c2:a4:d6:76:8c:c0:33:04:f7:25: 07:6c:33:c7:d8:6a:69:7f:be:71:74:db:ee:45:74: 41:a5:d1:bf:58:b6:4d:c2:22:5b:c1:b0:89:98:d8: 8d:e6:08:e7:d9:e3:a4:7a:21:5c:97:e5:8c:8a:ea: 89:aa:64:33:55:5a:89:c5:49:6b:a4:7f:43:61:d0: 85:09:d0:f6:84:bf:e1:a3:15:ff:73:8c:d9:1e:53: eb:16:53:9a:69:d9:28:b9:16:7f:5e:8b:6a:5d:82: 7b:7d:8d:23:78:56:07:e7:d9:dd:6a:fc:68:c6:24: f4:88:1c:d4:31:bb:8e:8a:dd:5f:03:a0:7f:25:e8: 67:24:f6:28:9c:a8:1c:70:df:a8:a0:6e:8c:05:ff: cf:4b:5d:02:75:c7:6e:86:52:70:2a:c5:86:8d:db: c1:1b:40:91:cd:d0:95:f9:d4:5d:54:57:72:66:03: 27:2a:32:82:f7:07:af:d7:99:56:26:6c:e3:ec:1f: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:46:37:EE:B1:54:5B:30:E6:5A:E9:ED:37:AE:5E:D3:72:6F:82 X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:76:a6:94:15:3c:84:be:72:69:5e:d0:1d:86:2a:e2:e6:f4: a2:fe:1e:02:2b:97:6c:dc:ae:10:58:9e:93:28:94:5a:68:5f: 66:68:34:84:61:ac:40:a3:99:b2:36:d6:48:2b:67:85:5c:fe: 5b:5b:54:c6:d1:2d:1b:1c:ea:a0:5c:6e:4b:36:6e:7f:db:c4: f0:8d:bf:bf:36:86:a6:9e:da:5c:45:52:34:9c:7f:5b:f3:db: 0c:92:5b:39:a4:c1:4a:54:50:cd:97:e0:a7:a4:e9:14:68:71: c8:46:34:db:b7:a1:02:e6:62:20:ff:09:95:3a:ad:34:54:7d: 26:c7:57:4a:96:c5:fa:c2:5e:32:5e:8d:7e:ad:d9:f0:11:ae: b6:7c:dd:b5:ac:ce:1c:72:a2:94:5f:b5:f4:c9:89:3a:6e:30: 8d:a0:be:54:bd:a7:cc:eb:7a:96:f2:29:04:80:3c:2d:15:35: 7b:93:da:e0:b4:94:3a:b1:de:54:da:b7:cb:d6:4f:f0:a5:33: 00:1e:fa:1c:6a:87:9b:23:bd:1a:7f:f6:cb:02:82:7f:29:bb: ab:ca:5c:ec:e1:84:20:76:f4:a6:cd:4b:bf:44:fd:71:5b:ea: 6c:28:a7:4b:ff:70:71:ba:a1:b9:54:bd:78:84:92:8f:83:f4: 5f:5a:79:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjYwNTEyMTYzNDMxWhcNMjYwNTE5MTYzNDMxWjAYMRYwFAYD VQQDEw02YTAzNTY5Ny00YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dhunwvCJD7To59JEAYrKk/UcNT2dvGneLM775GxVNjYkfsv21OmoAJxCGnM s2xYnuGD+H7m9003sSbwYBSj6sKk1naMwDME9yUHbDPH2Gppf75xdNvuRXRBpdG/ WLZNwiJbwbCJmNiN5gjn2eOkeiFcl+WMiuqJqmQzVVqJxUlrpH9DYdCFCdD2hL/h oxX/c4zZHlPrFlOaadkouRZ/XotqXYJ7fY0jeFYH59ndavxoxiT0iBzUMbuOit1f A6B/JehnJPYonKgccN+ooG6MBf/PS10CdcduhlJwKsWGjdvBG0CRzdCV+dRdVFdy ZgMnKjKC9wev15lWJmzj7B9dWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPARjfu sVRbMOZa6e03rl7Tcm+CMB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwHamlBU8hL5yaV7QHYYq4ub0ov4eAiuXbNyuEFiekyiUWmhfZmg0hGGsQKOZ sjbWSCtnhVz+W1tUxtEtGxzqoFxuSzZuf9vE8I2/vzaGpp7aXEVSNJx/W/PbDJJb OaTBSlRQzZfgp6TpFGhxyEY027ehAuZiIP8JlTqtNFR9JsdXSpbF+sJeMl6Nfq3Z 8BGutnzdtazOHHKilF+19MmJOm4wjaC+VL2nzOt6lvIpBIA8LRU1e5Pa4LSUOrHe VNq3y9ZP8KUzAB76HGqHmyO9Gn/2ywKCfym7q8pc7OGEIHb0ps1Lv0T9cVvqbCin S/9wcbqhuVS9eISSj4P0X1p56w== -----END CERTIFICATE-----Generated at Wed May 13 04:40:14 2026 by rpki-client