$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: YPMZo7H5hZawqMPLrcf7PKoaRT00Ytno4Bxl1wmC1lM= Subject key identifier: 0B:9D:80:E1:61:AC:63:37:84:96:47:4A:8B:78:32:32:0F:25:3C:B0 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 0235 Signing time: Wed 13 May 2026 02:42:43 +0000 Manifest this update: Wed 13 May 2026 02:42:43 +0000 Manifest next update: Wed 20 May 2026 02:42:43 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: LAF7y6VwNJsfcLAqBA5ULc8vOWlCoWAo24MNuKIdht4=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: gwP3PNE674NeJVzpcX/6dV+VmggMeTrL/+BFEHoqdPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: May 13 02:42:43 2026 GMT Not After : May 20 02:42:43 2026 GMT Subject: CN=6a03e523-ca36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:02:6f:77:7c:36:2f:13:bf:b8:5f:0a:3b: d3:0d:2d:30:c9:c8:a9:bf:4a:4c:bf:12:f4:e5:67: 14:16:e6:d9:3a:e4:5e:b9:dd:e1:b3:82:ed:7a:f4: f0:ae:88:f7:74:59:53:ac:1f:c5:cb:83:22:be:a7: 78:cb:51:f9:b3:ad:9c:51:01:13:63:62:70:30:48: 20:50:f3:54:7b:2c:36:f3:c1:52:15:c7:71:fe:47: a9:b9:44:4b:8b:14:52:cd:6e:1d:76:78:56:b5:55: 62:0e:47:0d:0f:49:2c:a7:a1:f1:93:44:59:ad:74: 4c:ce:87:9b:35:98:9f:04:fb:f9:47:b6:1f:0d:03: ef:13:b6:9c:37:c6:53:fb:f8:b6:76:0d:bd:fa:c3: 1d:e9:ca:73:8a:c3:50:4c:1f:dc:ad:4f:df:27:2b: 8f:e5:eb:5e:b7:72:e2:11:35:03:ea:45:c5:95:89: 91:2e:a6:8c:a0:4d:cb:a0:9a:34:1c:e5:b7:a6:00: 93:d5:cd:78:91:85:14:c3:91:57:dd:7d:3e:09:8b: c0:e7:1b:5c:f4:0c:ec:24:42:d4:51:be:77:4a:46: 30:c2:0e:f2:5a:7f:23:e5:15:44:32:4d:52:c7:b9: aa:4f:50:7c:7e:3e:31:a4:8a:8f:61:64:58:6d:82: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9D:80:E1:61:AC:63:37:84:96:47:4A:8B:78:32:32:0F:25:3C:B0 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d1:61:47:4b:ea:69:b3:c6:37:77:88:d6:36:95:22:75:5f: 52:12:6b:a3:4b:fa:cf:36:5c:47:55:26:05:90:85:db:28:e0: 06:36:d3:c8:8d:98:7f:c4:f9:23:f6:65:fa:0f:e8:af:75:f0: a1:d6:79:ab:39:67:15:bb:07:ba:27:04:b9:af:72:d2:ff:1c: 55:40:32:67:bc:c8:6f:f3:50:c9:a2:6c:91:0f:50:2e:68:db: 7e:6a:12:60:56:9b:9b:0c:0b:74:1a:26:29:21:22:78:00:50: 0e:6b:1e:27:b1:9d:ff:65:d7:ac:d0:08:d5:76:d9:1d:5a:cb: 0e:09:f7:3d:96:25:0c:70:11:6d:0e:58:63:cf:9a:e5:7e:1e: ea:5e:68:4b:a4:c3:3a:4e:42:cc:22:64:d4:f4:45:92:b7:ef: a1:63:e5:d6:e9:39:38:ca:1d:97:9d:2f:c2:c4:ef:2f:43:1b: 4a:e2:5c:a1:e8:31:2d:db:aa:f7:1a:de:99:f9:33:c4:a0:50: fe:49:fe:3c:f9:3e:64:2c:da:24:a9:2e:ff:69:73:1f:87:bf: 8e:6d:68:36:db:1f:48:8c:5d:94:35:5e:44:51:79:ef:49:4b: 3c:ea:ed:9f:54:09:38:3b:35:ad:28:90:d0:b0:3d:dd:2a:5d: 0f:45:96:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwNTEzMDI0MjQzWhcNMjYwNTIwMDI0MjQzWjAYMRYwFAYD VQQDEw02YTAzZTUyMy1jYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnQCb3d8Ni8Tv7hfCjvTDS0wycipv0pMvxL05WcUFubZOuReud3hs4LtevTw roj3dFlTrB/Fy4Mivqd4y1H5s62cUQETY2JwMEggUPNUeyw288FSFcdx/kepuURL ixRSzW4ddnhWtVViDkcND0ksp6Hxk0RZrXRMzoebNZifBPv5R7YfDQPvE7acN8ZT +/i2dg29+sMd6cpzisNQTB/crU/fJyuP5etet3LiETUD6kXFlYmRLqaMoE3LoJo0 HOW3pgCT1c14kYUUw5FX3X0+CYvA5xtc9AzsJELUUb53SkYwwg7yWn8j5RVEMk1S x7mqT1B8fj4xpIqPYWRYbYKNeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAudgOFh rGM3hJZHSot4MjIPJTywMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwdFhR0vqabPGN3eI1jaVInVfUhJro0v6zzZcR1UmBZCF2yjgBjbTyI2Yf8T5 I/Zl+g/or3XwodZ5qzlnFbsHuicEua9y0v8cVUAyZ7zIb/NQyaJskQ9QLmjbfmoS YFabmwwLdBomKSEieABQDmseJ7Gd/2XXrNAI1XbZHVrLDgn3PZYlDHARbQ5YY8+a 5X4e6l5oS6TDOk5CzCJk1PRFkrfvoWPl1uk5OModl50vwsTvL0MbSuJcoegxLduq 9xremfkzxKBQ/kn+PPk+ZCzaJKku/2lzH4e/jm1oNtsfSIxdlDVeRFF570lLPOrt n1QJODs1rSiQ0LA93SpdD0WWDw== -----END CERTIFICATE-----Generated at Wed May 13 10:05:47 2026 by rpki-client