$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: OjQOSW3ng4AyesNVrB8YsG7phN8+hRlhWAJKXBfVUJU= Subject key identifier: D2:EE:56:BE:4A:28:E3:26:55:02:83:65:4C:4C:00:58:0D:60:5E:94 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 028D Signing time: Mon 11 May 2026 01:55:23 +0000 Manifest this update: Mon 11 May 2026 01:55:22 +0000 Manifest next update: Mon 18 May 2026 01:55:22 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: GzHA5Lon9aX14N6GnJZ+VlV0ti7Ud20OdnBVkj3EOQA=) 2: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=) 3: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: May 11 01:55:22 2026 GMT Not After : May 18 01:55:22 2026 GMT Subject: CN=6a01370a-8f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:3b:dc:9f:a9:d7:a7:28:9c:b8:30:89:d1: 21:be:3a:29:45:4f:04:b5:7b:86:50:2e:d6:35:70: ed:61:09:ff:55:4a:48:3e:55:b2:2a:cf:4c:66:1d: 8b:cd:6a:6a:04:45:27:a2:41:d0:36:3d:23:10:2a: eb:1f:40:a4:70:89:dc:06:46:91:68:37:a3:74:56: a4:55:9b:22:83:cd:15:f2:9b:72:ad:38:fc:84:77: 46:2a:82:e7:ae:c4:cd:58:d1:4d:1b:5b:24:75:ac: 00:9f:00:0e:ec:88:da:eb:67:08:d8:e3:22:33:57: 8e:76:0f:9b:1d:bb:70:56:c4:f5:4f:a6:5d:38:46: e4:87:57:ce:ad:70:b2:48:cb:8a:ec:a1:ce:59:55: cd:9a:97:00:6e:f6:f9:21:e9:38:02:0f:65:1b:df: cd:93:f3:9d:37:8f:42:7f:cc:3f:ff:5e:19:b3:66: ed:db:4e:c6:11:91:c0:28:a0:37:f2:55:25:a2:9f: 65:30:a8:d3:dc:c7:38:2b:4f:9e:36:2f:72:ab:88: dc:7f:5b:43:68:7f:89:2b:d7:c4:46:e4:83:e5:77: 8d:9d:5c:96:c1:32:58:ed:25:b1:a5:69:59:d1:51: 52:cd:02:e2:49:03:b9:75:19:87:1f:b8:35:57:32: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:56:BE:4A:28:E3:26:55:02:83:65:4C:4C:00:58:0D:60:5E:94 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:17:7e:12:48:b6:fe:ca:b1:46:94:0b:74:c0:18:d3:c7:1a: ee:2e:42:af:a3:55:e6:a2:83:c1:0a:d9:b1:96:ac:9e:e0:5f: f3:c3:fd:7e:ba:43:b4:d8:f1:03:cc:13:e6:04:6d:54:7f:01: fd:9f:ec:3f:28:8a:03:1c:df:03:34:97:c7:00:4e:1b:fd:ab: ba:e4:b9:39:fe:c2:81:ed:9b:9e:98:b0:92:1a:4a:88:40:38: fa:e6:85:30:30:97:a1:06:95:37:18:a8:a8:f8:62:a6:c9:c7: 2c:e8:39:af:c6:aa:1e:a0:35:99:e8:7b:10:7f:af:79:cd:bd: 4b:08:4b:a7:db:ac:14:70:86:65:30:e2:45:e3:ec:0a:77:97: a7:b3:94:28:f3:3b:eb:4a:0e:39:36:73:1a:2a:e3:3f:63:41: aa:af:bc:42:0e:8f:cf:6d:a3:d8:29:5c:cf:b8:f6:9f:3e:16: 66:36:03:d3:be:66:65:dc:16:6a:fe:41:84:37:8c:f9:5a:7f: fe:25:c3:e4:3e:13:9e:2e:5f:d3:a8:09:74:0c:33:c3:2f:54: f2:04:99:27:00:f3:5d:b0:54:1c:f9:f8:1a:67:7f:24:84:2a: 14:84:74:8d:c0:ab:68:04:a1:61:97:d0:6b:6f:5b:eb:e9:9f: c6:b7:18:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjYwNTExMDE1NTIyWhcNMjYwNTE4MDE1NTIyWjAYMRYwFAYD VQQDEw02YTAxMzcwYS04ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqg73J+p16conLgwidEhvjopRU8EtXuGUC7WNXDtYQn/VUpIPlWyKs9MZh2L zWpqBEUnokHQNj0jECrrH0CkcIncBkaRaDejdFakVZsig80V8ptyrTj8hHdGKoLn rsTNWNFNG1skdawAnwAO7Ija62cI2OMiM1eOdg+bHbtwVsT1T6ZdOEbkh1fOrXCy SMuK7KHOWVXNmpcAbvb5Iek4Ag9lG9/Nk/OdN49Cf8w//14Zs2bt207GEZHAKKA3 8lUlop9lMKjT3Mc4K0+eNi9yq4jcf1tDaH+JK9fERuSD5XeNnVyWwTJY7SWxpWlZ 0VFSzQLiSQO5dRmHH7g1VzKAwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLuVr5K KOMmVQKDZUxMAFgNYF6UMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACxd+Eki2/sqxRpQLdMAY08ca7i5Cr6NV5qKDwQrZsZasnuBf88P9frpDtNjx A8wT5gRtVH8B/Z/sPyiKAxzfAzSXxwBOG/2ruuS5Of7Cge2bnpiwkhpKiEA4+uaF MDCXoQaVNxioqPhipsnHLOg5r8aqHqA1meh7EH+vec29SwhLp9usFHCGZTDiRePs CneXp7OUKPM760oOOTZzGirjP2NBqq+8Qg6Pz22j2Clcz7j2nz4WZjYD075mZdwW av5BhDeM+Vp//iXD5D4Tni5f06gJdAwzwy9U8gSZJwDzXbBUHPn4Gmd/JIQqFIR0 jcCraAShYZfQa29b6+mfxrcYfw== -----END CERTIFICATE-----Generated at Wed May 13 01:21:53 2026 by rpki-client