$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json) Hash identifier: LFAfeq82UTWYrD5sek/hgVGAT1w1q1B0l4kxl5ihJNk= Subject key identifier: 2B:BC:96:44:7F:E4:57:B1:BA:CD:39:E1:30:6C:C6:E3:BA:F5:11:4F Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft Manifest number: 1B Signing time: Tue 12 May 2026 18:00:53 +0000 Manifest this update: Tue 12 May 2026 18:00:52 +0000 Manifest next update: Tue 19 May 2026 18:00:52 +0000 Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: z52w2kE9mZSFswh5MB/0dlRvZXxUH0c5mxtq6AIgFWQ=) 2: DCF45DB827C111F19C6102CF9F833773.roa (hash: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Validity Not Before: May 12 18:00:52 2026 GMT Not After : May 19 18:00:52 2026 GMT Subject: CN=6a036ad5-9b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:05:43:2b:0e:00:c8:5c:77:b7:43:84:9b: ee:8f:af:84:a3:98:0f:20:5c:42:25:8e:ef:32:a4: ea:86:53:1a:7a:e5:86:75:84:6a:b5:07:40:1f:0a: 54:86:27:44:b7:1c:57:45:de:ed:75:8c:ea:31:bd: 44:a5:5f:7f:10:95:1f:70:4f:5b:98:3c:1b:88:f6: 41:e7:2e:ff:cc:11:6d:d9:c7:8c:50:f8:69:32:23: 2b:a8:2b:ac:49:1f:57:a4:bf:92:82:c3:50:9e:57: 64:46:d1:2f:16:e5:95:3f:12:af:32:fe:ac:5b:0d: 37:d3:92:0e:29:bb:e6:00:6a:dd:0d:2d:89:b8:7b: ef:c5:e1:63:4e:eb:f0:db:2a:93:9e:ef:1b:3d:84: 64:fc:57:a0:ad:21:f4:cb:9e:be:a6:b3:df:2c:98: 57:4a:84:de:39:da:4b:8c:57:94:4b:da:8f:31:6e: 6d:6a:26:fa:e9:cd:4b:1e:b9:e9:89:ba:2b:80:e2: 36:c4:d7:c2:06:fc:20:f7:74:53:66:85:97:a3:d7: 68:b0:e7:37:a2:10:0b:fc:b2:fd:93:5c:3f:95:8c: cf:c0:a1:31:e6:de:11:e1:b4:d2:1c:44:4f:c7:b8: 0e:42:7d:a5:00:84:17:4c:d1:eb:6b:f1:fa:78:13: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BC:96:44:7F:E4:57:B1:BA:CD:39:E1:30:6C:C6:E3:BA:F5:11:4F X509v3 Authority Key Identifier: keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:fc:f5:c2:0c:a1:4d:15:71:b5:be:44:87:ab:bf:cd:87: 8c:9d:83:19:81:e9:14:ce:c5:39:73:aa:2f:74:2d:dc:4f:22: 82:a0:4e:50:33:59:99:e5:b5:9e:a7:f6:71:d7:c4:5d:4c:10: 6c:87:91:36:e0:7b:cf:c1:c4:e0:05:b4:18:34:b2:a3:5c:90: 8a:07:6b:26:cf:4a:f3:d9:4c:08:43:3f:dd:52:b8:77:db:20: 4b:f7:6d:a2:6a:4f:7d:d7:52:7f:05:c3:64:03:41:58:c6:5d: de:5e:b4:93:88:f6:f6:6f:55:04:d2:d0:ae:ad:36:93:f5:3c: cf:1e:4a:8b:fe:d6:0b:93:d8:6d:02:c5:15:3e:7b:a0:31:2e: 0c:08:a9:92:f0:00:15:84:c3:a5:ca:1e:65:74:fb:25:0f:30: 76:a9:1b:e3:31:ec:b5:6d:ad:a4:c8:7f:9f:7d:ee:43:45:b5: 18:00:c0:b4:bc:a5:2a:d2:a4:5d:7a:c8:57:6f:89:6e:64:42: e0:70:83:32:f4:80:0d:3d:09:23:84:2e:4a:77:a9:c2:45:80: ee:83:ca:15:7f:e5:f0:db:62:2a:86:5c:99:a8:e0:cf:15:e7: 5f:6a:e2:78:7f:73:0d:c3:c8:26:74:02:71:4c:f2:3a:99:b4: 2d:84:86:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzM3RjExMC8GA1UEBRMoODUxOUZGMkM2ODA4MkNDNjQ3QjgyODc2MEI0QjdCMTQ5 NUVDODRDQjAeFw0yNjA1MTIxODAwNTJaFw0yNjA1MTkxODAwNTJaMBgxFjAUBgNV BAMTDTZhMDM2YWQ1LTliOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWEwVDKw4AyFx3t0OEm+6Pr4SjmA8gXEIlju8ypOqGUxp65YZ1hGq1B0AfClSG J0S3HFdF3u11jOoxvUSlX38QlR9wT1uYPBuI9kHnLv/MEW3Zx4xQ+GkyIyuoK6xJ H1ekv5KCw1CeV2RG0S8W5ZU/Eq8y/qxbDTfTkg4pu+YAat0NLYm4e+/F4WNO6/Db KpOe7xs9hGT8V6CtIfTLnr6ms98smFdKhN452kuMV5RL2o8xbm1qJvrpzUseuemJ uiuA4jbE18IG/CD3dFNmhZej12iw5zeiEAv8sv2TXD+VjM/AoTHm3hHhtNIcRE/H uA5CfaUAhBdM0etr8fp4EzkLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK7yWRH/k V7G6zTnhMGzG47r1EU8wHwYDVR0jBBgwFoAUhRn/LGgILMZHuCh2C0t7FJXshMsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzdGLzFCNUJGN0ZFMjdB QTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1aSHVDaDJDMHQ3RkpYc2hN cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaFJuX0xHZ0lMTVpIdUNoMkMwdDdGSlhzaE1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MzdGLzFCNUJGN0ZFMjdBQTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1a SHVDaDJDMHQ3RkpYc2hNcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJePz1wgyhTRVxtb5Eh6u/zYeMnYMZgekUzsU5c6ovdC3cTyKCoE5QM1mZ5bWe p/Zx18RdTBBsh5E24HvPwcTgBbQYNLKjXJCKB2smz0rz2UwIQz/dUrh32yBL922i ak9911J/BcNkA0FYxl3eXrSTiPb2b1UE0tCurTaT9TzPHkqL/tYLk9htAsUVPnug MS4MCKmS8AAVhMOlyh5ldPslDzB2qRvjMey1ba2kyH+ffe5DRbUYAMC0vKUq0qRd eshXb4luZELgcIMy9IANPQkjhC5Kd6nCRYDug8oVf+Xw22IqhlyZqODPFedfauJ4 f3MNw8gmdAJxTPI6mbQthIYp -----END CERTIFICATE-----Generated at Wed May 13 06:36:07 2026 by rpki-client