$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: LtmoPRGRrwjqtvzEPo/fTGYJ1BAdFaze2PdC5n/1P0w= Subject key identifier: B3:E8:2C:CD:D5:66:EB:4E:71:60:35:70:E3:C1:AF:37:E4:9D:6D:64 Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: 027D Signing time: Mon 11 May 2026 02:07:23 +0000 Manifest this update: Mon 11 May 2026 02:07:22 +0000 Manifest next update: Mon 18 May 2026 02:07:22 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: 3R58QDhMyIZXp/jEn8F59VlzAF4cnJuXNpSC8BtbaFw=) 2: B92D709A3DA111F1937442D2C7833773.roa (hash: Zk364A8Ht5Pfoz1dHcfIcqHGWbjHj2aRO5Xc6nvEnQA=) 3: BDBDF8FE2CDB11F1B964405E9D833773.roa (hash: N2ouqxTaJTdT3cqwTn1OVXdT/dBvearlaUPdfdlosfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: May 11 02:07:22 2026 GMT Not After : May 18 02:07:22 2026 GMT Subject: CN=6a0139db-906a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:b4:6a:7a:bd:7e:96:fc:7b:68:c3:e1:56: d4:58:ca:56:6f:04:36:b5:53:b4:d9:bb:40:5e:7b: c1:ac:e8:4d:fd:22:4c:c9:89:7f:71:b7:2f:23:32: 61:6a:f5:2a:e8:6c:94:44:b4:ab:d3:af:d6:be:93: 1f:ab:bf:11:44:e5:62:fd:3e:97:a5:dd:74:0d:f3: 88:58:17:29:67:a0:e2:9b:d4:4d:8b:ce:ac:a7:ba: 02:c4:40:c4:9e:11:2a:9c:24:8b:ed:d3:2a:4c:94: bd:bf:20:18:29:48:0e:bf:78:60:ae:e5:c8:3a:9a: 8a:95:2a:56:89:9e:5b:15:e6:ec:71:62:20:cc:6f: 42:de:d5:44:a7:aa:ba:ea:a1:32:01:6c:5b:da:60: 61:52:70:21:5b:1c:0b:05:18:e8:d9:8b:5b:8f:e5: 9b:4f:c3:46:f9:bd:4c:99:b3:eb:e9:e2:6e:a9:29: 17:45:8c:0f:46:ec:fd:bf:a7:51:37:3c:48:c4:67: 2d:8d:78:aa:3e:d2:b1:69:bf:38:bc:5f:c2:d8:44: 98:11:59:b3:fa:c2:46:db:10:44:27:4a:14:a1:73: 04:d5:e1:26:99:74:7e:f8:b3:89:9d:83:50:99:41: 31:80:1a:6e:e1:95:31:35:84:14:b5:98:13:7f:32: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E8:2C:CD:D5:66:EB:4E:71:60:35:70:E3:C1:AF:37:E4:9D:6D:64 X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:e4:1a:72:16:a3:b5:6d:17:2e:55:a5:5d:86:52:fd:e6: 65:09:c6:c7:e0:c1:12:42:6a:1f:6c:d2:3e:20:3a:3f:9b:a0: 2b:39:2d:c0:00:18:49:88:6d:a7:43:af:0d:d9:ab:a5:98:8f: 58:96:d8:59:7f:29:16:e0:0d:a7:51:ef:3c:3c:3a:7b:9e:8b: ad:24:87:60:c6:53:bb:61:07:a7:9e:58:f1:76:e8:29:87:f4: 4c:6c:a1:a6:7b:a2:d1:b9:f3:87:05:c5:d0:fa:fb:da:f9:8f: 43:02:12:75:ca:55:da:bd:ef:32:c8:72:1d:c0:0f:12:1e:59: e0:4a:08:6e:97:11:b0:d7:14:06:d6:aa:91:8d:30:2c:08:8b: 5e:48:f6:fa:28:83:e4:f6:22:99:7a:e1:b3:61:be:85:32:d8: fe:3f:b8:b5:01:c3:1e:20:49:fa:e2:4d:d2:e9:67:02:20:b9: ec:ae:85:10:83:cc:b8:46:11:fb:f4:91:65:64:ed:eb:7c:16: d9:1e:88:be:3c:b7:d6:30:93:89:3a:6c:7a:14:e2:18:29:77: 65:73:47:15:2e:51:c7:be:9c:11:de:3b:22:fe:cd:00:4a:a6: bd:8a:8d:25:4e:f2:9c:96:4c:95:38:c8:a7:c3:30:be:1b:19: be:3a:64:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjYwNTExMDIwNzIyWhcNMjYwNTE4MDIwNzIyWjAYMRYwFAYD VQQDEw02YTAxMzlkYi05MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodG0anq9fpb8e2jD4VbUWMpWbwQ2tVO02btAXnvBrOhN/SJMyYl/cbcvIzJh avUq6GyURLSr06/WvpMfq78RROVi/T6Xpd10DfOIWBcpZ6Dim9RNi86sp7oCxEDE nhEqnCSL7dMqTJS9vyAYKUgOv3hgruXIOpqKlSpWiZ5bFebscWIgzG9C3tVEp6q6 6qEyAWxb2mBhUnAhWxwLBRjo2Ytbj+WbT8NG+b1MmbPr6eJuqSkXRYwPRuz9v6dR NzxIxGctjXiqPtKxab84vF/C2ESYEVmz+sJG2xBEJ0oUoXME1eEmmXR++LOJnYNQ mUExgBpu4ZUxNYQUtZgTfzIN9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPoLM3V ZutOcWA1cOPBrzfknW1kMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5nkGnIWo7VtFy5VpV2GUv3mZQnGx+DBEkJqH2zSPiA6P5ugKzktwAAYSYht p0OvDdmrpZiPWJbYWX8pFuANp1HvPDw6e56LrSSHYMZTu2EHp55Y8XboKYf0TGyh pnui0bnzhwXF0Pr72vmPQwISdcpV2r3vMshyHcAPEh5Z4EoIbpcRsNcUBtaqkY0w LAiLXkj2+iiD5PYimXrhs2G+hTLY/j+4tQHDHiBJ+uJN0ulnAiC57K6FEIPMuEYR +/SRZWTt63wW2R6Ivjy31jCTiTpsehTiGCl3ZXNHFS5Rx76cEd47Iv7NAEqmvYqN JU7ynJZMlTjIp8MwvhsZvjpkLA== -----END CERTIFICATE-----Generated at Wed May 13 02:24:53 2026 by rpki-client