$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: ea0yJmaEaQo574LZIEVp73ejVspaRheedtLJGCIfPUE= Subject key identifier: D8:53:61:A1:3E:51:B6:C1:E2:4B:A2:AC:B9:89:87:18:CF:14:CF:41 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0851 Signing time: Tue 12 May 2026 20:56:55 +0000 Manifest this update: Tue 12 May 2026 20:56:55 +0000 Manifest next update: Tue 19 May 2026 20:56:55 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: cj5dTdJL/tKfBTxjxjkdppsNc1imUh/ax2ATZUSGnuc=) 2: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=) 3: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: qKtjyRx0lLlv/KwvG7LBwoOnxK1cXnW5MTg39ctLvtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: May 12 20:56:55 2026 GMT Not After : May 19 20:56:55 2026 GMT Subject: CN=6a039417-cebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:71:8f:bb:31:e2:74:ad:41:a1:b0:6c:78: 5a:f6:72:bc:11:3d:7b:67:e7:af:cd:f8:bd:54:43: 93:ba:81:99:29:ad:0e:c8:36:28:20:92:42:f4:c6: b0:45:23:9d:85:cb:f8:2d:b6:0a:43:bf:ab:f4:26: 4e:ee:75:e6:b4:d2:ee:e7:94:74:0e:21:40:fb:29: c7:2f:72:e7:fd:33:9e:81:86:3a:1c:71:4d:fa:1b: 1d:2b:8d:4f:c8:25:77:1b:3b:9b:0d:12:64:8f:6f: 0c:d5:27:9c:19:08:53:e3:b7:1b:86:80:f7:46:90: 0b:6e:fe:d2:44:3e:7f:87:7b:5f:12:6f:83:e6:f1: c2:73:76:bd:dd:29:1c:50:e2:c0:f7:aa:b4:56:7c: 34:7d:ab:df:a0:dc:17:b3:57:cf:dd:95:10:ea:e5: 95:3a:4b:71:aa:74:77:16:40:06:94:a9:af:de:6d: a3:9d:40:f4:f5:11:34:f0:d4:62:53:46:61:9b:14: 5c:c9:57:d7:54:09:62:0a:a7:9a:a5:cc:4f:48:d4: 7d:fc:06:3e:78:3a:a4:f7:ca:24:da:18:f0:3e:c2: 0c:48:c2:2f:58:85:0b:80:14:de:1a:e6:50:d0:c1: 85:3b:6a:29:9c:6b:1a:ef:36:d0:7d:da:2f:cb:11: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:61:A1:3E:51:B6:C1:E2:4B:A2:AC:B9:89:87:18:CF:14:CF:41 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:11:77:78:93:04:49:43:43:3d:98:28:af:8e:29:be:0f: 02:cc:1c:2d:9a:d8:eb:87:45:b9:f6:89:12:e4:1c:15:22:a9: a4:de:41:73:3c:8c:c5:44:8c:b5:32:bc:c3:86:07:14:f9:53: 4d:eb:ad:5a:e9:9c:a5:97:0b:b8:18:7d:d6:96:5c:78:50:0f: 42:b9:97:0f:f1:73:c1:fc:6a:3b:43:dd:1f:38:d2:a2:77:8c: b7:25:a4:37:69:fe:87:5c:6e:9b:cf:03:48:b0:91:ef:04:91: c1:eb:2e:35:6e:2b:ae:24:e5:11:43:99:47:16:59:9d:c0:80: 79:22:e8:91:bc:61:b5:b4:64:e9:c3:67:23:aa:88:06:1e:a9: 99:a1:ad:e5:e2:18:8c:0f:2e:07:28:79:bf:7e:6a:8a:c3:1c: fa:3d:19:b6:11:5c:ad:44:0a:53:c0:94:a5:e3:b2:9c:97:3d: c6:04:33:e1:8c:71:b8:ac:cb:d4:c9:f8:d0:34:83:8f:05:1c: 1b:19:45:83:8c:f6:15:8d:26:9f:a6:bf:9f:14:b5:a4:53:a5: 24:c5:8d:5a:14:59:3b:5c:d7:af:74:d7:ea:78:1a:05:43:3f: c2:8a:f9:8d:e1:d0:ea:19:74:1b:7f:cc:e1:ce:ce:69:c4:aa: e4:b1:42:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYwNTEyMjA1NjU1WhcNMjYwNTE5MjA1NjU1WjAYMRYwFAYD VQQDEw02YTAzOTQxNy1jZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D1xj7sx4nStQaGwbHha9nK8ET17Z+evzfi9VEOTuoGZKa0OyDYoIJJC9Maw RSOdhcv4LbYKQ7+r9CZO7nXmtNLu55R0DiFA+ynHL3Ln/TOegYY6HHFN+hsdK41P yCV3GzubDRJkj28M1SecGQhT47cbhoD3RpALbv7SRD5/h3tfEm+D5vHCc3a93Skc UOLA96q0Vnw0favfoNwXs1fP3ZUQ6uWVOktxqnR3FkAGlKmv3m2jnUD09RE08NRi U0ZhmxRcyVfXVAliCqeapcxPSNR9/AY+eDqk98ok2hjwPsIMSMIvWIULgBTeGuZQ 0MGFO2opnGsa7zbQfdovyxGizwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhTYaE+ UbbB4kuirLmJhxjPFM9BMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9ERd3iTBElDQz2YKK+OKb4PAswcLZrY64dFufaJEuQcFSKppN5BczyMxUSM tTK8w4YHFPlTTeutWumcpZcLuBh91pZceFAPQrmXD/FzwfxqO0PdHzjSoneMtyWk N2n+h1xum88DSLCR7wSRwesuNW4rriTlEUOZRxZZncCAeSLokbxhtbRk6cNnI6qI Bh6pmaGt5eIYjA8uByh5v35qisMc+j0ZthFcrUQKU8CUpeOynJc9xgQz4YxxuKzL 1Mn40DSDjwUcGxlFg4z2FY0mn6a/nxS1pFOlJMWNWhRZO1zXr3TX6ngaBUM/wor5 jeHQ6hl0G3/M4c7OacSq5LFC5Q== -----END CERTIFICATE-----Generated at Wed May 13 14:48:50 2026 by rpki-client