$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json) Hash identifier: w3LUmeMxosM7gZcw1q4DavkG+PlHsv/oHkZtOZDggJs= Subject key identifier: E0:BA:67:8F:27:41:32:EC:86:7A:16:8C:17:09:A7:93:95:63:21:54 Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft Manifest number: 08 Signing time: Mon 11 May 2026 09:22:59 +0000 Manifest this update: Mon 11 May 2026 09:22:59 +0000 Manifest next update: Mon 18 May 2026 09:22:59 +0000 Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: HlL9Unq1yQkUPB2IhRmqs4kVNQsh/kCv7OKEFQZEBfk=) 2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: May 11 09:22:59 2026 GMT Not After : May 18 09:22:59 2026 GMT Subject: CN=6a019ff3-3677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:15:3f:f1:2c:f1:98:f1:99:05:5d:00:61: 2b:1e:20:26:1c:33:4e:aa:39:31:c0:07:d8:42:88: b0:51:0c:36:50:3c:98:d1:bc:84:d1:8b:90:51:48: 15:ad:91:90:ba:1d:9a:f4:c5:2b:13:78:a0:d6:1c: eb:47:b1:40:31:4b:f5:19:2e:5f:94:65:c0:ba:c0: 42:85:1a:5f:01:f3:fc:97:10:ce:ce:66:da:bb:af: 5b:1a:c6:22:e7:44:92:70:6c:16:e0:72:b1:38:ed: cb:b8:b7:6a:b1:1f:99:30:38:ae:51:ea:c7:d2:2f: 0d:85:13:94:e3:a9:45:83:c6:26:f1:46:a8:c4:ed: 23:cc:56:72:7a:26:8d:7c:a4:63:06:27:5f:ca:50: d3:0e:0a:5d:6c:42:4e:f0:b4:81:4b:6f:7a:6a:46: b2:f8:96:8c:1d:c9:c8:a8:fe:56:7e:1a:5e:ec:b9: 4b:e2:99:03:31:cc:79:c6:4e:3b:22:05:9e:33:29: b7:c5:0a:50:fb:39:c4:7a:6c:6f:2d:47:46:e5:8e: 41:1b:c8:46:c1:83:aa:2f:1d:f2:47:6b:c9:6b:5a: a9:af:c8:e3:40:6e:ec:91:3f:c6:7c:bd:f2:4c:2c: 84:2e:5b:e3:dc:27:2d:e3:58:e1:ce:f9:1a:00:de: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:67:8F:27:41:32:EC:86:7A:16:8C:17:09:A7:93:95:63:21:54 X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1e:3a:be:98:02:5f:37:b9:6e:c9:72:dd:44:99:c6:04:60: ef:33:ba:eb:d8:30:be:c5:e3:0c:5f:fc:50:24:a8:7d:9a:1f: 62:8d:28:36:4a:d8:d1:bf:b5:8f:75:d7:c6:4c:8e:55:5b:43: 81:ba:5d:53:08:c8:54:d9:0d:15:da:37:a7:8a:5c:33:34:70: 77:94:48:36:ea:1d:d0:ad:c0:61:35:e2:81:6c:1a:5c:6c:44: 90:33:6d:42:14:ca:14:ee:c8:65:b3:02:a2:f4:84:3c:e2:84: ae:4d:df:12:6d:3b:ef:c2:91:3a:76:a3:ce:81:e2:db:31:cf: 3e:93:1d:c8:a8:4e:95:05:30:c4:a7:f1:c5:c1:79:8a:47:aa: b0:ef:3a:59:df:1b:1b:bd:17:f2:c3:21:91:58:1e:63:b4:45: 3f:ad:17:4b:d9:c6:b7:ea:58:59:12:88:55:d3:45:ba:a2:5a: 96:57:85:80:d7:ec:49:00:9d:d5:b8:d8:05:24:f1:49:40:9a: 6d:cf:d3:74:0d:db:45:c3:34:88:aa:d7:c1:b2:70:2e:a0:4f: bc:7c:93:dd:95:11:47:8b:ab:da:98:c7:6a:f8:ad:ed:e4:6f: f5:03:fc:bf:69:4f:1d:d6:a1:65:6a:4e:61:99:3a:f7:2c:1c: 64:8c:de:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjA1MTEwOTIyNTlaFw0yNjA1MTgwOTIyNTlaMBgxFjAUBgNV BAMTDTZhMDE5ZmYzLTM2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXrRU/8SzxmPGZBV0AYSseICYcM06qOTHAB9hCiLBRDDZQPJjRvITRi5BRSBWt kZC6HZr0xSsTeKDWHOtHsUAxS/UZLl+UZcC6wEKFGl8B8/yXEM7OZtq7r1saxiLn RJJwbBbgcrE47cu4t2qxH5kwOK5R6sfSLw2FE5TjqUWDxibxRqjE7SPMVnJ6Jo18 pGMGJ1/KUNMOCl1sQk7wtIFLb3pqRrL4lowdycio/lZ+Gl7suUvimQMxzHnGTjsi BZ4zKbfFClD7OcR6bG8tR0bljkEbyEbBg6ovHfJHa8lrWqmvyONAbuyRP8Z8vfJM LIQuW+PcJy3jWOHO+RoA3uhJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4LpnjydB MuyGehaMFwmnk5VjIVQwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPHjq+mAJfN7luyXLdRJnGBGDvM7rr2DC+xeMMX/xQJKh9mh9ijSg2StjRv7WP ddfGTI5VW0OBul1TCMhU2Q0V2jenilwzNHB3lEg26h3QrcBhNeKBbBpcbESQM21C FMoU7shlswKi9IQ84oSuTd8SbTvvwpE6dqPOgeLbMc8+kx3IqE6VBTDEp/HFwXmK R6qw7zpZ3xsbvRfywyGRWB5jtEU/rRdL2ca36lhZEohV00W6olqWV4WA1+xJAJ3V uNgFJPFJQJptz9N0DdtFwzSIqtfBsnAuoE+8fJPdlRFHi6vamMdq+K3t5G/1A/y/ aU8d1qFlak5hmTr3LBxkjN48 -----END CERTIFICATE-----Generated at Tue May 12 22:13:21 2026 by rpki-client