$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: ZHzg4/C0Ja4D4+1FF2yWGW0vcvdWLt3wbM/CuqSUmEU= Subject key identifier: D4:39:1B:6F:81:81:8E:F1:5A:A0:34:6C:92:B6:A3:29:2E:72:46:6C Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1E05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1DD0 Signing time: Tue 12 May 2026 16:06:59 +0000 Manifest this update: Tue 12 May 2026 16:06:59 +0000 Manifest next update: Tue 19 May 2026 16:06:59 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: g3tq9fa6DOTY4aLc12gfiD7bq9oxFTk0LgpufisWfRY=) 2: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: SnQLKrTdABnlhkWQ+AVqddVj1mUuPuJmeCU6LxGP6eo=) 3: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: aM1BSZ3PF2IzE+AJHUzu7Yk2PU3p6ogZh2Ox+iMNzws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7685 (0x1e05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: May 12 16:06:59 2026 GMT Not After : May 19 16:06:59 2026 GMT Subject: CN=6a035023-2b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:53:78:d1:1a:9b:d6:bf:61:97:c3:1c:d5: b3:8c:1a:09:88:4c:1d:ce:19:95:2f:dc:35:c9:19: f1:5f:9d:56:00:2a:c5:32:93:82:34:db:09:26:f5: 03:d4:e0:4f:39:e8:37:d9:fc:23:ce:53:e5:25:2a: 04:9f:fc:74:41:e3:78:74:3e:35:af:15:32:0b:ab: a3:22:e2:33:9b:cc:f1:7e:82:76:0b:56:f7:39:84: 6e:cf:a1:c8:cf:4c:88:4f:3d:2c:09:e7:e0:75:34: 76:a0:d0:bc:49:5a:ae:e9:a3:0b:bb:c5:18:8a:c7: 03:28:6c:90:b0:8b:67:fc:3d:4a:97:2c:3f:4a:17: 73:6a:b8:c5:54:99:e7:57:c5:7e:77:00:ac:b0:f3: 95:ab:90:49:8e:04:7a:15:d7:4d:79:c2:8e:22:b9: db:3d:43:da:7a:2f:40:ee:cb:a0:48:33:c6:ae:17: 6f:07:4d:e2:ac:aa:c1:67:f2:6b:dd:25:22:d0:1a: 29:d1:01:89:e1:ce:f3:51:29:68:91:39:a7:e6:f8: 5a:87:c9:7e:37:e4:67:9f:5a:fa:d0:2e:41:8d:49: 6f:08:d2:54:84:8d:f8:c8:96:e9:fc:84:24:0c:59: f8:66:8b:86:04:6f:ea:a8:be:2a:56:ce:8c:69:f9: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:1B:6F:81:81:8E:F1:5A:A0:34:6C:92:B6:A3:29:2E:72:46:6C X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fc:25:a9:f6:c9:b7:f9:ef:c6:d0:3e:5f:a1:ca:d0:1e:db: c5:ca:ff:84:e5:d3:e4:9f:fd:74:83:63:f8:33:30:77:be:9e: f1:87:d4:80:04:ce:72:37:1e:20:71:10:0e:b8:2a:a2:0a:ad: d5:41:6e:d5:af:0e:ec:80:90:e4:aa:8b:5b:ae:1d:09:bb:68: b9:4a:6f:c0:f3:70:29:17:a1:98:16:17:72:9a:25:5f:c0:14: 1d:03:b5:47:1d:17:14:c1:0a:20:e0:d3:a4:38:53:40:32:a5: ee:d2:80:c1:47:4a:40:99:74:97:30:b7:a0:ca:3c:a3:de:91: b7:d4:b9:35:e1:91:86:43:dd:04:7c:12:cf:42:7b:55:a8:7f: 01:8c:2f:4a:cb:71:de:72:96:5e:6d:5b:c7:f6:c3:9e:a2:17: 63:36:fe:f9:1b:ec:c3:b7:fa:b2:b3:7e:d5:47:09:81:b6:cc: 38:f0:96:8d:74:8c:f0:48:89:ea:71:4e:1f:ca:ee:4c:62:9c: f1:b6:31:42:da:94:70:62:46:36:c5:4f:01:e4:6f:49:fa:1e: 9b:5d:38:ad:4e:7d:4d:88:65:39:f6:4a:52:79:c9:68:05:d9: c6:20:78:39:ea:35:df:e2:71:75:39:c6:a3:f8:3f:c8:a1:db: 20:db:92:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjYwNTEyMTYwNjU5WhcNMjYwNTE5MTYwNjU5WjAYMRYwFAYD VQQDEw02YTAzNTAyMy0yYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDFTeNEam9a/YZfDHNWzjBoJiEwdzhmVL9w1yRnxX51WACrFMpOCNNsJJvUD 1OBPOeg32fwjzlPlJSoEn/x0QeN4dD41rxUyC6ujIuIzm8zxfoJ2C1b3OYRuz6HI z0yITz0sCefgdTR2oNC8SVqu6aMLu8UYiscDKGyQsItn/D1Klyw/ShdzarjFVJnn V8V+dwCssPOVq5BJjgR6FddNecKOIrnbPUPaei9A7sugSDPGrhdvB03irKrBZ/Jr 3SUi0Bop0QGJ4c7zUSlokTmn5vhah8l+N+Rnn1r60C5BjUlvCNJUhI34yJbp/IQk DFn4ZouGBG/qqL4qVs6Mafnd6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQ5G2+B gY7xWqA0bJK2oykuckZsMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfwlqfbJt/nvxtA+X6HK0B7bxcr/hOXT5J/9dINj+DMwd76e8YfUgATOcjce IHEQDrgqogqt1UFu1a8O7ICQ5KqLW64dCbtouUpvwPNwKRehmBYXcpolX8AUHQO1 Rx0XFMEKIODTpDhTQDKl7tKAwUdKQJl0lzC3oMo8o96Rt9S5NeGRhkPdBHwSz0J7 Vah/AYwvSstx3nKWXm1bx/bDnqIXYzb++Rvsw7f6srN+1UcJgbbMOPCWjXSM8EiJ 6nFOH8ruTGKc8bYxQtqUcGJGNsVPAeRvSfoem104rU59TYhlOfZKUnnJaAXZxiB4 Oeo13+JxdTnGo/g/yKHbINuShw== -----END CERTIFICATE-----Generated at Wed May 13 16:57:21 2026 by rpki-client