$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: 5HiIOPsGRMJn4LVOHJ2shYZwt5vAJBZy/dwpp1bln7A= Subject key identifier: 16:A0:F2:68:B1:B4:71:F6:EB:AB:72:AD:61:30:49:D8:82:C0:45:9E Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CFC Signing time: Tue 12 May 2026 18:19:13 +0000 Manifest this update: Tue 12 May 2026 18:19:12 +0000 Manifest next update: Tue 19 May 2026 18:19:12 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: dcOEQ0iUKIzPFnCOGmGg5OA9gw7rELAQ82RiaP8jfps=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: May 12 18:19:12 2026 GMT Not After : May 19 18:19:12 2026 GMT Subject: CN=6a036f21-c64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:dc:6b:a2:d7:5c:23:56:26:1f:b9:c4:3d: 00:43:1d:11:3d:a8:c4:7b:9f:c6:56:a2:90:0e:eb: 64:97:69:aa:47:8e:d3:e6:e7:0b:ea:dc:36:a0:22: 0d:a6:49:ee:5e:81:a4:bf:01:60:38:cc:ad:23:11: 73:ed:37:4c:80:1d:3d:bd:31:4d:83:22:4c:a7:4e: 2f:19:0f:28:3c:1c:27:48:2d:e8:a5:6c:68:71:f3: c7:0d:cb:96:22:62:43:c5:de:a0:d3:0d:34:66:34: 3a:11:e2:95:c6:42:bf:37:58:e8:28:62:b5:48:6b: 3f:49:14:5c:80:eb:bb:19:a3:74:78:a6:78:cb:03: 26:8a:ac:d8:1e:e2:2c:32:a6:28:d8:d9:69:4f:aa: fa:95:6b:0d:ab:28:9e:f0:d9:a6:a0:eb:bd:74:84: 75:77:96:1f:5d:39:de:91:e1:0c:33:d3:8a:ca:e3: eb:75:23:6c:78:6b:23:6d:27:78:47:5f:3f:8f:bc: 7e:77:2f:66:99:c8:8d:1f:de:e2:c3:72:35:eb:a4: e9:a4:ae:ea:a7:36:cd:27:6c:72:5a:f7:6d:53:99: 41:43:1a:25:8a:ec:b7:01:7b:86:68:69:8e:7d:d5: 20:ca:e8:b3:2a:f5:8d:32:f5:6d:b5:5b:dc:3b:26: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:F2:68:B1:B4:71:F6:EB:AB:72:AD:61:30:49:D8:82:C0:45:9E X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:99:4d:7c:50:04:0a:bf:b7:63:9e:8e:39:3d:c4:17:7a:b8: 3c:a1:a2:60:66:63:8b:68:8f:51:cf:23:0f:24:19:59:91:e4: 77:6e:44:43:79:7d:68:96:d6:ef:20:6d:12:a6:7e:40:54:b1: 73:55:25:29:72:78:e4:cd:a6:ca:fe:12:49:f5:df:ad:c7:e0: 33:ad:06:77:8e:18:fa:22:95:67:4c:75:36:6c:a7:84:e8:43: 57:9c:3b:49:5b:fd:0e:99:e1:1f:4e:33:29:2c:7b:86:ff:bf: d2:26:3a:24:e6:a4:81:75:e6:c4:9f:42:e7:b8:6e:7d:33:9f: 4f:26:17:dc:0e:1b:60:d9:78:30:0c:dd:e1:de:2f:4c:3e:58: 6b:58:bb:7c:c1:57:66:8c:79:e8:f2:36:a9:34:ab:87:19:9b: 62:1f:d2:da:4f:4a:c0:76:e0:55:32:df:ec:11:b9:7f:77:53: b9:5f:35:64:fd:e4:8f:f8:d1:ad:ab:ab:58:84:bb:4b:d3:03: 90:24:bf:23:16:14:91:45:29:5d:d1:0b:58:7f:3b:fe:23:10: eb:57:13:13:96:49:b5:99:36:c4:b5:87:c0:0b:0d:9b:2b:5b: f4:9b:37:12:90:90:c4:44:1e:7d:e3:16:a5:f4:1b:6e:ed:4b: 23:0e:1a:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNTEyMTgxOTEyWhcNMjYwNTE5MTgxOTEyWjAYMRYwFAYD VQQDEw02YTAzNmYyMS1jNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruzca6LXXCNWJh+5xD0AQx0RPajEe5/GVqKQDutkl2mqR47T5ucL6tw2oCIN pknuXoGkvwFgOMytIxFz7TdMgB09vTFNgyJMp04vGQ8oPBwnSC3opWxocfPHDcuW ImJDxd6g0w00ZjQ6EeKVxkK/N1joKGK1SGs/SRRcgOu7GaN0eKZ4ywMmiqzYHuIs MqYo2NlpT6r6lWsNqyie8NmmoOu9dIR1d5YfXTnekeEMM9OKyuPrdSNseGsjbSd4 R18/j7x+dy9mmciNH97iw3I166TppK7qpzbNJ2xyWvdtU5lBQxoliuy3AXuGaGmO fdUgyuizKvWNMvVttVvcOybhIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBag8mix tHH266tyrWEwSdiCwEWeMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYJlNfFAECr+3Y56OOT3EF3q4PKGiYGZji2iPUc8jDyQZWZHkd25EQ3l9aJbW 7yBtEqZ+QFSxc1UlKXJ45M2myv4SSfXfrcfgM60Gd44Y+iKVZ0x1NmynhOhDV5w7 SVv9DpnhH04zKSx7hv+/0iY6JOakgXXmxJ9C57hufTOfTyYX3A4bYNl4MAzd4d4v TD5Ya1i7fMFXZox56PI2qTSrhxmbYh/S2k9KwHbgVTLf7BG5f3dTuV81ZP3kj/jR raurWIS7S9MDkCS/IxYUkUUpXdELWH87/iMQ61cTE5ZJtZk2xLWHwAsNmytb9Js3 EpCQxEQefeMWpfQbbu1LIw4aCA== -----END CERTIFICATE-----Generated at Wed May 13 14:02:25 2026 by rpki-client