$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: O+vN7FOwf/+7AK/AXIv3mfk8fT2EKqlhSRMCJQiUcQo= Subject key identifier: 26:51:13:7F:B4:84:7D:6B:84:C8:79:63:BF:7E:70:7A:7D:66:0F:DB Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 0854 Signing time: Tue 12 May 2026 20:53:22 +0000 Manifest this update: Tue 12 May 2026 20:53:21 +0000 Manifest next update: Tue 19 May 2026 20:53:21 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: uCvy5D4vJh1C1jVfzKXbEEXC6q4NyDoA3i9ySM1IV7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: May 12 20:53:21 2026 GMT Not After : May 19 20:53:21 2026 GMT Subject: CN=6a039342-9cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:73:3b:74:fd:10:8e:23:10:4a:12:9f:b5: 04:53:60:4d:cb:b8:c4:9e:e0:9a:0c:87:6e:3a:88: 51:54:30:fc:ae:83:ca:7b:2f:62:55:4d:3c:32:02: 66:80:83:bb:7b:80:ea:8c:10:b3:ba:ee:e9:1f:23: 23:63:f0:e1:b3:0d:0c:87:e7:12:71:74:9d:fa:2b: 99:b4:6f:ee:2d:65:03:e6:c6:ae:02:3e:83:12:e1: 16:ee:db:fb:19:3b:3a:c2:3a:c5:63:9d:69:44:2e: 9b:a6:6b:64:8b:c8:9e:68:2a:5a:a7:6a:9e:51:18: a9:a3:78:6c:e7:f4:0c:81:d2:2d:fa:e6:11:7f:4a: 6b:e9:9b:b1:64:51:51:0e:6c:3f:96:3d:67:0c:a9: 15:ec:c3:ee:08:5e:9c:9c:8f:7f:52:f2:64:eb:51: e6:b9:d8:d8:e5:92:71:f4:f1:b1:2a:dd:06:cd:95: cb:ed:01:72:35:6e:b7:6a:fe:f6:e5:d1:d2:1c:bf: 68:2d:e1:d6:11:cf:b5:3d:9a:6a:52:27:10:c6:6e: 9b:9b:25:e0:04:72:fd:af:4d:d5:81:4b:a5:2c:f2: 8d:a4:c7:fd:7d:d3:0e:45:ff:0b:cd:e6:1a:ea:ae: 5b:c0:e7:cc:f1:42:55:d0:44:35:3c:b9:56:88:ea: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:13:7F:B4:84:7D:6B:84:C8:79:63:BF:7E:70:7A:7D:66:0F:DB X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:40:f9:dc:35:9b:76:f5:91:73:04:8c:9b:8e:f2:8d:27: 1e:27:74:1b:c1:be:a7:5e:97:50:36:74:b1:1d:b4:a9:85:14: 25:9c:f0:8d:33:98:81:74:da:73:74:dc:4a:e4:f2:1c:5a:40: 3b:23:97:15:41:58:8c:14:41:3f:fb:07:8f:81:b1:5a:5c:67: b0:45:65:71:d9:99:22:19:8f:a7:4c:2b:45:89:39:97:4f:d8: 2e:77:f9:b9:6e:75:18:55:e5:1e:43:d7:0f:f6:ee:68:0a:e3: 90:ec:db:1e:2f:86:93:b6:88:a4:52:21:be:55:82:92:7f:11: fe:e2:be:28:27:7f:8d:d8:24:a0:53:00:db:64:0b:ce:9c:23: b8:4a:c1:d8:92:b4:f6:ec:03:0c:97:05:6a:02:64:81:bb:1d: ca:a7:87:6f:95:75:22:36:e8:97:15:e0:68:26:e0:12:89:14: e1:de:f9:34:80:5f:42:c6:55:ff:ba:63:e1:61:3a:02:b4:ce: 41:42:56:7f:d1:0a:32:ed:13:e7:9c:bd:c7:dd:4a:c1:1b:1e: 1a:98:e7:09:7b:24:41:bf:07:2c:bb:62:47:c8:94:d7:16:12: dd:24:f5:9c:2f:26:3a:ad:54:c4:79:a6:b6:2c:a8:8f:89:5e: e8:ba:3b:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwNTEyMjA1MzIxWhcNMjYwNTE5MjA1MzIxWjAYMRYwFAYD VQQDEw02YTAzOTM0Mi05Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwtzO3T9EI4jEEoSn7UEU2BNy7jEnuCaDIduOohRVDD8roPKey9iVU08MgJm gIO7e4DqjBCzuu7pHyMjY/Dhsw0Mh+cScXSd+iuZtG/uLWUD5sauAj6DEuEW7tv7 GTs6wjrFY51pRC6bpmtki8ieaCpap2qeURipo3hs5/QMgdIt+uYRf0pr6ZuxZFFR Dmw/lj1nDKkV7MPuCF6cnI9/UvJk61HmudjY5ZJx9PGxKt0GzZXL7QFyNW63av72 5dHSHL9oLeHWEc+1PZpqUicQxm6bmyXgBHL9r03VgUulLPKNpMf9fdMORf8LzeYa 6q5bwOfM8UJV0EQ1PLlWiOpgYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZRE3+0 hH1rhMh5Y79+cHp9Zg/bMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAii5A+dw1m3b1kXMEjJuO8o0nHid0G8G+p16XUDZ0sR20qYUUJZzwjTOYgXTa c3TcSuTyHFpAOyOXFUFYjBRBP/sHj4GxWlxnsEVlcdmZIhmPp0wrRYk5l0/YLnf5 uW51GFXlHkPXD/buaArjkOzbHi+Gk7aIpFIhvlWCkn8R/uK+KCd/jdgkoFMA22QL zpwjuErB2JK09uwDDJcFagJkgbsdyqeHb5V1IjbolxXgaCbgEokU4d75NIBfQsZV /7pj4WE6ArTOQUJWf9EKMu0T55y9x91KwRseGpjnCXskQb8HLLtiR8iU1xYS3ST1 nC8mOq1UxHmmtiyoj4le6Lo70g== -----END CERTIFICATE-----Generated at Wed May 13 04:40:03 2026 by rpki-client