$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: yq8hMLYn3hvO7/fG67yS5Yc4LKqXZFSoq912y6IvJu0= Subject key identifier: 4D:A8:CF:6F:1B:5B:8D:49:34:0D:73:DE:2A:20:CD:B3:B9:B5:A4:F4 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 17EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 17E1 Signing time: Tue 12 May 2026 16:33:39 +0000 Manifest this update: Tue 12 May 2026 16:33:39 +0000 Manifest next update: Tue 19 May 2026 16:33:39 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: bbBHFC+G5FRwJQASHmBmW6kA8UtqpwEeBp5Aes11U9o=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: v3H/p5Ktvsz+MkxJKek+k3rhTh/FkFVJc40/XtTzh38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6126 (0x17ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: May 12 16:33:39 2026 GMT Not After : May 19 16:33:39 2026 GMT Subject: CN=6a035663-9c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:c9:85:56:f5:bf:68:30:11:ce:cd:1c:d6: c1:9a:fa:2c:d5:54:b9:46:54:85:aa:c3:af:d4:b7: ee:69:cc:d7:db:0d:3c:bb:31:a9:bb:5e:c8:63:17: d3:c2:18:40:70:8c:c1:4c:11:82:ba:09:9f:d4:e9: ec:e6:57:62:ad:db:76:e1:58:a1:0d:00:17:08:29: d6:88:07:93:f7:cc:5a:cf:b0:70:8c:f5:f2:0d:d5: de:df:f2:5c:b9:c0:d1:fb:ce:f0:5e:d7:76:3d:4f: f8:c8:0a:a6:ec:78:24:7b:45:fa:bf:e0:60:3b:d0: de:46:d4:68:3f:16:71:a7:80:0a:69:1d:fc:f2:93: 56:e7:ab:2f:bf:2c:a5:ab:71:de:32:86:6d:10:72: d5:30:8d:27:63:9f:5c:00:d8:8c:86:e2:70:ca:f3: ee:47:6f:a7:0d:cf:17:6c:8c:19:90:9f:15:8c:e3: c3:32:a0:9d:fb:62:26:76:60:a4:29:b3:6d:8a:56: 61:c8:e1:45:f7:81:55:e0:50:db:ca:53:f7:65:13: 7b:01:53:36:92:7a:3e:47:76:ed:f1:a3:ef:0d:12: 2f:b7:0f:c4:22:40:4b:99:a8:74:48:b2:47:8d:3a: cf:cb:fb:07:6a:90:aa:2c:dc:80:68:f4:04:97:99: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:CF:6F:1B:5B:8D:49:34:0D:73:DE:2A:20:CD:B3:B9:B5:A4:F4 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4b:bd:ce:fa:03:e8:f5:40:56:06:15:bb:6c:22:8a:7c:50: bb:37:6d:50:61:d1:05:33:28:24:26:e2:1a:71:f0:61:87:6f: 36:1f:da:d0:0c:5b:0a:39:05:32:14:9e:7a:b1:5e:94:55:aa: a7:96:ad:70:fe:de:29:71:be:fa:cf:8a:39:a0:1f:0f:fb:67: db:39:9f:1b:78:19:73:e6:94:ec:c2:85:01:51:d9:c0:67:a8: 61:2a:eb:5b:e7:fa:e7:4f:95:3c:2d:a8:cc:86:e9:34:80:71: 94:69:17:99:f0:00:fe:5b:00:de:2f:ad:73:c3:cf:3b:36:59: 2c:ef:98:32:71:ae:00:8e:aa:c7:16:b7:74:93:5e:2b:f9:8e: 2c:e4:c5:5a:22:52:7b:68:5c:d8:51:55:cb:98:e4:a4:d2:4a: 5d:60:6a:f9:14:76:a2:29:45:de:d0:93:85:d6:17:5e:2f:52: 8e:9f:86:21:c8:ad:83:16:ed:a5:0f:3b:30:7a:c5:90:eb:71: 8f:62:bc:b0:ec:bf:11:74:b8:27:81:8b:94:f2:96:6d:46:a3: c5:69:d3:4a:fe:18:ff:23:89:54:4a:1e:56:ac:b6:21:02:31: 3f:ad:d1:a6:8b:fd:43:32:a3:de:fe:0e:8e:a0:7f:5d:86:76: f0:34:2c:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjYwNTEyMTYzMzM5WhcNMjYwNTE5MTYzMzM5WjAYMRYwFAYD VQQDEw02YTAzNTY2My05YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFXJhVb1v2gwEc7NHNbBmvos1VS5RlSFqsOv1LfuaczX2w08uzGpu17IYxfT whhAcIzBTBGCugmf1Ons5ldirdt24VihDQAXCCnWiAeT98xaz7BwjPXyDdXe3/Jc ucDR+87wXtd2PU/4yAqm7Hgke0X6v+BgO9DeRtRoPxZxp4AKaR388pNW56svvyyl q3HeMoZtEHLVMI0nY59cANiMhuJwyvPuR2+nDc8XbIwZkJ8VjOPDMqCd+2ImdmCk KbNtilZhyOFF94FV4FDbylP3ZRN7AVM2kno+R3bt8aPvDRIvtw/EIkBLmah0SLJH jTrPy/sHapCqLNyAaPQEl5mR2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2oz28b W41JNA1z3iogzbO5taT0MB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0u9zvoD6PVAVgYVu2wiinxQuzdtUGHRBTMoJCbiGnHwYYdvNh/a0AxbCjkF MhSeerFelFWqp5atcP7eKXG++s+KOaAfD/tn2zmfG3gZc+aU7MKFAVHZwGeoYSrr W+f650+VPC2ozIbpNIBxlGkXmfAA/lsA3i+tc8PPOzZZLO+YMnGuAI6qxxa3dJNe K/mOLOTFWiJSe2hc2FFVy5jkpNJKXWBq+RR2oilF3tCThdYXXi9Sjp+GIcitgxbt pQ87MHrFkOtxj2K8sOy/EXS4J4GLlPKWbUajxWnTSv4Y/yOJVEoeVqy2IQIxP63R pov9QzKj3v4OjqB/XYZ28DQsXQ== -----END CERTIFICATE-----Generated at Wed May 13 15:09:05 2026 by rpki-client