$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft File: tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json) Hash identifier: Y27du2KThoMzvZJBX8uvP63eeqyydBthgAykO8BwFko= Subject key identifier: 72:B2:2B:69:32:49:AE:89:6B:BC:9D:2E:D8:50:09:73:0F:0F:E5:5D Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft Manifest number: 05 Signing time: Tue 12 May 2026 22:30:07 +0000 Manifest this update: Tue 12 May 2026 22:30:07 +0000 Manifest next update: Tue 19 May 2026 22:30:07 +0000 Files and hashes: 1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: MpJiDlbpxJlQ8WfZJ3ZiHR5uorgl8zhvESUxJ+pOOf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: May 12 22:30:07 2026 GMT Not After : May 19 22:30:07 2026 GMT Subject: CN=6a03a9ef-915e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:89:f8:d2:c3:e3:61:51:65:59:f5:8c:2e: b9:56:bb:13:56:7b:77:0d:98:17:c4:6b:dd:b3:8f: 92:d6:17:12:03:3f:41:e6:69:b6:79:ed:91:b3:70: 64:19:21:a8:f2:60:04:4c:b3:34:a7:3b:25:b4:02: 8a:10:ec:11:7f:34:49:2c:a7:96:70:2b:ac:4e:6c: 76:d9:98:90:fb:02:1f:8e:b0:37:25:ef:3a:bc:ba: 39:3b:9e:6e:cc:5a:8e:83:06:81:27:8e:06:21:e8: b1:49:a3:b6:6f:7d:4a:1d:a9:db:a6:62:b2:8f:cd: d1:26:fb:dc:f6:07:aa:88:8a:e4:d3:89:a1:e0:ec: 1a:fe:52:be:e5:ae:a4:b1:9b:b4:23:63:7f:0b:b3: 2f:55:b2:a5:e8:04:89:ee:b9:17:db:b9:9d:e0:31: 68:f6:c4:82:ae:1a:ef:29:41:9f:1d:6c:df:9a:c3: 53:0a:a2:b5:fc:79:04:fb:7b:81:d7:45:6a:d1:e2: e4:71:5c:cc:fb:62:c6:74:07:bd:a1:b5:89:e3:a3: d1:e8:e5:22:19:d3:c1:57:aa:f3:0e:dc:89:bc:e7: 44:dc:25:c3:92:9e:63:c2:bd:cd:4d:cb:6c:50:44: 4a:d2:6f:03:f9:ca:bb:59:06:3e:36:1c:45:9a:06: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B2:2B:69:32:49:AE:89:6B:BC:9D:2E:D8:50:09:73:0F:0F:E5:5D X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d9:9f:51:50:2e:af:50:af:12:12:2e:76:1e:a5:d8:5d:51: 8a:e1:fd:a6:b4:39:fa:b6:1a:22:c4:7f:08:1c:56:d1:25:06: d4:b4:e4:0f:66:16:71:6f:e7:56:cf:a5:dc:73:60:51:3e:74: f3:e2:84:c6:3c:59:47:ae:c3:b8:93:fa:a3:ce:cc:fc:d8:c2: 0e:a1:2d:d4:68:d9:fd:38:e9:aa:96:27:80:0f:d6:f7:5b:1b: d6:99:85:ee:9e:7d:9d:91:8a:d1:79:b6:b4:8c:29:49:d7:7d: 24:05:0b:09:fc:c0:70:d7:c1:4f:27:97:25:7a:3e:ec:f0:61: dc:69:d4:56:57:32:8d:c8:e3:fd:3a:15:f8:15:c1:b6:b4:e3: 32:38:a3:40:3d:a0:4c:12:21:2e:8f:bc:6d:eb:90:be:d1:f8: 13:76:10:80:cb:7d:fd:4b:f7:0d:33:e9:81:fa:fd:d6:e9:95: 0a:5b:76:df:96:28:36:8c:cf:78:f5:ab:52:f1:af:9e:16:46: 21:52:71:b0:3f:7d:39:49:98:ef:ed:ac:0b:fa:5a:a4:81:97: e9:23:57:bc:90:7d:b7:4d:01:70:36:96:e2:d5:cf:ee:bf:32: 44:b3:4b:80:72:8c:e6:2c:9a:f3:87:f1:d3:a8:b7:bf:e9:7b: 08:b5:82:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjA1MTIyMjMwMDdaFw0yNjA1MTkyMjMwMDdaMBgxFjAUBgNV BAMTDTZhMDNhOWVmLTkxNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPDYn40sPjYVFlWfWMLrlWuxNWe3cNmBfEa92zj5LWFxIDP0HmabZ57ZGzcGQZ IajyYARMszSnOyW0AooQ7BF/NEksp5ZwK6xObHbZmJD7Ah+OsDcl7zq8ujk7nm7M Wo6DBoEnjgYh6LFJo7ZvfUodqdumYrKPzdEm+9z2B6qIiuTTiaHg7Br+Ur7lrqSx m7QjY38Lsy9VsqXoBInuuRfbuZ3gMWj2xIKuGu8pQZ8dbN+aw1MKorX8eQT7e4HX RWrR4uRxXMz7YsZ0B72htYnjo9Ho5SIZ08FXqvMO3Im850TcJcOSnmPCvc1Ny2xQ RErSbwP5yrtZBj42HEWaBv5pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcrIraTJJ rolrvJ0u2FAJcw8P5V0wHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QTQwLzRFRUVBMUE2NDkwQzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBH ZGVsbllFYXhlYWllZ0R4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx2Z9RUC6vUK8SEi52HqXYXVGK4f2mtDn6thoixH8IHFbRJQbUtOQPZhZxb+dW z6Xcc2BRPnTz4oTGPFlHrsO4k/qjzsz82MIOoS3UaNn9OOmqlieAD9b3WxvWmYXu nn2dkYrReba0jClJ130kBQsJ/MBw18FPJ5clej7s8GHcadRWVzKNyOP9OhX4FcG2 tOMyOKNAPaBMEiEuj7xt65C+0fgTdhCAy339S/cNM+mB+v3W6ZUKW3bflig2jM94 9atS8a+eFkYhUnGwP305SZjv7awL+lqkgZfpI1e8kH23TQFwNpbi1c/uvzJEs0uA cozmLJrzh/HTqLe/6XsItYLi -----END CERTIFICATE-----Generated at Wed May 13 07:56:52 2026 by rpki-client