$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: 7PdBwKEZ8agEL2FT0IPBjPrJNOTF8aXxItXV2FJmabY= Subject key identifier: 70:6A:43:CB:27:97:CE:74:BE:61:9A:5C:B1:EF:AD:A4:8D:FA:AF:04 Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: 014D Signing time: Wed 13 May 2026 05:17:26 +0000 Manifest this update: Wed 13 May 2026 05:17:26 +0000 Manifest next update: Wed 20 May 2026 05:17:26 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: 8s5mcz4zRb3pQ+3GhH4jHev4ddlN/IY9LcWmXEBasm8=) 2: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=) 3: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: May 13 05:17:26 2026 GMT Not After : May 20 05:17:26 2026 GMT Subject: CN=6a040966-4666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:7d:45:45:02:9c:27:ca:7c:2c:30:fa:13: 3f:89:8b:80:33:8b:48:20:a8:9c:d9:69:b1:cd:2a: ab:14:0e:cd:80:12:d1:f9:03:ab:01:d3:cd:5f:37: dc:a9:f7:54:f2:8c:23:db:a8:e5:75:ae:8e:15:cb: c3:2b:94:06:04:9c:e9:b7:10:b5:ff:12:50:b9:99: 98:b8:dd:84:c1:96:1d:2b:5a:e8:1a:8d:60:d6:e0: de:0e:43:92:b9:47:28:e7:ed:0d:bd:cd:a8:51:59: d2:d3:90:6f:28:78:99:ac:23:bd:d5:f8:a0:74:fa: cd:c5:05:2c:9c:dd:36:3e:be:6d:29:65:59:77:66: ba:83:50:c3:80:af:a5:a9:2d:25:6c:4b:1e:2b:94: 4d:0e:40:13:2e:4d:66:9b:3e:c7:b7:b9:06:e8:07: ea:b7:9e:9d:5d:2d:39:e9:01:02:c0:53:d5:4f:28: 75:78:a8:90:25:98:1a:f8:d8:fa:0c:25:ea:16:1d: 71:4f:e9:86:8c:fa:79:60:bf:48:c1:29:7b:7f:98: 23:ed:d6:f7:d0:1a:5a:e7:ad:a9:77:38:15:af:d3: c0:6b:17:8b:f2:37:5b:61:03:cf:6f:87:46:c6:1a: 7f:c2:45:c4:f7:0f:df:63:12:eb:ba:80:5f:ab:d8: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6A:43:CB:27:97:CE:74:BE:61:9A:5C:B1:EF:AD:A4:8D:FA:AF:04 X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:de:c3:0b:85:be:e5:0b:37:62:2c:3f:41:23:b7:25:a7: cb:72:2d:3f:46:4b:5c:10:b7:1a:59:97:e8:aa:95:e0:76:f3: 10:df:ce:b6:c2:38:c2:60:18:2e:b5:27:dd:12:04:da:ae:7e: 99:d5:fc:3c:51:6f:66:23:fa:45:9c:aa:29:f2:bb:0f:1c:b6: a6:50:01:2c:09:6b:73:ec:66:58:da:c6:52:67:bb:5d:cd:10: 8f:72:5e:cc:16:60:88:57:23:4c:c3:2e:38:de:b9:ce:11:da: 1e:eb:96:f5:f2:b2:3a:f0:07:6b:3f:34:7d:f8:a5:0f:7d:66: 6c:8e:e1:91:f9:69:51:23:87:b1:45:e3:1e:c6:dc:39:04:d2: 0d:70:80:24:07:32:0c:3e:5f:56:0f:03:81:2b:a4:cd:75:94: 46:87:1d:64:12:fe:20:ae:6c:d5:99:0c:e2:25:ef:07:06:ae: 5f:8a:89:47:1c:9a:50:b7:16:10:14:a9:bd:59:e7:22:9d:01: 14:35:c5:1a:96:15:fd:5e:3e:8b:08:f2:17:18:9a:b7:aa:c1: e9:07:86:38:ee:30:7e:5b:fc:60:91:ab:b6:3a:98:5c:da:11: 1d:87:74:7e:81:2c:0b:46:da:0a:00:87:df:6e:2b:35:bf:bc: 5e:9c:8b:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjYwNTEzMDUxNzI2WhcNMjYwNTIwMDUxNzI2WjAYMRYwFAYD VQQDEw02YTA0MDk2Ni00NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqx9RUUCnCfKfCww+hM/iYuAM4tIIKic2WmxzSqrFA7NgBLR+QOrAdPNXzfc qfdU8owj26jlda6OFcvDK5QGBJzptxC1/xJQuZmYuN2EwZYdK1roGo1g1uDeDkOS uUco5+0Nvc2oUVnS05BvKHiZrCO91figdPrNxQUsnN02Pr5tKWVZd2a6g1DDgK+l qS0lbEseK5RNDkATLk1mmz7Ht7kG6Afqt56dXS056QECwFPVTyh1eKiQJZga+Nj6 DCXqFh1xT+mGjPp5YL9IwSl7f5gj7db30Bpa562pdzgVr9PAaxeL8jdbYQPPb4dG xhp/wkXE9w/fYxLruoBfq9hIGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBqQ8sn l850vmGaXLHvraSN+q8EMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfTewwuFvuULN2IsP0EjtyWny3ItP0ZLXBC3GlmX6KqV4HbzEN/OtsI4wmAY LrUn3RIE2q5+mdX8PFFvZiP6RZyqKfK7Dxy2plABLAlrc+xmWNrGUme7Xc0Qj3Je zBZgiFcjTMMuON65zhHaHuuW9fKyOvAHaz80ffilD31mbI7hkflpUSOHsUXjHsbc OQTSDXCAJAcyDD5fVg8DgSukzXWURocdZBL+IK5s1ZkM4iXvBwauX4qJRxyaULcW EBSpvVnnIp0BFDXFGpYV/V4+iwjyFxiat6rB6QeGOO4wflv8YJGrtjqYXNoRHYd0 foEsC0baCgCH324rNb+8XpyLcQ== -----END CERTIFICATE-----Generated at Wed May 13 11:20:17 2026 by rpki-client