$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft File: HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json) Hash identifier: xvICr7Cl6pqxxT7S+tqx1FMb1zbj89Z5hwgtePEZUO0= Subject key identifier: AD:A7:ED:12:C9:F2:38:A0:61:4F:EB:1A:5D:52:3D:A0:1A:C1:F7:A9 Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft Manifest number: 049A Signing time: Wed 13 May 2026 00:05:26 +0000 Manifest this update: Wed 13 May 2026 00:05:25 +0000 Manifest next update: Wed 20 May 2026 00:05:25 +0000 Files and hashes: 1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: KC7ijHiLwrBsYvoZaMA+rc/O5fKmi2iReOpg/6Hqyf4=) 2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Validity Not Before: May 13 00:05:25 2026 GMT Not After : May 20 00:05:25 2026 GMT Subject: CN=6a03c046-5c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:99:3a:42:b0:e7:78:d4:19:38:e5:48:46: 0d:a8:69:ba:ba:56:2e:d7:d4:41:74:28:5c:37:6c: b3:df:9f:1f:31:98:b6:d3:13:7b:41:4c:eb:a9:e9: 07:3b:12:74:e1:01:19:b5:bb:17:b1:dd:6c:64:ae: c0:71:f7:95:ca:42:91:83:75:62:6d:73:a1:55:2d: 8a:11:9e:61:5e:92:ea:cd:1b:8a:26:eb:45:46:2f: 82:54:5b:7b:de:df:47:4a:f9:b5:70:6d:a6:e4:26: 14:bb:46:18:09:9c:76:09:a7:2b:8d:6f:88:11:96: 7d:0d:46:5b:16:e7:e1:2f:6e:23:21:d8:6e:fe:df: 58:06:ff:c0:ca:1f:94:5d:25:10:a0:ae:9d:d3:59: 54:fe:d9:78:9f:27:72:c7:ef:4e:e7:5c:fa:77:3f: 6f:cb:ee:26:ee:d4:8c:ef:e1:bd:3c:c2:19:47:66: 76:da:3f:be:84:52:37:a2:4a:0a:2c:29:00:d1:11: 5c:ba:4f:75:67:f0:4e:6d:37:56:bd:e6:7e:07:f9: c8:4b:69:a2:38:92:ad:fa:3f:df:46:bb:28:69:47: df:ac:bb:3d:55:4e:54:b2:d2:88:6d:bc:18:70:78: 4b:26:fc:df:5d:cd:eb:d2:e8:00:f4:9c:52:6e:61: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A7:ED:12:C9:F2:38:A0:61:4F:EB:1A:5D:52:3D:A0:1A:C1:F7:A9 X509v3 Authority Key Identifier: keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7e:af:f9:43:20:cd:fb:e5:a2:ce:1d:9e:2d:5f:43:96:c5: 27:dc:43:84:d7:8f:17:29:56:5a:58:ec:e8:f6:59:42:f5:63: f4:a4:7e:8f:52:bf:c7:f5:3b:1f:4d:da:1b:c8:41:b5:4f:99: 8a:fc:15:6e:3c:89:70:a0:84:0c:10:02:ab:93:cd:d4:44:09: 60:4d:9e:91:7c:0d:a9:f4:c1:66:d5:8c:f7:c1:5f:6a:f5:b7: 24:0b:57:45:76:aa:74:a1:9a:88:e5:3c:ee:2d:a4:eb:5a:bc: 11:c8:ea:a7:b4:1e:30:f0:65:8f:3e:e3:2c:17:73:49:e5:21: c1:03:5f:df:87:91:8b:7a:3c:a8:51:83:ed:6d:d6:47:34:0e: 4c:66:43:09:6d:ac:fb:a7:3a:66:96:1f:1c:c9:ea:7c:d9:d9: 73:b7:b7:2b:f8:f8:4b:52:db:90:ab:d7:b5:4b:6c:50:41:44: 81:9d:59:24:3d:53:e9:8c:d7:9b:08:ef:2e:fd:82:53:45:ab: 1f:fd:54:9d:d1:86:16:92:e3:63:51:54:44:39:51:be:20:62: 2c:83:33:57:8f:5f:04:ca:fb:2f:0c:15:f4:42:7f:1c:f3:29: fa:94:ed:cd:7a:e8:32:9a:1d:05:80:6c:5f:6c:cf:9a:b3:06: e3:71:36:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ1QTIxMTAvBgNVBAUTKDFDMDQzMDc3MjQxNTczQ0VCODU4RDk1MUYwMkIyMjA1 N0JBMzk2RTcwHhcNMjYwNTEzMDAwNTI1WhcNMjYwNTIwMDAwNTI1WjAYMRYwFAYD VQQDEw02YTAzYzA0Ni01YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUqZOkKw53jUGTjlSEYNqGm6ulYu19RBdChcN2yz358fMZi20xN7QUzrqekH OxJ04QEZtbsXsd1sZK7AcfeVykKRg3VibXOhVS2KEZ5hXpLqzRuKJutFRi+CVFt7 3t9HSvm1cG2m5CYUu0YYCZx2CacrjW+IEZZ9DUZbFufhL24jIdhu/t9YBv/Ayh+U XSUQoK6d01lU/tl4nydyx+9O51z6dz9vy+4m7tSM7+G9PMIZR2Z22j++hFI3okoK LCkA0RFcuk91Z/BObTdWveZ+B/nIS2miOJKt+j/fRrsoaUffrLs9VU5UstKIbbwY cHhLJvzfXc3r0ugA9JxSbmH9GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2n7RLJ 8jigYU/rGl1SPaAawfepMB8GA1UdIwQYMBaAFBwEMHckFXPOuFjZUfArIgV7o5bn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDVBMi9BM0QyRENBQTgw MDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4NjRXTmxSOENzaUJYdWps dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBUXdkeVFWYzg2NFdObFI4Q3NpQlh1amx1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDVBMi9BM0QyRENBQTgwMDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4 NjRXTmxSOENzaUJYdWpsdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqX6v+UMgzfvlos4dni1fQ5bFJ9xDhNePFylWWljs6PZZQvVj9KR+j1K/x/U7 H03aG8hBtU+ZivwVbjyJcKCEDBACq5PN1EQJYE2ekXwNqfTBZtWM98FfavW3JAtX RXaqdKGaiOU87i2k61q8Ecjqp7QeMPBljz7jLBdzSeUhwQNf34eRi3o8qFGD7W3W RzQOTGZDCW2s+6c6ZpYfHMnqfNnZc7e3K/j4S1LbkKvXtUtsUEFEgZ1ZJD1T6YzX mwjvLv2CU0WrH/1UndGGFpLjY1FURDlRviBiLIMzV49fBMr7LwwV9EJ/HPMp+pTt zXroMpodBYBsX2zPmrMG43E28w== -----END CERTIFICATE-----Generated at Wed May 13 04:43:25 2026 by rpki-client