$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: nShyGvxiNfCv4IVYaQglw9wT9g1D1UUQrOlhXrNI3iw= Subject key identifier: 9D:BF:EA:15:DC:A4:7B:4B:D2:01:58:14:1E:1C:35:7F:C8:63:A3:FC Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 0258 Signing time: Mon 11 May 2026 02:19:11 +0000 Manifest this update: Mon 11 May 2026 02:19:10 +0000 Manifest next update: Mon 18 May 2026 02:19:10 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: amP7l8ND6D/gm5tTzLNmXbYDiSHGxBSX3TpnpEjoJOc=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: Y24abX/8QA8DifcLB/85duUm8cvIDWQiy6dojc92dC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: May 11 02:19:10 2026 GMT Not After : May 18 02:19:10 2026 GMT Subject: CN=6a013c9f-3f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:1d:28:3f:92:d4:89:ff:24:f8:f7:f3:f8: 0d:16:30:da:89:b5:d0:92:0e:3b:6e:8b:9f:eb:85: 53:14:be:2d:3e:ec:37:ea:06:0d:a7:71:55:2c:82: 56:3d:d4:cf:a8:65:82:73:bb:57:88:df:5c:f5:8b: f0:e7:f1:ba:ac:52:64:ae:a6:24:8d:30:33:0f:af: f6:e0:36:58:f7:63:59:30:24:cd:34:04:3e:f7:2c: 3f:ed:72:b3:ad:ed:4d:a0:07:16:28:43:5e:44:28: 7e:13:21:15:95:af:6c:49:fa:3f:19:a2:a3:aa:16: 0d:a5:7d:73:2d:c1:df:93:fa:a3:fd:8a:cf:85:a0: f9:9e:32:2c:00:5b:a6:da:77:21:b4:e6:f6:8d:b9: 73:20:cc:8a:7e:f3:b6:18:16:18:51:e9:f3:f0:5a: 8c:40:b6:b4:37:19:60:93:44:ff:44:94:5e:0b:9b: d3:25:e4:ac:26:c1:6d:f5:4f:47:c5:1d:c3:46:74: fe:fc:45:c2:d9:cc:e3:e4:87:48:ad:a5:4b:74:bc: da:b3:e8:09:61:ad:ff:9d:5a:ed:0a:df:6e:e3:71: b6:4e:10:e3:c0:e7:56:7f:f2:99:f6:28:74:00:2f: 29:5d:f6:84:5b:9d:fc:35:e9:cd:05:7d:c5:f1:ca: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BF:EA:15:DC:A4:7B:4B:D2:01:58:14:1E:1C:35:7F:C8:63:A3:FC X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c7:ea:21:3a:2b:1e:74:74:bf:22:39:0f:1a:6b:e9:0d:f8: d1:eb:92:c4:98:7b:c4:b3:5b:1c:ac:41:48:94:1f:02:45:6f: aa:07:43:0f:d4:8a:10:2f:54:94:75:88:34:aa:29:bb:b1:58: 62:b4:3f:77:e8:dc:dd:b4:35:4d:56:e5:c0:1b:9c:f2:62:f6: 1b:6b:16:c5:71:b6:c3:49:f1:c7:ae:91:16:07:5e:cf:ec:46: 5f:d0:ea:86:b5:54:8c:58:21:e3:83:8c:43:15:e4:2f:65:8c: 01:3a:a7:c1:33:a1:eb:1e:ef:bd:53:89:f3:4b:fa:fd:00:a7: 64:83:58:6e:33:05:26:06:26:3d:b8:c8:43:d6:ae:ee:5f:fc: 61:1c:37:ce:a6:5b:f5:6a:90:f4:f5:2d:8c:3e:cc:4d:0d:c9: 32:22:f4:cb:75:93:23:c3:13:b1:78:66:e9:96:91:3e:c5:c1: 3a:3e:21:83:9c:93:3d:50:02:bd:c9:e4:24:2f:73:89:3d:86: ef:25:bc:a6:7e:ca:e0:79:ad:a6:63:dc:1b:bf:bd:c3:0f:1e: fb:50:72:cd:ae:4a:ce:4b:3b:78:b6:ae:b3:ad:09:bd:4b:ce: 8e:24:64:91:cd:e2:39:59:8a:94:8e:71:4a:eb:42:6b:ba:b5: 60:ad:be:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjYwNTExMDIxOTEwWhcNMjYwNTE4MDIxOTEwWjAYMRYwFAYD VQQDEw02YTAxM2M5Zi0zZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FodKD+S1In/JPj38/gNFjDaibXQkg47bouf64VTFL4tPuw36gYNp3FVLIJW PdTPqGWCc7tXiN9c9Yvw5/G6rFJkrqYkjTAzD6/24DZY92NZMCTNNAQ+9yw/7XKz re1NoAcWKENeRCh+EyEVla9sSfo/GaKjqhYNpX1zLcHfk/qj/YrPhaD5njIsAFum 2nchtOb2jblzIMyKfvO2GBYYUenz8FqMQLa0Nxlgk0T/RJReC5vTJeSsJsFt9U9H xR3DRnT+/EXC2czj5IdIraVLdLzas+gJYa3/nVrtCt9u43G2ThDjwOdWf/KZ9ih0 AC8pXfaEW538NenNBX3F8crc7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2/6hXc pHtL0gFYFB4cNX/IY6P8MB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8fqITorHnR0vyI5Dxpr6Q340euSxJh7xLNbHKxBSJQfAkVvqgdDD9SKEC9U lHWINKopu7FYYrQ/d+jc3bQ1TVblwBuc8mL2G2sWxXG2w0nxx66RFgdez+xGX9Dq hrVUjFgh44OMQxXkL2WMATqnwTOh6x7vvVOJ80v6/QCnZINYbjMFJgYmPbjIQ9au 7l/8YRw3zqZb9WqQ9PUtjD7MTQ3JMiL0y3WTI8MTsXhm6ZaRPsXBOj4hg5yTPVAC vcnkJC9ziT2G7yW8pn7K4HmtpmPcG7+9ww8e+1Byza5Kzks7eLaus60JvUvOjiRk kc3iOVmKlI5xSutCa7q1YK2+LA== -----END CERTIFICATE-----Generated at Wed May 13 01:21:05 2026 by rpki-client