$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: 4f69ZLDAOH+l8gRgszyHJ8Ujmf8hH1CKH0/k9911bWY= Subject key identifier: 45:92:9C:42:0D:2E:1F:DD:9B:45:61:39:2E:6C:CD:B4:F9:6E:31:37 Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 0900 Signing time: Tue 12 May 2026 20:21:44 +0000 Manifest this update: Tue 12 May 2026 20:21:43 +0000 Manifest next update: Tue 19 May 2026 20:21:43 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: VFyhLZOXwJPP3K6naphFDHtnsFcqP9Fl/sd8crWMJXQ=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: C9SJEB+K9J+a2aEjNLQZMOXVR8Yr7jgVdMpBsNeJ+gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: May 12 20:21:43 2026 GMT Not After : May 19 20:21:43 2026 GMT Subject: CN=6a038bd8-9f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:36:91:10:12:1d:c3:57:67:24:e0:85:6e: f6:d6:7f:06:67:6b:98:a4:55:14:e2:11:78:79:c2: b8:8a:1e:98:eb:44:3f:22:cd:96:b1:3b:92:44:96: db:b2:65:ef:93:69:0a:5e:09:a5:db:c5:ce:95:df: de:f3:e8:1d:db:0d:22:e5:b9:00:74:a9:5d:a1:f8: c9:d5:bc:29:e7:52:3e:ef:f0:4e:ab:a1:16:46:5e: e1:d0:e4:9f:67:c1:c3:cd:c8:30:6a:ed:f9:79:b9: 9f:98:ea:80:e9:45:66:08:20:d8:fc:a2:d4:96:df: 0c:b1:37:6e:de:6c:99:cf:52:93:63:84:4b:b4:3d: 9f:b6:11:91:68:9c:71:92:95:5d:6b:2d:10:7e:aa: 79:21:87:81:ec:f6:fa:8a:dd:cb:a0:4a:64:e0:c7: fc:54:8c:14:86:53:dd:09:e2:6a:d7:ab:20:ae:b8: c2:38:dc:31:c1:73:77:f4:0c:71:28:8b:6d:a1:c6: 48:20:a3:5c:21:77:16:41:16:25:c9:3b:75:fe:cd: 2a:9b:5b:f7:8f:14:7c:67:95:37:69:e9:8f:01:a4: 91:f8:23:e4:1c:21:59:21:cd:0a:5f:ab:54:ae:34: 70:55:aa:f3:8d:fe:9a:50:98:73:58:eb:4d:cc:8c: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:92:9C:42:0D:2E:1F:DD:9B:45:61:39:2E:6C:CD:B4:F9:6E:31:37 X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4a:8f:01:a6:02:ec:71:73:90:f9:6c:a8:4f:84:7d:ca:ce: 62:7d:26:79:63:13:a2:4d:0f:2e:89:9c:4c:1e:a8:b7:09:b0: 44:30:ef:3b:67:e0:c8:0d:3f:78:96:42:ed:b4:e6:7c:d7:e9: d0:11:ce:dd:2c:04:12:96:22:8e:9f:f0:c1:c5:e5:41:6f:d2: c4:c7:f9:e6:55:9a:92:59:6d:90:3b:7b:8d:fc:7f:e0:78:e5: 1a:ef:77:2a:96:e1:00:7a:7d:45:95:3d:ef:e6:34:7a:f5:52: e7:2f:ee:9c:1b:0c:be:06:e1:03:0e:0a:a6:c9:b9:5d:70:54: 14:2a:a5:5d:4a:a2:20:6e:cc:58:69:fd:71:b3:f7:00:1a:92: 3b:24:17:12:d3:0f:35:3f:00:eb:df:06:8e:82:26:50:45:b1: 8b:4d:09:26:a6:9a:7d:f8:1c:97:dc:ff:41:e1:a2:0c:ec:45: a2:ba:35:2e:ef:78:73:c8:cf:44:09:b5:bc:32:38:d8:69:bd: 2b:ab:52:31:c9:c3:16:31:0d:d0:46:08:61:44:f1:d8:c9:fc: 26:74:fe:81:37:be:26:76:16:cf:ec:87:24:e9:4d:63:6c:49: 4f:07:47:34:20:6f:4c:eb:f5:e8:0d:ad:c5:b3:39:1c:00:36: 3f:b6:8e:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjYwNTEyMjAyMTQzWhcNMjYwNTE5MjAyMTQzWjAYMRYwFAYD VQQDEw02YTAzOGJkOC05ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRw2kRASHcNXZyTghW721n8GZ2uYpFUU4hF4ecK4ih6Y60Q/Is2WsTuSRJbb smXvk2kKXgml28XOld/e8+gd2w0i5bkAdKldofjJ1bwp51I+7/BOq6EWRl7h0OSf Z8HDzcgwau35ebmfmOqA6UVmCCDY/KLUlt8MsTdu3myZz1KTY4RLtD2fthGRaJxx kpVday0Qfqp5IYeB7Pb6it3LoEpk4Mf8VIwUhlPdCeJq16sgrrjCONwxwXN39Axx KIttocZIIKNcIXcWQRYlyTt1/s0qm1v3jxR8Z5U3aemPAaSR+CPkHCFZIc0KX6tU rjRwVarzjf6aUJhzWOtNzIzfKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWSnEIN Lh/dm0VhOS5szbT5bjE3MB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkqPAaYC7HFzkPlsqE+EfcrOYn0meWMTok0PLomcTB6otwmwRDDvO2fgyA0/ eJZC7bTmfNfp0BHO3SwEEpYijp/wwcXlQW/SxMf55lWaklltkDt7jfx/4HjlGu93 KpbhAHp9RZU97+Y0evVS5y/unBsMvgbhAw4Kpsm5XXBUFCqlXUqiIG7MWGn9cbP3 ABqSOyQXEtMPNT8A698GjoImUEWxi00JJqaaffgcl9z/QeGiDOxForo1Lu94c8jP RAm1vDI42Gm9K6tSMcnDFjEN0EYIYUTx2Mn8JnT+gTe+JnYWz+yHJOlNY2xJTwdH NCBvTOv16A2txbM5HAA2P7aO5A== -----END CERTIFICATE-----Generated at Wed May 13 02:24:48 2026 by rpki-client