$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json) Hash identifier: xIsmfkzPEVSvizky8qiwXiOtvjtyEPOKXww+C6bDk/M= Subject key identifier: 3F:09:4B:F2:0D:C7:A1:A9:FA:CC:C5:F1:15:B8:B0:3B:97:E1:42:F5 Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft Manifest number: B6 Signing time: Mon 11 May 2026 07:12:03 +0000 Manifest this update: Mon 11 May 2026 07:12:02 +0000 Manifest next update: Mon 18 May 2026 07:12:02 +0000 Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: A/l3x1tyY23Iqi2+iXglHELtJllkaKVyit/9Oo92KmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Validity Not Before: May 11 07:12:02 2026 GMT Not After : May 18 07:12:02 2026 GMT Subject: CN=6a018143-d4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:1c:36:d3:c2:2b:c8:19:67:87:b1:67:3b: 3a:95:ca:98:d8:f1:7c:2b:b3:bd:00:b8:9c:53:47: 0c:73:75:ab:be:a8:73:e4:ad:da:44:b2:db:b1:bb: 53:33:5c:35:e2:f7:26:55:d6:70:fa:2b:97:a6:b0: 32:70:2d:8f:14:ca:af:4b:53:50:44:7b:29:0a:d6: 43:3f:a7:a5:f5:a4:1d:88:c3:a6:5e:48:c0:1a:7c: e1:85:ef:a1:cd:57:38:c3:66:f9:df:13:85:36:ae: 83:50:5b:d1:93:10:cf:f5:54:47:24:b8:c6:5c:5e: 4d:b1:ff:2f:cb:aa:80:31:64:35:b9:10:aa:a8:24: 31:a0:a8:bf:bf:0f:70:ca:3b:ca:07:37:0d:10:58: f7:35:c9:81:05:89:b2:67:d5:32:08:61:c8:3f:f3: b0:fa:ff:4f:77:7a:b7:b7:23:1b:1e:8f:7c:6f:e0: 82:2a:6b:67:4d:c3:18:04:11:1f:a3:6e:46:77:80: 33:61:69:fe:5d:2e:0f:5a:4c:79:be:18:3f:5a:03: b7:9b:07:5c:ac:d5:4d:e7:b3:4b:7e:b8:56:aa:87: 21:c1:4f:2d:e6:b2:f5:35:1f:04:f0:bb:06:4a:ac: c1:79:8e:67:5f:3d:25:92:61:54:b1:e2:ac:bd:f0: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:09:4B:F2:0D:C7:A1:A9:FA:CC:C5:F1:15:B8:B0:3B:97:E1:42:F5 X509v3 Authority Key Identifier: keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:76:51:43:64:28:fa:ba:38:96:c9:82:b4:50:fb:94:3c:68: bc:0e:af:fd:76:bc:85:54:6e:a6:ab:6e:59:f5:96:27:2a:17: 08:83:6c:7b:02:38:1d:62:47:7b:ce:cc:65:a4:73:80:85:d5: 67:1f:cd:f8:53:fb:8d:fb:26:b9:49:05:03:d4:f0:0f:32:34: f0:8b:8e:ee:82:fc:22:98:d4:78:76:40:7a:96:d6:6b:30:bd: bd:8c:8e:3f:7a:89:6e:48:ec:14:e5:e9:0d:a9:52:3c:4a:b8: 89:81:b8:ff:b8:5c:58:3c:9b:3e:0b:9f:25:88:9f:08:2b:56: 03:2a:9e:09:37:9c:b0:a6:9d:bb:d4:77:e7:27:82:45:a7:59: 86:e0:b1:84:28:1d:c4:e5:2f:77:e5:38:a7:cf:d6:0c:5a:de: 77:2c:3a:b9:70:38:30:70:2a:b0:be:f9:ec:c6:74:38:10:09: a7:f7:66:15:63:a8:8d:34:5b:5b:ba:2b:8b:7d:d7:f5:26:f3: 07:7a:ee:d8:e2:c9:c0:b6:96:43:b3:f7:57:45:da:65:fa:d3: 65:40:5a:7f:b0:20:52:16:49:64:8e:10:3b:2c:d6:f1:28:b7: b7:1b:4d:a0:e2:97:81:16:aa:76:f2:e8:58:01:eb:ff:a9:9d: 47:7b:b1:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QzAxMTAvBgNVBAUTKDFEMERBQzExRUQ4MkUzNUMyM0IwQ0JFRkZCRUUwMDYy NjNCMDk5NTcwHhcNMjYwNTExMDcxMjAyWhcNMjYwNTE4MDcxMjAyWjAYMRYwFAYD VQQDEw02YTAxODE0My1kNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2egcNtPCK8gZZ4exZzs6lcqY2PF8K7O9ALicU0cMc3Wrvqhz5K3aRLLbsbtT M1w14vcmVdZw+iuXprAycC2PFMqvS1NQRHspCtZDP6el9aQdiMOmXkjAGnzhhe+h zVc4w2b53xOFNq6DUFvRkxDP9VRHJLjGXF5Nsf8vy6qAMWQ1uRCqqCQxoKi/vw9w yjvKBzcNEFj3NcmBBYmyZ9UyCGHIP/Ow+v9Pd3q3tyMbHo98b+CCKmtnTcMYBBEf o25Gd4AzYWn+XS4PWkx5vhg/WgO3mwdcrNVN57NLfrhWqochwU8t5rL1NR8E8LsG SqzBeY5nXz0lkmFUseKsvfDDeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8JS/IN x6Gp+szF8RW4sDuX4UL1MB8GA1UdIwQYMBaAFB0NrBHtguNcI7DL7/vuAGJjsJlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81QUZCMTQ4RTM4 ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQxd2pzTXZ2LS00QVltT3dt VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRMnNFZTJDNDF3anNNdnYtLTRBWW1Pd21WYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81QUZCMTQ4RTM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQx d2pzTXZ2LS00QVltT3dtVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3ZRQ2Qo+ro4lsmCtFD7lDxovA6v/Xa8hVRupqtuWfWWJyoXCINsewI4HWJH e87MZaRzgIXVZx/N+FP7jfsmuUkFA9TwDzI08IuO7oL8IpjUeHZAepbWazC9vYyO P3qJbkjsFOXpDalSPEq4iYG4/7hcWDybPgufJYifCCtWAyqeCTecsKadu9R35yeC RadZhuCxhCgdxOUvd+U4p8/WDFredyw6uXA4MHAqsL757MZ0OBAJp/dmFWOojTRb W7ori33X9SbzB3ru2OLJwLaWQ7P3V0XaZfrTZUBaf7AgUhZJZI4QOyzW8Si3txtN oOKXgRaqdvLoWAHr/6mdR3ux+A== -----END CERTIFICATE-----Generated at Wed May 13 05:02:57 2026 by rpki-client