$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: X2luiEJV+LAhbykl/3tcLaMGger/BSZEDTP605s9oi8= Subject key identifier: E0:F4:E6:FB:AE:53:2F:A9:FD:16:E3:9E:AF:B7:8D:04:D5:81:46:2F Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 019B Signing time: Wed 13 May 2026 04:45:47 +0000 Manifest this update: Wed 13 May 2026 04:45:46 +0000 Manifest next update: Wed 20 May 2026 04:45:46 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: DsUuvumBDjZFTSnxMAczEupRVf8s3C4E2spqhOmjwkI=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: May 13 04:45:46 2026 GMT Not After : May 20 04:45:46 2026 GMT Subject: CN=6a0401fa-dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:6a:74:b3:67:20:8a:08:ea:3a:3c:4b:21: 41:be:b6:f6:5a:9a:40:d1:8b:19:c1:54:7c:ef:23: 0f:ea:33:9c:1b:9a:eb:1c:38:ac:be:fb:5f:a7:70: f9:8d:ae:8f:3d:8f:49:73:96:a8:81:f5:7e:c6:5f: fd:c1:7a:4d:20:d8:33:87:b7:31:e4:c5:fa:46:e0: fd:45:eb:0f:99:a9:7e:fe:46:f5:24:94:da:72:2d: 5c:1a:b8:8e:09:41:90:a6:bd:cf:7f:e7:c2:29:7b: 67:19:82:28:f7:b9:c4:1f:34:a4:98:73:b8:a5:75: 5e:97:35:9d:43:ee:7d:94:8b:5a:a6:74:d4:47:07: 3c:50:a1:79:d6:c4:d6:4f:51:b7:2f:d9:2b:58:ca: d0:36:17:f0:20:a2:fc:7b:f8:0d:cd:3b:eb:19:2d: 06:ed:ab:3a:95:c5:15:e0:68:9a:50:f5:69:78:2e: 4f:c5:4c:21:3e:2e:38:8d:36:1d:f0:2e:88:ce:d0: 30:87:ae:b8:f5:7d:63:56:99:13:a0:36:f2:42:a1: 6a:9f:cb:3e:e7:71:af:3d:99:92:db:70:91:ca:fa: a3:74:07:77:0e:ad:75:c8:c3:77:f8:89:7d:52:5f: eb:70:21:54:0d:01:2b:59:62:83:51:35:5e:c9:6d: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F4:E6:FB:AE:53:2F:A9:FD:16:E3:9E:AF:B7:8D:04:D5:81:46:2F X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a7:9a:c6:dd:0a:5c:5e:ac:b8:46:94:25:dd:eb:7c:f7:05: 2d:c8:1e:9a:f3:ea:51:73:9d:7d:d6:1a:f1:d5:e7:af:b9:ab: 67:7b:2a:5d:4c:2c:b5:39:26:c1:fb:de:cf:bd:ef:ff:5b:3b: 02:0a:fc:70:c5:ad:8a:ad:b0:15:73:a8:50:aa:0e:f2:b2:23: 91:ca:19:75:00:59:10:b8:11:cf:51:f3:b1:19:9e:86:e2:30: bd:57:96:af:b5:27:06:14:d6:b0:4d:f0:62:70:43:db:46:82: f0:13:4d:72:89:ae:3c:16:28:32:d8:34:65:43:ce:55:46:2e: 27:f0:4d:b9:e8:40:86:d6:f2:31:b3:35:fb:d7:6d:d9:9b:da: 5c:39:df:6f:35:d3:a5:61:b4:6e:11:17:15:99:a3:3b:40:cc: bd:7b:eb:ba:3d:24:d0:10:d2:ff:a3:6b:80:4b:38:a5:e1:95: 2e:5a:e5:9c:f7:91:1c:6f:42:ba:ac:7a:85:1e:6b:6b:36:0e: 7e:d6:45:8f:36:84:c3:96:ea:ed:49:cf:f2:7b:57:6a:e4:c2: b3:d2:43:7e:9b:b5:ec:cf:29:60:99:2a:db:49:2d:11:3b:47: 53:e6:0a:86:34:bf:f2:79:c8:bf:27:ad:88:40:9c:37:8d:e1: 7e:9f:fa:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwNTEzMDQ0NTQ2WhcNMjYwNTIwMDQ0NTQ2WjAYMRYwFAYD VQQDEw02YTA0MDFmYS1kZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GtqdLNnIIoI6jo8SyFBvrb2WppA0YsZwVR87yMP6jOcG5rrHDisvvtfp3D5 ja6PPY9Jc5aogfV+xl/9wXpNINgzh7cx5MX6RuD9ResPmal+/kb1JJTaci1cGriO CUGQpr3Pf+fCKXtnGYIo97nEHzSkmHO4pXVelzWdQ+59lItapnTURwc8UKF51sTW T1G3L9krWMrQNhfwIKL8e/gNzTvrGS0G7as6lcUV4GiaUPVpeC5PxUwhPi44jTYd 8C6IztAwh6649X1jVpkToDbyQqFqn8s+53GvPZmS23CRyvqjdAd3Dq11yMN3+Il9 Ul/rcCFUDQErWWKDUTVeyW3aGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOD05vuu Uy+p/Rbjnq+3jQTVgUYvMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALqeaxt0KXF6suEaUJd3rfPcFLcgemvPqUXOdfdYa8dXnr7mrZ3sqXUwstTkm wfvez73v/1s7Agr8cMWtiq2wFXOoUKoO8rIjkcoZdQBZELgRz1HzsRmehuIwvVeW r7UnBhTWsE3wYnBD20aC8BNNcomuPBYoMtg0ZUPOVUYuJ/BNuehAhtbyMbM1+9dt 2ZvaXDnfbzXTpWG0bhEXFZmjO0DMvXvruj0k0BDS/6NrgEs4peGVLlrlnPeRHG9C uqx6hR5razYOftZFjzaEw5bq7UnP8ntXauTCs9JDfpu17M8pYJkq20ktETtHU+YK hjS/8nnIvyetiECcN43hfp/6vQ== -----END CERTIFICATE-----Generated at Wed May 13 15:28:16 2026 by rpki-client