$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: 3cZHlcTUPL5egSNRcuc5Vte9VnbDSZ953OfECwXCWsE= Subject key identifier: 20:3F:A4:B8:1E:64:8E:7A:6E:CA:D6:E1:D5:47:89:65:E5:B0:32:BD Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: FF Signing time: Wed 13 May 2026 06:18:50 +0000 Manifest this update: Wed 13 May 2026 06:18:49 +0000 Manifest next update: Wed 20 May 2026 06:18:49 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: UqK/EvEw8YC2iF/FDqTeYAMvVh6S472YlxcY+RC8oCs=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: May 13 06:18:49 2026 GMT Not After : May 20 06:18:49 2026 GMT Subject: CN=6a0417ca-7103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:b3:1c:be:d3:12:f0:2d:13:00:ff:ba:dc: 41:67:02:82:d1:d8:f1:d7:5c:96:cf:e5:ea:4f:dd: c3:4e:49:8c:ad:5c:f9:dc:2b:a6:ea:d0:37:e7:4f: 47:bb:0a:48:e9:0f:17:f0:c8:fe:e1:14:47:ea:d0: 42:68:55:04:5e:f8:bc:82:de:c8:48:8a:d8:7a:3d: 18:8b:10:6d:df:4b:92:76:e0:ed:a2:6f:fc:53:81: 58:66:2e:81:8a:50:4d:fe:a1:94:24:7b:5b:53:08: 85:08:6f:d0:33:8f:de:ef:4d:9f:70:1c:2c:d4:fc: ad:1a:e3:ec:41:2d:4f:48:94:fa:c7:ff:eb:45:d6: 30:6d:25:db:3c:0e:b6:be:22:69:e5:2d:1d:39:16: 9b:ea:32:b3:32:32:e6:d0:0e:6e:b8:1c:c1:81:93: 62:24:4c:18:ff:f2:dd:04:e0:fe:53:2d:ee:cd:26: 9b:f8:8c:9a:c6:d8:89:1f:7a:d4:84:31:03:30:43: 0d:21:ee:68:c7:81:ce:42:a2:86:b7:28:a0:36:de: 75:d4:ee:33:28:f8:42:e1:b7:f4:f5:57:62:12:80: 3a:2b:d3:ca:32:d4:e5:5f:fe:eb:1b:0b:36:40:bd: 81:09:80:c3:db:3e:01:58:7c:06:f3:59:b7:2d:55: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:A4:B8:1E:64:8E:7A:6E:CA:D6:E1:D5:47:89:65:E5:B0:32:BD X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:43:c3:c7:19:22:51:db:f3:b9:79:37:50:47:ed:62:a0:45: 9f:f4:61:27:df:bc:fc:61:30:e2:47:86:56:49:ab:93:13:de: a2:df:5a:b6:6f:f1:0e:e6:f7:28:71:32:f8:b5:68:e0:2e:ac: 5e:48:55:16:b2:9f:f6:0a:e4:1a:b1:3a:57:9a:f7:db:8d:d1: 8c:26:31:7b:27:e5:0e:6a:3e:f1:2c:86:ae:d6:df:be:81:df: c9:7d:a2:ab:31:88:46:14:a9:8b:e1:c9:ae:11:64:c8:2e:03: ed:cb:e6:a5:6e:ea:b2:59:24:5a:02:e8:e7:f0:a4:20:e8:95: aa:ff:4c:3c:73:da:40:30:a3:a4:f8:3b:31:06:2c:9c:5c:95: 91:d6:8e:2b:62:01:ee:28:f0:e6:4e:52:0d:92:50:6e:75:fb: d7:9d:a7:80:1c:57:cd:ff:50:7e:39:41:9d:74:91:4e:52:ff: 38:5a:fa:ad:c2:97:f4:c1:5c:46:96:7d:5a:7b:31:39:a0:e2: 1b:2f:ad:bb:52:2d:b3:0a:58:87:a3:76:93:2d:22:99:38:10: f9:b9:ce:09:65:2c:00:e3:b5:34:1d:90:37:23:4a:c1:49:0f: d8:4b:4b:d0:cd:37:d8:72:5c:54:5c:6a:ab:d4:2c:cc:f3:95: 25:ab:7f:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCQ0MxMTAvBgNVBAUTKDFFNDhFRkU1M0U2MkVEMjA0QkE3QTY5NDM4NENCQUM5 MjQ2Nzk0QTcwHhcNMjYwNTEzMDYxODQ5WhcNMjYwNTIwMDYxODQ5WjAYMRYwFAYD VQQDEw02YTA0MTdjYS03MTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZqzHL7TEvAtEwD/utxBZwKC0djx11yWz+XqT93DTkmMrVz53Cum6tA3509H uwpI6Q8X8Mj+4RRH6tBCaFUEXvi8gt7ISIrYej0YixBt30uSduDtom/8U4FYZi6B ilBN/qGUJHtbUwiFCG/QM4/e702fcBws1PytGuPsQS1PSJT6x//rRdYwbSXbPA62 viJp5S0dORab6jKzMjLm0A5uuBzBgZNiJEwY//LdBOD+Uy3uzSab+IyaxtiJH3rU hDEDMEMNIe5ox4HOQqKGtyigNt511O4zKPhC4bf09VdiEoA6K9PKMtTlX/7rGws2 QL2BCYDD2z4BWHwG81m3LVUHcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCA/pLge ZI56bsrW4dVHiWXlsDK9MB8GA1UdIwQYMBaAFB5I7+U+Yu0gS6emlDhMuskkZ5Sn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUJDQy9COTU4OEJBQ0NF NzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdTQkxwNmFVT0V5NnlTUm5s S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUJDQy9COTU4OEJBQ0NFNzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdT QkxwNmFVT0V5NnlTUm5sS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUPDxxkiUdvzuXk3UEftYqBFn/RhJ9+8/GEw4keGVkmrkxPeot9atm/xDub3 KHEy+LVo4C6sXkhVFrKf9grkGrE6V5r3243RjCYxeyflDmo+8SyGrtbfvoHfyX2i qzGIRhSpi+HJrhFkyC4D7cvmpW7qslkkWgLo5/CkIOiVqv9MPHPaQDCjpPg7MQYs nFyVkdaOK2IB7ijw5k5SDZJQbnX7152ngBxXzf9QfjlBnXSRTlL/OFr6rcKX9MFc RpZ9WnsxOaDiGy+tu1ItswpYh6N2ky0imTgQ+bnOCWUsAOO1NB2QNyNKwUkP2EtL 0M032HJcVFxqq9QszPOVJat/zA== -----END CERTIFICATE-----Generated at Wed May 13 12:07:11 2026 by rpki-client