$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: ZBQWMiIqf0OGeXmAS0xhRhYgLKpdB/TE1OJ/dkzK8qc= Subject key identifier: 98:C6:8C:55:9E:E6:5A:32:26:7A:FA:3A:5A:B2:24:D8:FB:20:BB:B3 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0AA3 Signing time: Tue 12 May 2026 19:34:13 +0000 Manifest this update: Tue 12 May 2026 19:34:13 +0000 Manifest next update: Tue 19 May 2026 19:34:13 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: 49wG14YtX16mKuUCC91OZIAqnMZNsgBVEqOTLNvFRAE=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0tnUQM8nUOKmP6zcIR5mibnCQ76vuNJWrUF9kNBfQsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: May 12 19:34:13 2026 GMT Not After : May 19 19:34:13 2026 GMT Subject: CN=6a0380b5-d009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:75:a4:06:0f:78:cb:f8:11:a7:7c:94:3e: ca:12:75:66:07:a4:1b:4c:de:9d:f9:62:d3:68:85: 83:18:2f:24:6f:80:d5:70:11:11:0e:6a:ef:28:e8: 5e:53:ea:8e:ce:b4:71:a8:2c:7a:77:d5:dc:bb:3e: 87:2f:1f:f0:f2:81:26:1b:d2:73:91:bf:08:86:cd: eb:ee:9c:4a:d0:79:e9:be:93:2a:75:ed:a5:6e:1b: 29:e2:bb:10:8a:15:fb:70:d2:2e:48:c6:64:9a:cf: b1:9a:f0:86:c5:59:c6:b4:e8:00:79:3b:25:54:89: 04:0f:f4:f7:95:0d:ea:bf:9e:63:81:7c:01:8e:b4: 62:82:94:91:1b:1d:e8:5a:9d:b3:5a:35:66:3b:cb: 9c:fa:a3:56:c2:68:70:7c:64:4c:f7:63:e5:57:cd: f2:cf:26:a1:ea:c2:bf:63:8d:51:07:df:87:ab:f4: b0:04:20:0d:82:1a:86:dc:88:df:12:cd:09:91:95: 75:4c:08:b5:68:4d:7f:74:bd:8b:c7:1e:c2:00:0f: 18:f8:3d:fc:20:d5:eb:3c:96:6e:14:23:60:c9:b8: cb:1d:96:61:89:df:04:69:29:8e:09:45:5a:8b:2a: bc:06:fd:3b:cc:3c:cf:cd:c8:84:49:c0:79:46:e6: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:8C:55:9E:E6:5A:32:26:7A:FA:3A:5A:B2:24:D8:FB:20:BB:B3 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2b:33:fd:b6:7e:24:d5:f3:98:55:6f:ca:c5:ae:f4:f6:47: ea:a4:52:90:45:c9:17:0c:80:58:5d:a6:27:57:1b:1a:e2:8b: d5:39:02:14:73:60:14:3e:51:64:42:1f:a3:9c:73:2b:49:05: 33:85:d9:c0:c7:3b:87:25:6c:71:6e:ce:7c:df:4d:26:91:4b: ba:3a:15:70:58:5e:f7:7e:2c:be:15:14:c6:34:4d:15:fd:ea: 63:f9:f3:68:d7:2d:12:54:67:f9:4e:e1:d5:9c:25:db:98:e9: 98:c5:d3:0f:a2:c5:9a:6c:a2:42:4a:ef:71:23:1d:c3:74:87: 6a:fd:4c:a0:7d:ea:bb:4b:46:23:e9:0f:47:0e:09:6d:5b:07: b8:da:25:46:31:79:45:96:2e:51:9e:8e:14:a0:d0:81:29:78: f8:da:da:f0:11:3b:8e:7c:24:6c:cd:0d:8b:11:00:05:1a:35: f9:76:fc:e2:f1:7c:5c:e4:dd:31:50:fc:7a:15:e6:40:ec:db: a2:76:d8:9a:41:25:fe:f7:58:44:a0:67:6e:a9:4d:6d:a1:d2: ac:fe:63:92:0d:bb:6c:6c:7c:18:02:e0:53:8c:e9:9d:ff:80: dd:8f:a0:ce:c1:c8:d0:94:92:94:f2:e1:3d:81:af:58:28:41: de:82:8a:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjYwNTEyMTkzNDEzWhcNMjYwNTE5MTkzNDEzWjAYMRYwFAYD VQQDEw02YTAzODBiNS1kMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYR1pAYPeMv4Ead8lD7KEnVmB6QbTN6d+WLTaIWDGC8kb4DVcBERDmrvKOhe U+qOzrRxqCx6d9Xcuz6HLx/w8oEmG9Jzkb8Ihs3r7pxK0HnpvpMqde2lbhsp4rsQ ihX7cNIuSMZkms+xmvCGxVnGtOgAeTslVIkED/T3lQ3qv55jgXwBjrRigpSRGx3o Wp2zWjVmO8uc+qNWwmhwfGRM92PlV83yzyah6sK/Y41RB9+Hq/SwBCANghqG3Ijf Es0JkZV1TAi1aE1/dL2Lxx7CAA8Y+D38INXrPJZuFCNgybjLHZZhid8EaSmOCUVa iyq8Bv07zDzPzciEScB5RubiDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjGjFWe 5loyJnr6OlqyJNj7ILuzMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAASsz/bZ+JNXzmFVvysWu9PZH6qRSkEXJFwyAWF2mJ1cbGuKL1TkCFHNgFD5R ZEIfo5xzK0kFM4XZwMc7hyVscW7OfN9NJpFLujoVcFhe934svhUUxjRNFf3qY/nz aNctElRn+U7h1Zwl25jpmMXTD6LFmmyiQkrvcSMdw3SHav1MoH3qu0tGI+kPRw4J bVsHuNolRjF5RZYuUZ6OFKDQgSl4+Nra8BE7jnwkbM0NixEABRo1+Xb84vF8XOTd MVD8ehXmQOzbonbYmkEl/vdYRKBnbqlNbaHSrP5jkg27bGx8GALgU4zpnf+A3Y+g zsHI0JSSlPLhPYGvWChB3oKKNg== -----END CERTIFICATE-----Generated at Wed May 13 11:45:28 2026 by rpki-client