$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: X+Sm/blcr3Fgjt9fVo3oTH/DRiQRyIPc2yohCdjow2s= Subject key identifier: 5E:F9:1D:6B:42:EF:7B:31:78:7C:3D:3A:3E:F1:45:89:6F:10:4A:9E Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 03F0 Signing time: Thu 21 May 2026 00:34:26 +0000 Manifest this update: Thu 21 May 2026 00:34:26 +0000 Manifest next update: Thu 28 May 2026 00:34:26 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: 5Mpbw+lwlWNc6Fblud0rHYzb+dG6YZWMJDKCEGk661M=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: i4wGybB1WdffwImrTNHdx7mWqUy/NNLm8IvjBsrlwTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: May 21 00:34:26 2026 GMT Not After : May 28 00:34:26 2026 GMT Subject: CN=6a0e5312-9e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:d9:22:38:cc:35:fd:7a:70:d9:7a:69:fe: a3:84:6d:89:ca:01:8e:0b:5d:20:8f:6e:41:34:f4: 86:97:86:52:76:43:a5:0e:38:fa:99:b9:40:1e:17: 5f:0f:23:43:2a:0d:4b:99:81:25:e3:91:d6:9e:f0: 93:78:db:bd:6f:04:7a:67:1e:3c:2c:d5:11:19:c4: ec:cc:da:95:f1:38:fc:b9:78:66:89:c0:50:ae:fc: 9a:1e:cf:4f:9e:73:0a:25:38:2f:43:8c:ac:9d:f5: cd:ba:96:97:94:20:5f:f0:ee:ba:ea:dc:d0:2c:13: c4:91:f0:e6:61:04:d8:f9:52:c6:89:b3:31:4c:64: ec:58:5a:fe:65:fc:c9:05:cd:77:10:58:06:74:e7: 49:88:70:8a:ce:20:17:16:95:5f:0b:ad:d7:cc:17: 97:15:08:f9:aa:14:55:5f:06:fe:42:b7:f7:b7:a6: de:97:d0:fe:01:17:a5:e6:4d:77:26:df:06:dc:2e: 9e:67:1c:b4:94:36:dd:2c:09:13:28:f9:43:11:82: 16:c2:63:38:cc:eb:e9:a0:49:59:ae:1e:da:6f:41: 03:1c:a0:ab:9f:87:cf:05:a1:a6:6d:be:e9:66:fc: 44:e8:9a:5a:5b:7f:1a:69:7c:c1:91:dd:03:da:7a: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:1D:6B:42:EF:7B:31:78:7C:3D:3A:3E:F1:45:89:6F:10:4A:9E X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:fb:d3:cf:f4:d0:c9:0c:ee:24:bb:23:e2:d4:63:c7:44:c0: 24:66:8b:ad:15:33:63:fa:3e:d5:d0:2a:3a:5c:88:b3:0d:8d: 49:63:18:22:6a:0d:1f:9d:7a:1c:46:e7:0c:a8:62:5b:fc:38: a2:43:e5:b1:5e:71:eb:25:d7:5b:f1:19:a8:de:53:89:2d:db: 7d:f4:7b:63:99:a1:6a:9f:41:ad:ea:e3:4b:21:51:44:0f:b2: 7b:10:c4:e8:55:04:5c:57:23:4b:d7:9e:db:7b:be:13:a7:34: 2c:78:17:11:d2:25:59:31:c7:11:74:ca:d2:a7:b1:6b:88:60: 9e:fd:d9:bc:0a:c6:32:04:cb:9d:e9:6d:61:95:57:ea:8e:e9: 8d:73:a8:fa:7d:b1:9c:3a:b6:2b:7e:f8:78:57:52:15:bd:b4: 14:20:60:cf:13:0b:c3:2c:84:24:39:18:0a:54:31:fa:87:04: 57:cf:ea:4b:08:dd:3f:9e:ef:7a:dd:e1:16:e1:87:39:67:a6: 91:ae:9a:c5:72:cd:4f:b6:86:12:7b:c2:4f:d1:15:84:13:5e: 1f:e6:98:d1:a5:88:94:99:54:56:52:97:6f:4c:48:05:fb:94: 0b:5f:8d:f2:3e:bf:06:8f:4e:2e:eb:51:a7:b6:a6:72:d9:ea: f9:df:e8:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjYwNTIxMDAzNDI2WhcNMjYwNTI4MDAzNDI2WjAYMRYwFAYD VQQDEw02YTBlNTMxMi05ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgfZIjjMNf16cNl6af6jhG2JygGOC10gj25BNPSGl4ZSdkOlDjj6mblAHhdf DyNDKg1LmYEl45HWnvCTeNu9bwR6Zx48LNURGcTszNqV8Tj8uXhmicBQrvyaHs9P nnMKJTgvQ4ysnfXNupaXlCBf8O666tzQLBPEkfDmYQTY+VLGibMxTGTsWFr+ZfzJ Bc13EFgGdOdJiHCKziAXFpVfC63XzBeXFQj5qhRVXwb+Qrf3t6bel9D+ARel5k13 Jt8G3C6eZxy0lDbdLAkTKPlDEYIWwmM4zOvpoElZrh7ab0EDHKCrn4fPBaGmbb7p ZvxE6JpaW38aaXzBkd0D2nqZhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF75HWtC 73sxeHw9Oj7xRYlvEEqeMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx/vTz/TQyQzuJLsj4tRjx0TAJGaLrRUzY/o+1dAqOlyIsw2NSWMYImoNH516 HEbnDKhiW/w4okPlsV5x6yXXW/EZqN5TiS3bffR7Y5mhap9BrerjSyFRRA+yexDE 6FUEXFcjS9ee23u+E6c0LHgXEdIlWTHHEXTK0qexa4hgnv3ZvArGMgTLneltYZVX 6o7pjXOo+n2xnDq2K374eFdSFb20FCBgzxMLwyyEJDkYClQx+ocEV8/qSwjdP57v et3hFuGHOWemka6axXLNT7aGEnvCT9EVhBNeH+aY0aWIlJlUVlKXb0xIBfuUC1+N 8j6/Bo9OLutRp7amctnq+d/ofQ== -----END CERTIFICATE-----Generated at Thu May 21 15:04:37 2026 by rpki-client