$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: DptEjIbGmxGRa4obWkDg+BFpD7/kbsCnGg40DfRxgfA= Subject key identifier: 98:C3:35:10:90:0B:63:C3:89:F9:F2:A5:B2:C0:0A:B5:C3:98:E2:2A Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 0271 Signing time: Thu 21 May 2026 02:05:22 +0000 Manifest this update: Thu 21 May 2026 02:05:21 +0000 Manifest next update: Thu 28 May 2026 02:05:21 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: i/SD0t6O47AQ3Ge4wmMVYm+xpQGbDYiYXpZAc8CQYyY=) 2: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=) 3: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: May 21 02:05:21 2026 GMT Not After : May 28 02:05:21 2026 GMT Subject: CN=6a0e6862-076b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:03:d1:88:36:65:92:a7:fe:ed:23:67:96: 5d:b8:6b:bb:18:7a:4b:e3:4f:12:90:5b:6b:47:72: 59:47:9b:d1:30:48:9c:f2:66:e6:bf:76:63:82:2a: ad:87:86:74:c2:d9:a5:e9:a7:c3:a4:10:1d:ab:f2: f4:9e:ce:2a:7a:e8:62:99:f9:dd:0e:7f:1c:f0:e1: d3:2b:83:ea:7d:6d:18:38:f0:fe:16:74:ef:95:c3: 2b:9d:3a:54:cc:4d:6b:a1:cc:b4:f3:15:9f:be:15: 30:f9:1f:9f:da:af:4d:c1:68:22:aa:6f:cb:63:a9: 9f:7f:d0:e0:13:a7:99:7e:8c:ab:5d:64:e4:54:43: 5c:64:f3:07:10:7c:0e:81:67:9f:d5:32:b1:0b:da: 72:25:15:6f:22:b8:4b:ae:ca:07:84:32:c7:d0:92: e3:77:ce:da:f5:0e:a4:23:d1:30:04:fb:2a:bd:16: 85:69:b4:4a:e0:92:d7:62:fe:90:1a:d1:19:4d:40: 45:a0:c5:d1:e5:76:28:99:53:36:92:f9:8a:2b:7e: 43:1c:fd:40:7d:97:ea:e5:2d:9a:16:47:b0:c7:3e: 03:79:20:47:c9:32:86:39:0c:4d:da:92:ad:e7:e7: 9d:fd:35:67:3c:88:41:75:10:a3:38:65:2c:4a:42: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C3:35:10:90:0B:63:C3:89:F9:F2:A5:B2:C0:0A:B5:C3:98:E2:2A X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d4:53:05:95:51:eb:b8:0a:8a:2f:f0:e1:24:d7:5d:b2:14: 4b:b2:bc:cb:24:07:33:30:94:e4:90:a6:5c:55:f7:67:e7:94: c6:20:64:3a:88:01:dd:d8:ef:1a:48:5f:b2:78:f3:42:7d:a8: b1:07:83:3a:e8:38:10:af:95:4e:d5:8e:26:3b:b0:93:3f:fc: 09:74:c8:62:97:23:0c:81:a1:fa:a9:46:8d:51:4e:29:6c:2c: 41:d3:b0:4d:c7:7c:d0:53:d5:57:85:2f:f1:65:68:df:0d:d3: ca:b2:77:8d:17:fb:b1:0a:3c:16:91:7e:56:ed:d4:06:24:3f: 84:ea:77:08:a8:2f:72:3e:3b:1b:79:84:47:ec:a1:06:75:d8: ff:ca:88:05:ac:1a:ed:30:96:a7:61:8a:f6:e9:c9:f1:08:dd: a7:d7:af:b0:17:d9:8c:54:f4:1e:54:76:46:08:75:e4:65:35: 00:b9:2e:9c:5e:3e:25:c3:b5:88:99:48:b9:55:3b:ab:d6:37: 49:5d:65:04:3f:36:0e:61:66:d0:40:3a:3e:3b:4f:fc:be:4d: 8a:24:0b:23:36:6b:d1:10:ef:bb:4e:eb:ea:1c:88:90:b0:6b: ec:00:43:c7:35:34:3c:c3:02:70:fb:e4:a8:46:0c:18:5d:c8: 23:53:b1:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjYwNTIxMDIwNTIxWhcNMjYwNTI4MDIwNTIxWjAYMRYwFAYD VQQDEw02YTBlNjg2Mi0wNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqu8D0Yg2ZZKn/u0jZ5ZduGu7GHpL408SkFtrR3JZR5vRMEic8mbmv3Zjgiqt h4Z0wtml6afDpBAdq/L0ns4qeuhimfndDn8c8OHTK4PqfW0YOPD+FnTvlcMrnTpU zE1rocy08xWfvhUw+R+f2q9NwWgiqm/LY6mff9DgE6eZfoyrXWTkVENcZPMHEHwO gWef1TKxC9pyJRVvIrhLrsoHhDLH0JLjd87a9Q6kI9EwBPsqvRaFabRK4JLXYv6Q GtEZTUBFoMXR5XYomVM2kvmKK35DHP1AfZfq5S2aFkewxz4DeSBHyTKGOQxN2pKt 5+ed/TVnPIhBdRCjOGUsSkJajQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjDNRCQ C2PDifnypbLACrXDmOIqMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABNRTBZVR67gKii/w4STXXbIUS7K8yyQHMzCU5JCmXFX3Z+eUxiBkOogB3djv GkhfsnjzQn2osQeDOug4EK+VTtWOJjuwkz/8CXTIYpcjDIGh+qlGjVFOKWwsQdOw Tcd80FPVV4Uv8WVo3w3TyrJ3jRf7sQo8FpF+Vu3UBiQ/hOp3CKgvcj47G3mER+yh BnXY/8qIBawa7TCWp2GK9unJ8Qjdp9evsBfZjFT0HlR2Rgh15GU1ALkunF4+JcO1 iJlIuVU7q9Y3SV1lBD82DmFm0EA6PjtP/L5NiiQLIzZr0RDvu07r6hyIkLBr7ABD xzU0PMMCcPvkqEYMGF3II1OxKQ== -----END CERTIFICATE-----Generated at Thu May 21 10:14:46 2026 by rpki-client