$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: 4ikpic7hLcozpHAHRwv8l63bPwaFLg3loBBr9Xn1quI= Subject key identifier: 13:11:F2:4B:E1:DA:AE:1A:08:C1:22:81:BB:76:5A:C4:2C:66:6B:3C Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0251 Signing time: Thu 21 May 2026 02:28:45 +0000 Manifest this update: Thu 21 May 2026 02:28:45 +0000 Manifest next update: Thu 28 May 2026 02:28:45 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: z1y9B3rUE/jBjhFaytiFMEOKFm+rqrUPLk2331sB7Sw=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 21 02:28:45 2026 GMT Not After : May 28 02:28:45 2026 GMT Subject: CN=6a0e6ddd-6221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:4d:1f:09:46:90:70:bc:cc:89:eb:de:e8: 4e:9d:b8:ff:19:52:7f:48:fc:f8:89:00:0f:ad:1e: ed:1e:5f:6f:3e:90:af:c4:dc:5d:0a:db:d1:cd:be: 94:81:34:5c:f4:f5:03:49:58:ce:9e:4f:78:96:72: f5:33:6b:b2:1d:0c:17:40:09:a1:36:7e:e3:5b:b1: ef:ab:ea:59:eb:9f:28:aa:e4:c2:c4:8f:b9:c9:34: f5:33:e8:be:d0:85:83:2d:13:f5:af:c3:b6:14:a1: 1a:6b:dc:88:ca:b4:8e:f6:c0:b3:a7:66:f8:30:31: 20:10:54:bc:87:76:ce:1a:a0:43:02:f8:71:d4:19: fc:0f:7f:4e:2b:bc:32:0d:d8:ff:06:ba:e3:70:08: 25:3c:2e:03:1b:56:c2:5f:2d:64:b7:d1:59:80:c1: 4a:65:b4:ae:b4:5b:6d:76:f6:06:9c:98:c0:02:67: e8:e8:18:4e:db:4c:af:9e:59:af:39:57:72:5b:94: 22:9f:12:ca:1c:e7:89:27:bb:aa:5d:af:b6:f1:2f: 22:f0:19:f6:17:1b:3b:9b:b5:8e:f4:87:6c:1b:b8: 7b:37:7a:93:c3:e0:61:e7:d3:68:36:88:b0:d6:bf: 24:c2:9f:46:59:22:31:95:17:8c:9b:34:56:a9:a6: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:11:F2:4B:E1:DA:AE:1A:08:C1:22:81:BB:76:5A:C4:2C:66:6B:3C X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:56:1e:58:1f:aa:7e:6b:ab:68:41:01:af:77:66:c3:f3:d0: 3b:0d:04:29:f3:33:f5:db:ad:e2:a3:d3:cf:72:c7:47:4a:51: b7:00:41:db:12:be:fe:41:fb:3b:4d:ba:2b:6f:8c:1c:8b:96: ed:8c:73:83:ab:89:3d:49:d4:b8:d4:31:e6:e9:03:36:d7:d2: 78:e0:3f:75:c8:78:06:12:b2:d3:17:30:6f:90:86:69:b2:72: 03:29:1c:aa:85:2c:b3:86:a8:80:b1:9c:e3:e8:ec:e5:5e:75: f4:1a:b2:5a:22:52:53:d3:db:29:fa:e1:65:13:ec:46:8a:34: 73:f0:73:30:e9:26:f1:3b:ff:c3:d2:23:56:6c:bc:16:2e:a4: 85:07:55:12:73:56:b8:3c:55:bf:38:88:f5:2e:50:43:3d:0d: 6e:41:7c:69:05:e5:cb:8b:a1:3f:94:61:69:08:2b:e7:59:38: 58:70:06:3d:92:f3:fa:e3:ed:11:38:3e:87:ac:d7:01:13:be: 35:32:ef:02:fe:65:be:ec:c8:68:3f:65:e9:0b:8a:72:fc:97: 5e:55:17:47:b9:6b:82:6a:92:53:65:cf:2a:08:ce:fb:1f:34: 91:91:9d:bb:37:5a:43:d5:a8:23:44:9d:b7:2c:86:f4:69:0d: a2:61:0d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwNTIxMDIyODQ1WhcNMjYwNTI4MDIyODQ1WjAYMRYwFAYD VQQDEw02YTBlNmRkZC02MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCxNHwlGkHC8zInr3uhOnbj/GVJ/SPz4iQAPrR7tHl9vPpCvxNxdCtvRzb6U gTRc9PUDSVjOnk94lnL1M2uyHQwXQAmhNn7jW7Hvq+pZ658oquTCxI+5yTT1M+i+ 0IWDLRP1r8O2FKEaa9yIyrSO9sCzp2b4MDEgEFS8h3bOGqBDAvhx1Bn8D39OK7wy Ddj/BrrjcAglPC4DG1bCXy1kt9FZgMFKZbSutFttdvYGnJjAAmfo6BhO20yvnlmv OVdyW5QinxLKHOeJJ7uqXa+28S8i8Bn2Fxs7m7WO9IdsG7h7N3qTw+Bh59NoNoiw 1r8kwp9GWSIxlReMmzRWqaaeGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMR8kvh 2q4aCMEigbt2WsQsZms8MB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1YeWB+qfmuraEEBr3dmw/PQOw0EKfMz9dut4qPTz3LHR0pRtwBB2xK+/kH7 O026K2+MHIuW7Yxzg6uJPUnUuNQx5ukDNtfSeOA/dch4BhKy0xcwb5CGabJyAykc qoUss4aogLGc4+js5V519BqyWiJSU9PbKfrhZRPsRoo0c/BzMOkm8Tv/w9IjVmy8 Fi6khQdVEnNWuDxVvziI9S5QQz0NbkF8aQXly4uhP5RhaQgr51k4WHAGPZLz+uPt ETg+h6zXARO+NTLvAv5lvuzIaD9l6QuKcvyXXlUXR7lrgmqSU2XPKgjO+x80kZGd uzdaQ9WoI0SdtyyG9GkNomENrA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:40 2026 by rpki-client