$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json) Hash identifier: FRKf7kCR8jKm9CPKl9iJg/9TMmATFgfBl1wDvJ4SiDQ= Subject key identifier: 35:DA:B3:27:38:A3:A3:61:DF:3E:A3:5D:5E:0D:B1:53:DB:70:A3:38 Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft Manifest number: 06D7 Signing time: Wed 20 May 2026 22:17:19 +0000 Manifest this update: Wed 20 May 2026 22:17:18 +0000 Manifest next update: Wed 27 May 2026 22:17:18 +0000 Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: 4++aBkjEVl89ckbrVLhAGDvp6PuP6rMYOPeMgDwmQe8=) 2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: w6qFHPY18f2uu0A/E7Bmk+LTrJj/4AWZO+VT1lfOaAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Validity Not Before: May 20 22:17:18 2026 GMT Not After : May 27 22:17:18 2026 GMT Subject: CN=6a0e32ee-c66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:74:da:e1:aa:02:b0:20:48:3b:a8:59:cd:c4: dd:c1:be:20:37:b6:47:e3:e8:22:bb:9e:31:24:a0: f1:d5:4f:a3:77:21:d8:7f:b8:94:85:7d:0e:0d:1e: 3e:56:e6:74:3b:37:60:f8:f7:12:d3:f0:d8:fc:5f: fc:4d:4e:be:47:0c:bb:ce:7a:d2:53:c6:f4:ee:5f: f4:35:03:18:55:06:94:ae:5e:29:71:b4:02:ea:6b: 0c:16:71:48:b6:7e:29:9b:36:ab:c5:6e:9d:45:3d: 69:49:f7:40:d6:5a:33:48:50:29:ae:c5:1b:45:73: 7b:82:93:33:a5:9d:32:da:12:ec:26:df:e0:66:18: 1e:96:5a:68:a6:30:33:75:36:41:27:12:8e:e9:0a: 07:39:9b:83:5e:5b:42:d4:d9:5d:51:bf:46:d7:70: 85:3f:41:f6:d1:7f:14:1c:97:a6:db:8f:58:72:59: 55:10:a9:cd:9d:0b:f9:d8:3d:da:70:30:67:2f:57: dd:c3:df:ac:30:63:56:60:5b:19:7c:ba:82:4d:98: 61:31:77:c5:47:57:58:f6:63:fc:9c:2f:c0:d8:39: 3d:25:95:46:e8:7c:aa:3d:e2:c4:4a:f1:12:02:b2: a7:c7:2b:e3:ae:d8:70:2e:ca:ae:8f:bc:1d:b3:8a: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DA:B3:27:38:A3:A3:61:DF:3E:A3:5D:5E:0D:B1:53:DB:70:A3:38 X509v3 Authority Key Identifier: keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a5:61:9e:e4:fc:33:5b:d9:ab:57:53:97:61:8f:cb:51:92: cc:a9:d0:be:72:bb:7e:9a:f6:0a:87:d4:00:a0:ed:15:ea:e1: 4b:11:4d:33:59:17:60:1c:de:68:28:8d:de:d9:f8:d1:bc:35: 2c:01:d1:f7:dc:79:18:aa:89:a0:83:18:ba:82:66:d6:03:c7: 1c:a5:50:fa:82:7b:17:7c:92:06:40:ec:61:2b:15:ca:2c:48: 9f:11:56:89:0f:15:94:c2:a5:27:1f:e9:be:59:1d:22:f1:db: 03:f6:00:0d:ea:30:f2:e8:40:1e:9a:e7:7e:94:df:e0:a2:68: 4f:a4:38:0a:31:51:0a:0f:0a:6c:bb:e5:75:6f:8d:cc:47:67: 1b:ab:f9:ee:c5:b0:61:44:4d:ab:6b:8f:60:29:e6:35:8d:8f: 61:3c:42:8b:b6:5e:a4:91:48:35:14:a0:96:9a:96:c5:25:0f: 95:fd:e5:14:44:94:87:1c:27:96:36:76:e8:2f:3e:07:cf:65: df:95:4f:a7:e7:b7:74:63:39:d3:d0:de:6f:94:72:b3:f7:1e: 00:20:49:70:b1:b8:fd:94:f8:85:e1:59:7d:84:cb:5b:c2:31: 9a:75:27:23:b2:5f:58:3f:f8:c4:79:34:ee:57:e1:3c:4e:5d: b2:30:7c:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwNTkxMTAvBgNVBAUTKDFGNzZBNjk0NDQyQ0FCNDNEN0QxN0NENkZERjlBOTdF MEI3RkFBOEUwHhcNMjYwNTIwMjIxNzE4WhcNMjYwNTI3MjIxNzE4WjAYMRYwFAYD VQQDEw02YTBlMzJlZS1jNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73Ta4aoCsCBIO6hZzcTdwb4gN7ZH4+giu54xJKDx1U+jdyHYf7iUhX0ODR4+ VuZ0Ozdg+PcS0/DY/F/8TU6+Rwy7znrSU8b07l/0NQMYVQaUrl4pcbQC6msMFnFI tn4pmzarxW6dRT1pSfdA1lozSFAprsUbRXN7gpMzpZ0y2hLsJt/gZhgellpopjAz dTZBJxKO6QoHOZuDXltC1NldUb9G13CFP0H20X8UHJem249YcllVEKnNnQv52D3a cDBnL1fdw9+sMGNWYFsZfLqCTZhhMXfFR1dY9mP8nC/A2Dk9JZVG6HyqPeLESvES ArKnxyvjrthwLsquj7wds4pBnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXasyc4 o6Nh3z6jXV4NsVPbcKM4MB8GA1UdIwQYMBaAFB92ppRELKtD19F81v35qX4Lf6qO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODA1OS9CQkQ4MURBODlD QzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3EwUFgwWHpXX2ZtcGZndF9x bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gzYW1sRVFzcTBQWDBYeldfZm1wZmd0X3FvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODA1OS9CQkQ4MURBODlDQzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3Ew UFgwWHpXX2ZtcGZndF9xbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk6VhnuT8M1vZq1dTl2GPy1GSzKnQvnK7fpr2CofUAKDtFerhSxFNM1kXYBze aCiN3tn40bw1LAHR99x5GKqJoIMYuoJm1gPHHKVQ+oJ7F3ySBkDsYSsVyixInxFW iQ8VlMKlJx/pvlkdIvHbA/YADeow8uhAHprnfpTf4KJoT6Q4CjFRCg8KbLvldW+N zEdnG6v57sWwYURNq2uPYCnmNY2PYTxCi7ZepJFINRSglpqWxSUPlf3lFESUhxwn ljZ26C8+B89l35VPp+e3dGM509Deb5Rys/ceACBJcLG4/ZT4heFZfYTLW8IxmnUn I7JfWD/4xHk07lfhPE5dsjB8VA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:41 2026 by rpki-client