$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: oWTVQiMQGEAxh+gmdHWckGkdBoaD5utFzODAubrs9Ew= Subject key identifier: EF:44:91:86:7A:DF:EF:FB:62:33:97:1D:1A:EE:FE:28:E5:36:2A:86 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 0119 Signing time: Thu 21 May 2026 06:02:34 +0000 Manifest this update: Thu 21 May 2026 06:02:33 +0000 Manifest next update: Thu 28 May 2026 06:02:33 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: /TPtNbo4D2iHLrXKCQ8tkKBC7m/gRISjagCtjTA1tlM=) 2: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=) 3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=) 4: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: May 21 06:02:33 2026 GMT Not After : May 28 06:02:33 2026 GMT Subject: CN=6a0e9ffa-0380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cd:bc:75:6d:9c:33:c0:f6:e0:d1:8a:3f:30: 03:67:f9:cf:f1:af:88:2b:d9:71:1d:f8:3d:40:21: 9e:34:2d:a7:d4:f5:15:7e:c5:e9:e4:72:d6:06:ae: 95:81:6a:09:e0:ca:52:d6:81:77:ce:02:1e:13:61: 51:c5:66:82:3e:2f:96:59:00:0c:9f:26:a7:b7:90: 0f:a6:44:12:95:de:cb:04:73:47:08:ff:5e:49:a1: 88:88:89:48:22:c5:85:bf:39:8d:cc:58:99:50:80: 96:59:44:92:94:3c:5c:51:b4:ec:34:06:0c:9d:d5: 3f:e1:ec:ba:2a:84:02:8f:37:45:67:27:d7:a3:65: 01:2e:de:5f:ce:de:43:c3:40:25:9a:d4:33:7e:e4: 70:ec:f0:84:8a:5c:f1:da:40:2f:d4:0b:1e:51:c3: cc:a0:ab:4b:c1:d6:cd:eb:47:99:02:be:7f:7b:ff: cf:33:93:4e:99:09:14:b2:9a:29:0e:47:52:80:af: 85:08:54:e0:31:77:0c:bb:62:8b:c8:42:79:7e:60: 0d:95:a7:02:b0:00:b6:49:51:a4:28:cb:2a:ae:29: 6a:18:52:8f:07:35:e3:1e:d2:78:0e:5d:11:16:5d: 36:eb:55:bd:e9:c6:24:d1:62:fd:7b:20:87:31:40: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:91:86:7A:DF:EF:FB:62:33:97:1D:1A:EE:FE:28:E5:36:2A:86 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:47:af:17:72:2c:46:71:50:fe:e9:79:86:64:57:53:72:12: 43:03:ac:e4:e6:37:bb:cd:4e:a3:cb:6a:5f:6b:10:7d:0d:3b: 05:14:7e:8b:9e:6b:f9:34:b3:ba:37:a3:e7:c1:5d:a5:09:0b: 95:da:ea:c7:b5:9a:8b:bf:ad:9b:d9:23:84:01:07:ff:42:68: ca:90:d9:0c:e1:1c:91:9e:5a:2b:5f:46:bf:e2:b8:0c:81:4b: c1:d6:e5:64:53:01:af:b0:ff:1f:3c:46:7a:0e:8e:d7:f1:f1: fc:a3:a7:a7:d0:1c:38:49:91:2e:96:5a:5b:c0:33:83:f8:ab: 05:88:f7:2f:60:f3:ea:c6:73:2e:93:78:74:67:b9:16:61:ec: 6a:b2:24:63:b6:46:5b:65:df:30:4f:24:1b:69:48:1a:d6:79: bd:79:3e:14:eb:45:97:77:16:a0:a7:fe:05:d1:55:5c:5b:57: 3c:f2:cd:65:63:82:e8:c1:3c:78:24:59:37:aa:8b:52:71:bc: ed:ba:01:26:b9:6d:cb:91:3a:1b:8d:4e:22:fd:84:1a:c3:a0: aa:53:0d:25:50:1b:6b:30:0a:7f:ce:0a:4b:73:a9:9e:c2:45: 30:81:54:82:ba:5a:07:a3:d5:c4:20:be:17:ed:09:4b:48:6f: 2e:ee:b8:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjYwNTIxMDYwMjMzWhcNMjYwNTI4MDYwMjMzWjAYMRYwFAYD VQQDEw02YTBlOWZmYS0wMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6828dW2cM8D24NGKPzADZ/nP8a+IK9lxHfg9QCGeNC2n1PUVfsXp5HLWBq6V gWoJ4MpS1oF3zgIeE2FRxWaCPi+WWQAMnyant5APpkQSld7LBHNHCP9eSaGIiIlI IsWFvzmNzFiZUICWWUSSlDxcUbTsNAYMndU/4ey6KoQCjzdFZyfXo2UBLt5fzt5D w0AlmtQzfuRw7PCEilzx2kAv1AseUcPMoKtLwdbN60eZAr5/e//PM5NOmQkUspop DkdSgK+FCFTgMXcMu2KLyEJ5fmANlacCsAC2SVGkKMsqrilqGFKPBzXjHtJ4Dl0R Fl0261W96cYk0WL9eyCHMUBCmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9EkYZ6 3+/7YjOXHRru/ijlNiqGMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM0evF3IsRnFQ/ul5hmRXU3ISQwOs5OY3u81Oo8tqX2sQfQ07BRR+i55r+TSz ujej58FdpQkLldrqx7Wai7+tm9kjhAEH/0JoypDZDOEckZ5aK19Gv+K4DIFLwdbl ZFMBr7D/HzxGeg6O1/Hx/KOnp9AcOEmRLpZaW8Azg/irBYj3L2Dz6sZzLpN4dGe5 FmHsarIkY7ZGW2XfME8kG2lIGtZ5vXk+FOtFl3cWoKf+BdFVXFtXPPLNZWOC6ME8 eCRZN6qLUnG87boBJrlty5E6G41OIv2EGsOgqlMNJVAbazAKf84KS3OpnsJFMIFU grpaB6PVxCC+F+0JS0hvLu64/w== -----END CERTIFICATE-----Generated at Sat May 23 03:48:14 2026 by rpki-client