$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: whJccrcir8M9B5Z38sPtGLdPH2k24EOwDyU+lA7CxYk= Subject key identifier: 8F:95:67:84:7D:B4:EA:72:9E:A6:65:28:19:E5:9F:8C:93:DC:31:61 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 022F Signing time: Tue 19 May 2026 02:37:04 +0000 Manifest this update: Tue 19 May 2026 02:37:04 +0000 Manifest next update: Tue 26 May 2026 02:37:04 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: qWNEvtXsdIJoO7xB32eOoXh/dUgfFDVWYztvlfrs36s=) 2: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 3: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) 4: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 02:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: May 19 02:37:04 2026 GMT Not After : May 26 02:37:04 2026 GMT Subject: CN=6a0bccd0-a804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:d1:30:ad:d3:b7:75:aa:8f:c7:68:2f:eb: fa:66:c6:5a:5b:4f:ec:df:7b:f0:e4:75:58:dd:c1: f8:98:4c:90:68:ea:41:3a:d1:00:73:32:ab:8d:10: d1:9f:3a:07:19:06:34:71:6f:0d:c2:71:65:e3:61: e6:53:c1:eb:af:e5:9e:06:cb:bd:78:d5:fa:de:c8: 49:3f:0c:fb:b8:e4:87:6a:08:bc:12:5e:d3:ff:fd: 09:2f:fa:a9:3e:79:32:b7:e1:ce:a1:34:3d:ef:61: 63:08:13:c2:fa:81:ba:e4:f9:b5:36:25:a9:59:01: 94:97:ca:fc:7c:6b:17:2d:0b:a3:59:ec:dd:e2:11: f7:8c:0a:e9:a4:87:b5:56:a3:fe:4e:f9:4c:33:fe: 5f:85:17:9a:5b:ac:78:f8:2f:7c:59:ad:37:e2:7e: 9b:0b:3f:25:48:0c:b9:93:22:42:bb:bd:93:9f:2d: d0:37:b9:3a:dc:0d:55:16:5f:cf:54:46:e6:9f:2d: 91:74:d6:7b:61:95:ef:3f:bb:8a:4f:f1:7b:b6:1f: 32:38:fa:ff:58:cf:1c:fc:49:35:37:a2:8d:be:ed: 32:db:0a:7b:9f:92:5c:08:cd:00:e8:7c:79:42:65: 9f:64:4d:7a:ff:91:15:43:d3:50:5c:89:c3:02:47: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:95:67:84:7D:B4:EA:72:9E:A6:65:28:19:E5:9F:8C:93:DC:31:61 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3a:12:21:5f:b0:90:0f:d6:51:23:7b:f6:bb:99:40:42:17: 0c:59:2d:96:48:a9:0e:8f:43:a0:44:60:d8:5b:ac:4c:51:ee: c4:b6:7d:48:6d:68:d3:3b:54:40:ed:d2:f3:81:2d:2d:4e:89: a4:01:27:6b:db:fc:86:ed:70:46:58:52:b1:14:b5:a4:18:09: c5:45:6a:d6:00:43:df:47:7d:5c:49:f7:91:5d:0c:ab:3a:ff: de:a5:32:ea:c5:d1:b3:7c:16:9d:1c:28:6e:dd:cc:8c:26:44: c6:3a:ca:81:8e:7f:a5:c7:7d:24:96:45:b9:fc:e8:4a:99:2c: fa:99:56:39:1e:af:f9:0d:73:51:2d:ab:0e:50:91:93:e8:33: 01:34:c5:36:f4:83:b8:34:2f:96:de:25:65:c3:4e:72:3c:cb: e8:07:44:92:75:15:9c:da:05:07:04:c4:a9:51:d8:b8:b8:84: 38:3f:52:b6:9d:31:29:ce:6c:ce:0e:00:aa:ea:f6:74:dd:e1: 9a:de:b1:95:0f:e4:7b:e4:91:e6:dd:50:a6:5f:94:77:d9:73: 07:19:c1:9f:68:dd:13:cd:85:35:0d:3c:eb:22:2e:2b:60:8d: 02:f6:1b:e4:ec:d4:c1:52:84:8e:8a:11:25:5c:4e:2a:c4:db: 1f:8a:81:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNTE5MDIzNzA0WhcNMjYwNTI2MDIzNzA0WjAYMRYwFAYD VQQDEw02YTBiY2NkMC1hODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXnRMK3Tt3Wqj8doL+v6ZsZaW0/s33vw5HVY3cH4mEyQaOpBOtEAczKrjRDR nzoHGQY0cW8NwnFl42HmU8Hrr+WeBsu9eNX63shJPwz7uOSHagi8El7T//0JL/qp Pnkyt+HOoTQ972FjCBPC+oG65Pm1NiWpWQGUl8r8fGsXLQujWezd4hH3jArppIe1 VqP+TvlMM/5fhReaW6x4+C98Wa034n6bCz8lSAy5kyJCu72Tny3QN7k63A1VFl/P VEbmny2RdNZ7YZXvP7uKT/F7th8yOPr/WM8c/Ek1N6KNvu0y2wp7n5JcCM0A6Hx5 QmWfZE16/5EVQ9NQXInDAkf4AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+VZ4R9 tOpynqZlKBnln4yT3DFhMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACToSIV+wkA/WUSN79ruZQEIXDFktlkipDo9DoERg2FusTFHuxLZ9SG1o0ztU QO3S84EtLU6JpAEna9v8hu1wRlhSsRS1pBgJxUVq1gBD30d9XEn3kV0Mqzr/3qUy 6sXRs3wWnRwobt3MjCZExjrKgY5/pcd9JJZFufzoSpks+plWOR6v+Q1zUS2rDlCR k+gzATTFNvSDuDQvlt4lZcNOcjzL6AdEknUVnNoFBwTEqVHYuLiEOD9Stp0xKc5s zg4Aqur2dN3hmt6xlQ/ke+SR5t1Qpl+Ud9lzBxnBn2jdE82FNQ086yIuK2CNAvYb 5OzUwVKEjooRJVxOKsTbH4qBaw== -----END CERTIFICATE-----Generated at Tue May 19 10:23:47 2026 by rpki-client