$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: 2SYEkaCcBZudV+DFXg0KodEpiOz4MH8EDkvFhgpwrcY= Subject key identifier: 02:10:FD:C3:8B:39:52:C9:E6:C5:AC:0C:68:C2:B4:D8:89:85:99:63 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 032C Signing time: Thu 21 May 2026 01:11:23 +0000 Manifest this update: Thu 21 May 2026 01:11:23 +0000 Manifest next update: Thu 28 May 2026 01:11:23 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: t6rebcgNPwi+zejFSYkY9wcE0iZI1xr36NI4/O3dKOI=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: May 21 01:11:23 2026 GMT Not After : May 28 01:11:23 2026 GMT Subject: CN=6a0e5bbb-55dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:cd:7a:82:82:ac:0d:0c:dc:4e:2e:13:53: 6e:ba:19:c2:11:b2:31:be:0e:15:b3:32:d3:76:8d: 20:a1:20:0c:78:0c:a8:72:ff:0b:fa:1e:0a:a8:de: 48:c2:dd:0c:f0:20:1a:0d:d7:79:6a:c6:b6:97:d6: ff:2e:11:1a:8a:53:b1:f0:29:5d:46:86:e6:fe:d3: 61:4a:8f:59:b2:84:7d:0f:f4:7b:cb:96:3a:c9:a5: ef:e4:ed:a5:f6:81:9f:6d:1d:f3:27:69:87:f5:c7: 54:e8:d9:47:a5:6b:9a:a5:2f:2f:92:15:85:cd:66: 5b:9c:cf:15:a9:ec:fa:55:1e:2c:e2:55:55:d4:a1: 6a:ae:a5:1c:3e:2f:ac:9c:45:da:c1:2f:59:6a:a2: 8c:fe:d5:23:20:a4:62:7d:93:01:b0:39:a4:97:b4: 55:16:7a:7b:bf:31:64:9a:9e:de:2c:81:2f:84:c1: c1:73:ab:91:39:8d:c9:b3:02:4a:cb:c6:3e:a2:6a: 88:f9:5c:e4:95:72:39:34:65:16:68:f6:15:c2:28: c8:02:76:72:af:27:db:bf:c3:95:c5:4c:44:a1:57: 1a:01:70:53:cb:c1:0b:68:20:c0:31:67:74:a6:cb: 7d:8c:5d:a5:be:ae:96:db:59:1c:22:dd:45:09:1a: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:10:FD:C3:8B:39:52:C9:E6:C5:AC:0C:68:C2:B4:D8:89:85:99:63 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:29:14:a2:c2:cd:09:47:26:fa:bc:86:d2:d4:13:0d:9b: 99:5e:52:ce:ea:ef:0f:59:c9:c7:bd:d9:92:99:ff:ce:69:b8: a9:89:94:4b:3b:32:c1:9e:c9:47:3e:38:d3:67:5c:07:16:87: cc:ab:a8:ad:ca:28:9a:8e:51:b8:b8:1b:4e:47:01:5d:69:b3: c5:b3:c5:7f:2b:cb:c6:90:2f:91:c3:59:a2:86:20:6d:89:7f: 0c:88:c2:72:23:a2:6a:3b:7f:e2:cd:19:f9:4a:f2:ed:1d:d6: 54:7f:bd:53:9b:79:7b:9f:b0:60:76:2b:a7:f8:3d:7d:e4:db: 35:bb:bd:c5:17:ff:2e:e5:22:2c:66:31:9a:7c:81:c2:8e:3d: 13:e2:ba:2f:a3:cb:b0:30:c6:c5:5d:3f:52:72:ee:a8:9a:c5: 52:40:d5:9c:2a:56:51:2e:1a:98:ff:37:a4:ad:a1:22:38:ff: a7:da:09:9c:f9:c9:8e:32:b8:b3:e8:a2:f5:5d:47:72:ec:fb: 19:75:5c:4c:1c:53:a4:69:0f:f5:27:43:2b:26:ce:b1:cd:35: 38:73:ec:71:72:6a:24:bd:67:b9:a6:26:ca:9f:aa:64:86:ee: b0:52:46:c5:7d:0f:dc:e3:17:9d:2a:d1:07:d7:fc:b6:67:4e: 1e:b3:18:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjYwNTIxMDExMTIzWhcNMjYwNTI4MDExMTIzWjAYMRYwFAYD VQQDEw02YTBlNWJiYi01NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuozNeoKCrA0M3E4uE1NuuhnCEbIxvg4VszLTdo0goSAMeAyocv8L+h4KqN5I wt0M8CAaDdd5asa2l9b/LhEailOx8CldRobm/tNhSo9ZsoR9D/R7y5Y6yaXv5O2l 9oGfbR3zJ2mH9cdU6NlHpWuapS8vkhWFzWZbnM8Vqez6VR4s4lVV1KFqrqUcPi+s nEXawS9ZaqKM/tUjIKRifZMBsDmkl7RVFnp7vzFkmp7eLIEvhMHBc6uROY3JswJK y8Y+omqI+VzklXI5NGUWaPYVwijIAnZyryfbv8OVxUxEoVcaAXBTy8ELaCDAMWd0 pst9jF2lvq6W21kcIt1FCRpr8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIQ/cOL OVLJ5sWsDGjCtNiJhZljMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp2gpFKLCzQlHJvq8htLUEw2bmV5SzurvD1nJx73Zkpn/zmm4qYmUSzsywZ7J Rz4402dcBxaHzKuorcoomo5RuLgbTkcBXWmzxbPFfyvLxpAvkcNZooYgbYl/DIjC ciOiajt/4s0Z+Ury7R3WVH+9U5t5e5+wYHYrp/g9feTbNbu9xRf/LuUiLGYxmnyB wo49E+K6L6PLsDDGxV0/UnLuqJrFUkDVnCpWUS4amP83pK2hIjj/p9oJnPnJjjK4 s+ii9V1Hcuz7GXVcTBxTpGkP9SdDKybOsc01OHPscXJqJL1nuaYmyp+qZIbusFJG xX0P3OMXnSrRB9f8tmdOHrMYbA== -----END CERTIFICATE-----Generated at Thu May 21 10:54:02 2026 by rpki-client