$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: gm3GRajGBYQDFmJb0mSwvAyIpJoKj3u/Ro25FMF6usA= Subject key identifier: 6C:31:EA:63:A5:33:90:D2:D8:AF:41:AE:75:12:38:C3:90:74:5C:F8 Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 298C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 290F Signing time: Wed 20 May 2026 15:36:25 +0000 Manifest this update: Wed 20 May 2026 15:36:24 +0000 Manifest next update: Wed 27 May 2026 15:36:24 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: dS/VHpALKWXM/iKbN/YV5K4x05CUQB340Cjy0modk5U=) 2: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk=) 3: 57D5BBF870F211F086293675C4F9AE02.roa (hash: DeKhzeI6csoLVB/N7GeSeQ/TlM+YbpCUPGuUuLwXV4E=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: 9cZ6L/GPvQKK4pJ4l7g4uN4OgEx5HSReU5gKVwtDiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10636 (0x298c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: May 20 15:36:24 2026 GMT Not After : May 27 15:36:24 2026 GMT Subject: CN=6a0dd4f9-c4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:8a:e6:f5:08:27:2e:8c:5c:33:ca:a4:b4: 19:7a:0d:7a:89:1f:30:58:0a:51:ec:16:49:1e:17: 60:05:c1:69:0b:2e:50:e1:9d:f2:c3:2e:35:8c:06: cb:32:3d:ac:9c:4b:5f:2f:c2:70:67:a8:11:00:46: cf:3a:03:7f:27:78:79:fa:56:b6:e4:f0:31:6d:00: 2e:11:95:9c:de:ee:3c:e9:60:30:24:80:bd:87:6e: e5:05:b2:c6:69:ac:31:88:43:21:c3:c1:6c:30:91: 6c:34:d4:55:30:af:8e:ae:d2:eb:3b:70:d3:2d:1b: c8:33:f1:91:65:d7:45:01:0c:2c:45:38:22:f7:40: b4:b6:4c:1e:58:a4:7b:c5:92:17:1f:17:ca:8b:21: 8c:53:2b:b4:fb:7a:84:ee:31:eb:9a:04:49:10:77: e1:e5:30:21:62:d6:8a:93:5c:cb:42:62:bd:d6:b1: 4f:3e:f3:d3:67:9e:15:b3:b8:89:fa:50:f3:ab:42: e2:e4:ab:36:be:c3:2f:35:97:88:42:34:08:7a:c7: 17:d5:98:89:6e:7e:25:5f:9c:7a:8b:e5:cb:af:f3: 6b:d3:15:2a:a4:55:af:bc:57:a9:45:32:a4:41:eb: 02:f5:6a:8a:26:f3:68:4b:10:1e:85:ae:cb:86:7d: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:31:EA:63:A5:33:90:D2:D8:AF:41:AE:75:12:38:C3:90:74:5C:F8 X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e7:31:7e:f2:0e:bf:16:17:40:d5:a9:e3:ce:be:7b:16:d6: d4:17:06:47:bc:13:34:e2:9f:e7:00:49:10:d5:17:1d:ae:03: 72:69:06:e6:f4:7d:e2:37:7f:5c:21:92:84:7d:1f:3e:1e:da: 08:c7:de:fa:d9:08:73:cb:24:70:78:09:5b:90:49:b3:5f:04: 96:fa:ce:36:6d:90:09:c0:7d:d1:ab:a1:f9:5c:56:9c:87:2b: 9d:e5:ad:b1:65:7a:8f:81:9c:20:75:19:e2:a7:10:2d:44:52: 63:55:21:c1:14:d9:e8:4e:67:fa:ff:f8:5a:8a:4f:16:b3:0f: 1f:ac:db:a0:48:a8:c0:fa:1e:2c:1f:09:a5:21:c6:4f:c7:5d: 58:7d:12:19:e0:83:01:17:95:80:e2:2f:36:5a:9d:d0:41:94: bc:9f:98:15:ee:1b:4a:5a:b7:fa:a8:b6:52:0d:31:72:af:57: 5a:08:92:51:a7:15:8a:8b:f4:a1:cc:d9:bd:70:3e:dc:48:db: a2:64:37:fb:67:6b:0f:08:00:53:8c:66:05:75:b6:ac:78:27: 81:ba:92:8d:8e:ae:ad:c7:a2:52:3d:77:48:6e:ec:6f:19:87: 92:39:c3:64:27:15:99:78:e4:b5:e6:47:30:e1:29:82:74:56: 94:11:3c:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwNTIwMTUzNjI0WhcNMjYwNTI3MTUzNjI0WjAYMRYwFAYD VQQDEw02YTBkZDRmOS1jNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquaK5vUIJy6MXDPKpLQZeg16iR8wWApR7BZJHhdgBcFpCy5Q4Z3ywy41jAbL Mj2snEtfL8JwZ6gRAEbPOgN/J3h5+la25PAxbQAuEZWc3u486WAwJIC9h27lBbLG aawxiEMhw8FsMJFsNNRVMK+OrtLrO3DTLRvIM/GRZddFAQwsRTgi90C0tkweWKR7 xZIXHxfKiyGMUyu0+3qE7jHrmgRJEHfh5TAhYtaKk1zLQmK91rFPPvPTZ54Vs7iJ +lDzq0Li5Ks2vsMvNZeIQjQIescX1ZiJbn4lX5x6i+XLr/Nr0xUqpFWvvFepRTKk QesC9WqKJvNoSxAeha7Lhn36iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwx6mOl M5DS2K9BrnUSOMOQdFz4MB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZecxfvIOvxYXQNWp486+exbW1BcGR7wTNOKf5wBJENUXHa4DcmkG5vR94jd/ XCGShH0fPh7aCMfe+tkIc8skcHgJW5BJs18ElvrONm2QCcB90auh+VxWnIcrneWt sWV6j4GcIHUZ4qcQLURSY1UhwRTZ6E5n+v/4WopPFrMPH6zboEiowPoeLB8JpSHG T8ddWH0SGeCDAReVgOIvNlqd0EGUvJ+YFe4bSlq3+qi2Ug0xcq9XWgiSUacViov0 oczZvXA+3EjbomQ3+2drDwgAU4xmBXW2rHgngbqSjY6urceiUj13SG7sbxmHkjnD ZCcVmXjkteZHMOEpgnRWlBE87A== -----END CERTIFICATE-----Generated at Thu May 21 10:16:22 2026 by rpki-client