$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: UCNiVsC1XfBrVsPxpNhn8RA5foLGdHIGhTUCed6sLe8= Subject key identifier: B7:ED:52:19:0C:E7:CD:6B:04:14:3E:C4:EF:55:BA:A5:45:EF:84:9B Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 17CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 17C1 Signing time: Wed 20 May 2026 16:33:43 +0000 Manifest this update: Wed 20 May 2026 16:33:42 +0000 Manifest next update: Wed 27 May 2026 16:33:42 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: pILrD3U6kL2o7JDoESMjDKQ24DmNIiQimQLgGlSFLwE=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6095 (0x17cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: May 20 16:33:42 2026 GMT Not After : May 27 16:33:42 2026 GMT Subject: CN=6a0de266-8553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:63:ec:9d:ad:3e:35:c7:34:e4:e7:7a:a6: 64:91:cb:9e:4d:7e:e4:65:01:52:29:af:2c:25:59: 31:74:2e:3f:40:2f:c7:14:eb:49:41:30:97:b1:c3: f0:f3:70:58:6f:7f:83:76:43:da:a8:7a:bf:ff:c4: 9f:a7:c1:e0:a6:b0:89:56:56:33:05:28:70:62:c4: b7:ed:16:45:3f:e5:4d:86:4e:67:a9:b6:06:53:d0: 0b:d0:51:e7:d1:4d:8a:57:3c:5c:89:4f:e6:83:76: a6:9f:8e:ce:9d:e3:34:1e:21:c6:f5:b1:89:08:98: d7:b6:91:d8:77:3a:47:e4:33:01:24:98:8b:80:fd: 5f:a0:ef:a1:3b:e0:84:ab:67:70:61:7a:76:06:26: 89:74:8b:db:1c:79:94:66:c2:0c:50:87:45:9e:38: b3:95:6e:b3:79:c6:66:c8:5d:aa:31:17:da:26:ac: ff:23:4a:47:20:ec:34:12:a6:8b:00:c5:05:b9:ae: 86:e5:89:11:a6:74:cf:71:c5:7a:41:91:b3:d5:44: d2:2c:06:b6:ef:ce:2e:96:ac:43:f9:b8:94:86:6c: b6:97:f8:c0:63:d3:bd:17:13:8c:df:71:f1:16:60: 64:a3:5e:60:8b:78:23:69:d3:01:f4:b8:f4:36:54: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:52:19:0C:E7:CD:6B:04:14:3E:C4:EF:55:BA:A5:45:EF:84:9B X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c7:f1:d0:6f:fa:d1:40:20:cd:13:e0:92:84:6f:08:79:dd: 90:53:3f:57:d9:3e:96:cf:17:c2:34:78:17:69:4e:9c:50:d7: 4c:5c:a1:c8:17:e9:b1:cc:91:57:88:b0:1e:9b:9a:e2:96:74: ad:c2:b7:8e:d9:ac:58:81:75:ab:95:d1:ca:eb:e4:e7:db:8a: 75:00:8b:31:e4:5a:20:4f:7f:eb:1e:a9:e0:e2:38:d5:a5:a7: b5:7e:16:26:6e:f9:98:6f:69:52:3e:8b:dd:e4:ee:4f:1e:73: e7:13:83:f6:0e:ca:fb:57:e3:4b:92:f9:58:b3:f2:cb:fb:bb: fd:ec:98:75:be:ce:d5:13:01:7b:63:91:7d:8e:82:aa:ee:50: f0:7d:55:fe:28:94:a6:50:e0:76:90:45:4f:34:a9:37:76:54: c3:98:d2:6c:11:aa:1a:ab:79:16:e4:87:29:6f:7d:5d:42:2c: f5:00:b2:c4:04:ef:42:7b:f5:86:49:d0:0e:2d:b3:4c:60:50: b4:40:de:e3:eb:3a:cf:93:04:bd:d3:9c:d3:e0:c0:c3:d1:30: 3b:06:5e:f5:db:14:19:27:f4:bd:40:37:b8:11:9c:1a:bd:d4: dc:59:59:9d:a0:a3:a1:27:20:0a:0a:4d:7a:18:e3:dd:57:9c: a0:fd:76:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjYwNTIwMTYzMzQyWhcNMjYwNTI3MTYzMzQyWjAYMRYwFAYD VQQDEw02YTBkZTI2Ni04NTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKNj7J2tPjXHNOTneqZkkcueTX7kZQFSKa8sJVkxdC4/QC/HFOtJQTCXscPw 83BYb3+DdkPaqHq//8Sfp8HgprCJVlYzBShwYsS37RZFP+VNhk5nqbYGU9AL0FHn 0U2KVzxciU/mg3amn47OneM0HiHG9bGJCJjXtpHYdzpH5DMBJJiLgP1foO+hO+CE q2dwYXp2BiaJdIvbHHmUZsIMUIdFnjizlW6zecZmyF2qMRfaJqz/I0pHIOw0EqaL AMUFua6G5YkRpnTPccV6QZGz1UTSLAa2784ulqxD+biUhmy2l/jAY9O9FxOM33Hx FmBko15gi3gjadMB9Lj0NlT1WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLftUhkM 581rBBQ+xO9VuqVF74SbMB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfMfx0G/60UAgzRPgkoRvCHndkFM/V9k+ls8XwjR4F2lOnFDXTFyhyBfpscyR V4iwHpua4pZ0rcK3jtmsWIF1q5XRyuvk59uKdQCLMeRaIE9/6x6p4OI41aWntX4W Jm75mG9pUj6L3eTuTx5z5xOD9g7K+1fjS5L5WLPyy/u7/eyYdb7O1RMBe2ORfY6C qu5Q8H1V/iiUplDgdpBFTzSpN3ZUw5jSbBGqGqt5FuSHKW99XUIs9QCyxATvQnv1 hknQDi2zTGBQtEDe4+s6z5MEvdOc0+DAw9EwOwZe9dsUGSf0vUA3uBGcGr3U3FlZ naCjoScgCgpNehjj3VecoP12Zg== -----END CERTIFICATE-----Generated at Thu May 21 10:54:04 2026 by rpki-client