$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json) Hash identifier: JfjOiNI9uwSaEieesQFOiRdpTQw+WrL/2zpK8Cp91KA= Subject key identifier: A3:8E:30:29:4A:C0:81:61:79:FE:E7:C2:6A:15:08:AA:8D:51:93:27 Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft Manifest number: 0754 Signing time: Wed 20 May 2026 21:43:05 +0000 Manifest this update: Wed 20 May 2026 21:43:05 +0000 Manifest next update: Wed 27 May 2026 21:43:05 +0000 Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: JCzI8yBXNKJRfYMaZpcIMsq13+fVAP3rQKuMwCtK7YU=) 2: 8C78A208009911F18C66F2A2636F56BC.roa (hash: OwjvTZwLM59M2Gz+ZjeNWWD2TR8A5gAMx3HNPkuDJ40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Validity Not Before: May 20 21:43:05 2026 GMT Not After : May 27 21:43:05 2026 GMT Subject: CN=6a0e2ae9-fc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:08:4b:f1:cc:92:fe:25:71:72:56:e3:fd: 36:4c:bd:f5:e5:88:22:63:81:95:7e:02:91:a3:d2: d9:70:b4:6d:2c:2f:26:bd:8d:b9:b8:f9:2e:7c:2b: 69:5b:83:c1:42:31:ab:37:a3:41:7a:77:ed:57:ac: 32:81:15:36:65:d1:5a:fc:92:7c:e8:c6:95:e5:5a: 81:0f:35:93:67:cd:f5:8a:ad:df:3e:d6:84:3f:45: df:93:5a:77:33:4c:d1:ad:8a:7c:37:3a:0c:76:e7: 83:f6:0b:48:ab:7c:cc:0a:23:2e:97:21:b5:1b:62: 58:a5:44:0b:36:db:5c:cb:93:79:87:fd:f8:6a:76: 0f:4f:c7:61:89:f6:73:4b:37:5c:fb:83:4e:c0:4a: ad:4b:64:2b:7a:60:2e:1b:95:7b:c4:23:ee:f1:e9: 57:97:6c:d3:0b:0f:2e:10:6d:f3:8e:74:2a:b1:2d: dc:ba:7a:02:b6:a6:b0:e4:c0:2b:17:1e:44:6b:d0: 96:c9:04:5b:53:73:8d:98:46:36:cf:e9:c7:b0:b2: ba:c9:8a:48:0f:69:84:ef:fb:16:ea:e2:ae:83:7c: e0:00:9d:7d:f1:98:ac:06:af:6c:c6:1e:f9:1b:f3: ec:de:8f:63:b0:fc:ba:2e:0e:cb:cd:a1:13:6e:82: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:30:29:4A:C0:81:61:79:FE:E7:C2:6A:15:08:AA:8D:51:93:27 X509v3 Authority Key Identifier: keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:ee:8a:f8:ae:0b:f2:9c:51:e4:ac:8d:93:68:b0:60:19: 9d:ca:99:99:6a:25:a6:14:74:4a:c5:92:ec:e7:b6:a2:aa:a3: a9:03:ac:56:41:8b:71:ac:db:79:66:e3:f0:14:c0:bd:21:35: 61:ba:3f:c7:a7:b5:a5:94:58:02:48:41:ef:23:72:d6:7e:a1: 34:9e:62:e1:6c:b4:4d:85:2d:22:7c:d5:fb:21:75:a7:9c:2b: 13:93:64:46:f2:60:ab:26:7f:3f:66:66:e9:8f:51:9d:13:1e: 87:9f:87:c1:0f:dd:f5:03:86:9f:ea:4c:f1:12:41:65:e7:0b: 8e:6b:64:29:2b:8b:db:fe:2e:93:a0:99:46:1f:18:44:95:60: 34:30:22:02:6d:97:16:06:74:40:25:61:09:e2:d5:b2:89:11: fc:d4:2c:83:cf:b2:46:02:2d:42:fa:86:ca:75:4c:a6:0c:38: 68:fc:83:ae:27:19:fc:ea:7e:20:90:8e:d1:63:49:24:0e:d5: 9e:45:1e:75:ec:b6:e0:4d:4e:5a:32:1d:dd:23:69:6c:21:46: 74:52:62:aa:0f:6c:5b:c0:8b:7b:29:47:37:d1:93:22:f1:f8: 45:6f:07:f7:30:33:72:61:b4:52:35:fe:6f:4f:28:bd:69:e1: 22:78:84:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz QTE2MUNBQUQwHhcNMjYwNTIwMjE0MzA1WhcNMjYwNTI3MjE0MzA1WjAYMRYwFAYD VQQDEw02YTBlMmFlOS1mYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wMIS/HMkv4lcXJW4/02TL315YgiY4GVfgKRo9LZcLRtLC8mvY25uPkufCtp W4PBQjGrN6NBenftV6wygRU2ZdFa/JJ86MaV5VqBDzWTZ831iq3fPtaEP0Xfk1p3 M0zRrYp8NzoMdueD9gtIq3zMCiMulyG1G2JYpUQLNttcy5N5h/34anYPT8dhifZz Szdc+4NOwEqtS2QremAuG5V7xCPu8elXl2zTCw8uEG3zjnQqsS3cunoCtqaw5MAr Fx5Ea9CWyQRbU3ONmEY2z+nHsLK6yYpID2mE7/sW6uKug3zgAJ198ZisBq9sxh75 G/Ps3o9jsPy6Lg7LzaETboIjEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOOMClK wIFhef7nwmoVCKqNUZMnMB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5 cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzdFQS8xRTk2NTYzMDZBNTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQ QTVrcHlydTBoMG82Rmh5cTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWtDuiviuC/KcUeSsjZNosGAZncqZmWolphR0SsWS7Oe2oqqjqQOsVkGLcazb eWbj8BTAvSE1Ybo/x6e1pZRYAkhB7yNy1n6hNJ5i4Wy0TYUtInzV+yF1p5wrE5Nk RvJgqyZ/P2Zm6Y9RnRMeh5+HwQ/d9QOGn+pM8RJBZecLjmtkKSuL2/4uk6CZRh8Y RJVgNDAiAm2XFgZ0QCVhCeLVsokR/NQsg8+yRgItQvqGynVMpgw4aPyDricZ/Op+ IJCO0WNJJA7VnkUedey24E1OWjId3SNpbCFGdFJiqg9sW8CLeylHN9GTIvH4RW8H 9zAzcmG0UjX+b08ovWnhIniEPg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:49 2026 by rpki-client