$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json) Hash identifier: WHXt5TDdwFIzZJ6RaVvKRWlZzg+o3VAIgFEd6H6pOLw= Subject key identifier: 02:3E:C1:DD:7D:87:79:DF:D3:0F:A5:81:E2:2A:A8:BB:34:6F:79:A6 Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft Manifest number: 0A02 Signing time: Fri 08 May 2026 19:48:41 +0000 Manifest this update: Fri 08 May 2026 19:48:40 +0000 Manifest next update: Fri 15 May 2026 19:48:40 +0000 Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: bEU3sBYnc/rcyYiyn8au4a50Pj1G9xT9JSDgDC5+Tes=) 2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=) 3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=) 4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 19:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Validity Not Before: May 8 19:48:40 2026 GMT Not After : May 15 19:48:40 2026 GMT Subject: CN=69fe3e19-b0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:1e:e9:1e:a6:b0:04:0f:04:3b:69:76:52: 1d:27:d9:44:ba:94:05:b7:45:32:ae:f4:9f:41:0f: e8:64:f4:23:df:8e:80:fd:ea:8d:d0:14:59:51:6a: 4b:e6:38:00:99:ad:13:34:c4:2e:b8:39:7c:f2:8e: ea:58:fb:2b:be:8f:a1:38:20:54:be:5f:5e:77:48: ff:c0:35:52:4b:98:4a:c5:12:fa:5b:10:c4:b3:db: ba:4d:b4:18:7b:90:2f:d8:ec:93:4e:f4:74:7d:24: 3e:d9:b2:a1:3d:2f:d1:99:73:3e:10:a1:4b:96:ef: 0b:b7:40:d8:12:67:d0:51:3f:99:31:d3:2a:98:24: dd:37:e1:d4:57:66:8a:c1:b6:70:3f:04:e9:ae:ba: 2c:c0:da:e6:dd:9a:f5:27:44:1b:fb:9c:2c:cf:9a: e6:39:12:2b:45:1c:86:dc:b5:97:a7:4d:56:f4:b7: 2e:83:3c:8d:ce:2c:c8:6e:ed:50:2d:b5:66:07:d6: b7:cf:2e:e8:47:77:82:cf:6b:23:84:cd:3b:a4:20: 47:b2:23:a3:b9:89:18:16:48:63:16:41:3b:2a:f6: 1c:f4:46:39:16:ad:e5:a3:65:37:b6:53:6e:37:cc: b7:ab:08:de:f6:fa:7a:e3:5c:b4:0e:fe:77:17:aa: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:C1:DD:7D:87:79:DF:D3:0F:A5:81:E2:2A:A8:BB:34:6F:79:A6 X509v3 Authority Key Identifier: keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:88:58:56:25:64:03:04:5b:0e:e2:60:a8:0f:59:33:2a:ee: 32:ec:1a:b4:c2:46:aa:2d:72:ea:d3:37:a6:71:1b:dc:cb:49: fa:b8:05:d3:dc:00:fb:10:1b:08:eb:b7:35:15:cc:49:42:e9: 95:13:81:6a:f2:7c:34:88:33:ca:bd:7f:d6:89:82:05:72:a7: f0:8b:74:40:22:04:60:b7:a6:b9:b2:6f:8c:b2:93:e4:ff:8b: 99:d7:8c:48:fb:85:12:7f:64:72:f4:7d:c9:a6:87:c5:f9:12: 90:d5:7d:02:fd:91:51:7b:20:f5:cf:74:95:f1:d4:ad:b8:48: 81:fe:72:e0:87:92:68:fd:db:32:70:68:db:5b:c8:25:d0:df: a1:bf:e4:5b:b8:38:89:97:be:9f:f4:89:15:18:bb:af:f2:ce: dc:c5:5f:d2:41:a8:b1:92:44:88:3d:7c:2a:80:b1:9a:e0:c0: 11:0b:7d:c0:36:91:57:0d:36:ac:48:cb:53:69:fc:c4:d2:9b: e9:b6:04:3b:df:e3:c7:88:e8:63:00:0d:7a:8c:71:57:01:12: 21:98:46:4a:c1:08:2d:63:92:2d:de:1c:12:af:cb:7a:d7:7f: 93:4e:bd:17:8e:c0:1c:95:9a:4e:82:66:87:0c:08:80:95:78: 61:ef:39:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZEQURDNjJBNTNB N0EwMkU1REIwHhcNMjYwNTA4MTk0ODQwWhcNMjYwNTE1MTk0ODQwWjAYMRYwFAYD VQQDEw02OWZlM2UxOS1iMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Qce6R6msAQPBDtpdlIdJ9lEupQFt0UyrvSfQQ/oZPQj346A/eqN0BRZUWpL 5jgAma0TNMQuuDl88o7qWPsrvo+hOCBUvl9ed0j/wDVSS5hKxRL6WxDEs9u6TbQY e5Av2OyTTvR0fSQ+2bKhPS/RmXM+EKFLlu8Lt0DYEmfQUT+ZMdMqmCTdN+HUV2aK wbZwPwTprroswNrm3Zr1J0Qb+5wsz5rmORIrRRyG3LWXp01W9LcugzyNzizIbu1Q LbVmB9a3zy7oR3eCz2sjhM07pCBHsiOjuYkYFkhjFkE7KvYc9EY5Fq3lo2U3tlNu N8y3qwje9vp641y0Dv53F6o8OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAI+wd19 h3nf0w+lgeIqqLs0b3mmMB8GA1UdIwQYMBaAFBybosX+qMA02lUf2txipTp6AuXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4Ni9DNjdEMTc2RTlB NUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dEVGFWUl9hM0dLbE9ub0M1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hKdWl4ZjZvd0RUYVZSX2EzR0tsT25vQzVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dE VGFWUl9hM0dLbE9ub0M1ZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiohYViVkAwRbDuJgqA9ZMyruMuwatMJGqi1y6tM3pnEb3MtJ+rgF09wA+xAb COu3NRXMSULplROBavJ8NIgzyr1/1omCBXKn8It0QCIEYLemubJvjLKT5P+LmdeM SPuFEn9kcvR9yaaHxfkSkNV9Av2RUXsg9c90lfHUrbhIgf5y4IeSaP3bMnBo21vI JdDfob/kW7g4iZe+n/SJFRi7r/LO3MVf0kGosZJEiD18KoCxmuDAEQt9wDaRVw02 rEjLU2n8xNKb6bYEO9/jx4joYwANeoxxVwESIZhGSsEILWOSLd4cEq/Letd/k069 F47AHJWaToJmhwwIgJV4Ye857A== -----END CERTIFICATE-----Generated at Sat May 9 13:24:44 2026 by rpki-client