$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: Z1Pfzt6Bqpk9yDWS2CK/0hVpwXe2rHLG/VRC0/L3BmQ= Subject key identifier: 4F:21:01:28:CA:2C:E4:13:32:DA:F5:CF:03:7F:45:61:7D:31:53:7D Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 024D Signing time: Wed 29 Apr 2026 02:53:22 +0000 Manifest this update: Wed 29 Apr 2026 02:53:21 +0000 Manifest next update: Wed 06 May 2026 02:53:21 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: lYdkdqW2sgLlmiVBQ1t8zBSgkCP0JKqpYtt7XUNZyss=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 02:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Apr 29 02:53:21 2026 GMT Not After : May 6 02:53:21 2026 GMT Subject: CN=69f172a2-d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:57:0c:ea:f7:93:b7:a9:e1:74:ed:19:06: 2d:3f:b6:a8:1d:6d:f4:e3:cf:d8:2c:ac:69:c7:34: fd:1c:5f:c2:a7:ab:96:a6:1b:17:ca:6e:04:62:7d: 4f:66:49:56:7f:00:ea:ec:ff:f0:de:b0:5c:1b:e0: e7:e5:7a:71:65:ef:88:3c:45:cf:ad:31:d6:e4:df: 93:c4:6c:56:6c:f0:9d:50:50:b9:d3:b2:70:e4:1b: 7d:55:1b:ee:0b:66:4b:8b:50:e7:c9:a8:01:da:f4: 23:09:d7:eb:3b:3c:e1:ad:91:9d:d8:b2:0d:d0:d2: f4:62:0e:aa:e2:1d:03:fc:e7:e7:09:8f:97:eb:15: 35:b7:f2:55:2d:9d:32:4e:af:a6:38:42:28:20:68: 46:b0:cb:f0:98:8f:dd:9f:23:e2:d6:d4:77:10:2d: 35:b1:fa:6b:1f:e2:04:a4:5a:01:5c:8d:46:9e:76: ae:4c:14:0e:8d:c9:2d:99:5d:ae:86:73:31:b1:7b: db:da:a5:1b:c3:5f:56:9b:36:90:89:f3:aa:1b:d0: 24:4f:ba:94:0f:5f:c1:71:03:d3:93:62:6d:20:3b: 82:88:61:bd:a9:59:ff:e2:98:26:f2:07:72:fe:b1: c3:ee:9b:c0:ad:3c:63:bb:f0:21:52:61:ad:cf:de: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:21:01:28:CA:2C:E4:13:32:DA:F5:CF:03:7F:45:61:7D:31:53:7D X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9b:ca:91:ea:4c:f7:5c:2c:7b:46:3d:38:4e:08:e1:3a:d7: d5:c9:4c:8f:6a:d1:bf:33:a9:8a:71:ed:25:9b:19:df:d8:a6: af:dc:d1:43:b8:de:89:db:de:8f:7c:b1:48:99:8c:37:e7:41: d5:0c:18:51:37:2f:a3:c0:67:8a:24:01:73:38:de:ff:1e:41: b2:ec:c2:6c:81:22:59:0b:dd:90:cb:d6:46:18:a1:e4:68:24: 98:77:74:85:f8:f4:10:62:32:26:b6:10:1a:2d:5f:64:0f:47: ad:68:25:a9:88:1f:18:0d:35:ab:d9:a4:69:78:e1:db:81:1b: c8:fc:dc:44:71:cf:e0:20:92:c5:ce:e2:45:d1:6c:84:ce:87: 81:ef:41:f0:f7:09:14:11:72:ba:d4:76:26:87:44:4d:d6:c7: c0:2a:df:2f:45:9e:8c:2b:ee:75:00:25:c5:cb:fc:28:c3:d4: 8f:52:2a:e1:1b:5d:ac:d8:ee:73:b3:87:06:87:4e:ff:2a:6a: 7d:f3:bd:de:68:40:70:fe:f9:c2:4a:87:c8:18:28:36:80:74: 71:5c:28:9e:4c:77:1d:7b:1f:bd:a2:bd:58:5f:e0:85:03:d6: 65:c3:a4:00:20:5e:c2:c3:b8:5d:49:2c:a6:06:f3:be:0a:12: d8:54:a9:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjYwNDI5MDI1MzIxWhcNMjYwNTA2MDI1MzIxWjAYMRYwFAYD VQQDEw02OWYxNzJhMi1kMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIlXDOr3k7ep4XTtGQYtP7aoHW3048/YLKxpxzT9HF/Cp6uWphsXym4EYn1P ZklWfwDq7P/w3rBcG+Dn5XpxZe+IPEXPrTHW5N+TxGxWbPCdUFC507Jw5Bt9VRvu C2ZLi1DnyagB2vQjCdfrOzzhrZGd2LIN0NL0Yg6q4h0D/OfnCY+X6xU1t/JVLZ0y Tq+mOEIoIGhGsMvwmI/dnyPi1tR3EC01sfprH+IEpFoBXI1GnnauTBQOjcktmV2u hnMxsXvb2qUbw19WmzaQifOqG9AkT7qUD1/BcQPTk2JtIDuCiGG9qVn/4pgm8gdy /rHD7pvArTxju/AhUmGtz96VmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8hASjK LOQTMtr1zwN/RWF9MVN9MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5vKkepM91wse0Y9OE4I4TrX1clMj2rRvzOpinHtJZsZ39imr9zRQ7jeidve j3yxSJmMN+dB1QwYUTcvo8BniiQBczje/x5BsuzCbIEiWQvdkMvWRhih5GgkmHd0 hfj0EGIyJrYQGi1fZA9HrWglqYgfGA01q9mkaXjh24EbyPzcRHHP4CCSxc7iRdFs hM6Hge9B8PcJFBFyutR2JodETdbHwCrfL0WejCvudQAlxcv8KMPUj1Iq4RtdrNju c7OHBodO/ypqffO93mhAcP75wkqHyBgoNoB0cVwonkx3HXsfvaK9WF/ghQPWZcOk ACBewsO4XUkspgbzvgoS2FSpPA== -----END CERTIFICATE-----Generated at Thu Apr 30 12:49:37 2026 by rpki-client