$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: 78SYrEr0/DoH+VRmzd60HUqauoGa/FOtyvrmBjMosN0= Subject key identifier: 09:59:D3:74:43:92:6E:98:DA:21:07:2E:88:ED:EB:93:AF:4A:05:C7 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 03B8 Signing time: Thu 21 May 2026 00:45:04 +0000 Manifest this update: Thu 21 May 2026 00:45:04 +0000 Manifest next update: Thu 28 May 2026 00:45:04 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: R8DimmZo8+XzwlxikUIVJETmQQ9hCioUJwY6/1rSl74=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: I/3jw2SL7oFfJMZX+8eB8I+ObagDtYG05+5xid9Ie/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: May 21 00:45:04 2026 GMT Not After : May 28 00:45:04 2026 GMT Subject: CN=6a0e5590-5dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:79:23:15:be:ef:43:e0:6b:a5:3e:f1:bb: db:47:c2:60:56:da:3c:4b:ed:c7:46:29:e0:50:91: 84:5c:9a:51:b5:17:ab:ba:b8:00:d0:3d:cb:19:de: da:5b:bd:de:d7:c8:93:13:2b:10:68:fa:db:d5:a9: f9:80:07:6d:80:dc:7f:44:1a:88:b6:ee:49:44:de: 25:ea:1c:b2:97:f2:e6:9b:15:3f:62:4a:ba:18:86: b7:d4:8f:c6:b3:9c:46:b1:cc:1d:1e:18:60:35:78: ec:dd:d9:31:cb:ef:89:e3:03:56:1e:cf:4a:17:0e: ae:48:3b:91:de:82:a2:c4:e4:c8:75:07:cb:70:73: b4:9e:b2:09:eb:f0:3f:be:13:2b:2d:2a:58:15:63: fd:d5:a6:a5:6a:a2:8e:73:b6:f2:9d:56:79:2c:ce: ef:c0:23:f2:04:cb:9c:a5:86:a1:48:49:cd:05:a9: d1:08:ac:6b:f6:f1:8a:6b:4a:45:ff:38:ed:9c:37: 14:fa:be:d4:f2:91:2a:e8:d4:c6:29:eb:83:d6:1d: 71:c3:11:fa:4a:26:af:73:32:d4:ba:71:13:3a:96: 70:3d:e3:83:56:e9:0d:fb:58:d3:50:95:51:07:be: dd:f8:12:42:bb:54:39:f3:1c:28:23:f4:bc:3a:14: c4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:D3:74:43:92:6E:98:DA:21:07:2E:88:ED:EB:93:AF:4A:05:C7 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:32:30:d1:a9:99:84:c7:7c:fd:86:56:06:de:6c:53:2d:ca: c5:60:67:b9:01:f4:de:b7:be:f8:96:84:99:d7:d5:19:e1:06: d9:2d:5b:05:64:3a:88:f5:de:98:7e:e6:f8:7a:5d:b6:06:c2: 73:ef:01:da:68:50:e0:4d:a7:91:7f:59:a3:b4:cd:bf:99:c3: b2:47:5d:cc:60:98:94:e0:3e:0c:53:d7:28:d2:a6:69:26:91: 12:9d:30:3a:d3:8f:2f:28:f2:6c:e1:94:f8:a3:d5:71:38:e5: b4:e3:38:34:89:32:05:3a:96:8b:5c:fb:0e:c9:18:05:cb:23: b0:6e:15:e5:26:c5:62:de:d2:8a:a1:28:70:8e:b8:e0:4b:44: 4c:5a:1e:81:59:d3:28:75:44:0b:0b:a6:9f:ca:a7:2b:17:53: ec:9e:ac:d5:05:bb:92:42:e8:c1:dc:1e:81:e1:86:b6:bd:44: a1:75:97:aa:5c:00:50:d5:99:a2:76:49:7c:ac:0e:81:a4:9b: 7c:59:79:84:95:cd:44:b6:a6:8c:ef:4a:b7:49:1e:9e:5a:a3: d8:5c:38:e5:f6:17:90:30:42:43:47:a4:e2:ca:46:94:77:b8: 76:3c:bc:be:88:3a:f2:2e:6a:54:40:f2:a4:69:cd:45:e9:98: 38:36:2b:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjYwNTIxMDA0NTA0WhcNMjYwNTI4MDA0NTA0WjAYMRYwFAYD VQQDEw02YTBlNTU5MC01ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC15IxW+70Pga6U+8bvbR8JgVto8S+3HRingUJGEXJpRtRerurgA0D3LGd7a W73e18iTEysQaPrb1an5gAdtgNx/RBqItu5JRN4l6hyyl/LmmxU/Ykq6GIa31I/G s5xGscwdHhhgNXjs3dkxy++J4wNWHs9KFw6uSDuR3oKixOTIdQfLcHO0nrIJ6/A/ vhMrLSpYFWP91aalaqKOc7bynVZ5LM7vwCPyBMucpYahSEnNBanRCKxr9vGKa0pF /zjtnDcU+r7U8pEq6NTGKeuD1h1xwxH6SiavczLUunETOpZwPeODVukN+1jTUJVR B77d+BJCu1Q58xwoI/S8OhTEXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlZ03RD km6Y2iEHLojt65OvSgXHMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDIw0amZhMd8/YZWBt5sUy3KxWBnuQH03re++JaEmdfVGeEG2S1bBWQ6iPXe mH7m+HpdtgbCc+8B2mhQ4E2nkX9Zo7TNv5nDskddzGCYlOA+DFPXKNKmaSaREp0w OtOPLyjybOGU+KPVcTjltOM4NIkyBTqWi1z7DskYBcsjsG4V5SbFYt7SiqEocI64 4EtETFoegVnTKHVECwumn8qnKxdT7J6s1QW7kkLowdwegeGGtr1EoXWXqlwAUNWZ onZJfKwOgaSbfFl5hJXNRLamjO9Kt0kenlqj2Fw45fYXkDBCQ0ek4spGlHe4djy8 vog68i5qVEDypGnNRemYODYrKw== -----END CERTIFICATE-----Generated at Thu May 21 11:58:46 2026 by rpki-client