$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: a0WMEyqHWMHKf350RZ5utVvjMZVDFymXwYGtpGmCRHM= Subject key identifier: 80:41:5C:57:D9:31:F1:54:61:CB:D2:DD:1C:37:15:61:BF:61:65:01 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0F51 Signing time: Thu 04 Jun 2026 17:34:17 +0000 Manifest this update: Thu 04 Jun 2026 17:34:17 +0000 Manifest next update: Thu 11 Jun 2026 17:34:17 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: gN680hrpP4mnz6LA1NTAnawefzpAYLBHR7NqdhRPuV0=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=) 3: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=) 4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 17:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Jun 4 17:34:17 2026 GMT Not After : Jun 11 17:34:17 2026 GMT Subject: CN=6a21b719-8a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:9d:e1:52:44:7d:ee:0e:30:6d:58:97:5d: 8b:88:1d:71:49:04:70:7d:76:ca:db:d0:96:d0:82: f9:4f:b3:81:23:b4:76:ca:eb:7a:fc:50:d0:65:ba: 86:59:fb:e8:43:6c:41:c4:e1:2e:61:70:90:f1:da: 97:e4:14:85:24:0a:df:bb:9b:04:60:0b:0b:7b:21: 81:ed:6b:6b:ac:0b:da:43:c7:ae:af:49:23:8a:97: ca:2b:be:89:0b:a3:12:6b:d8:d5:47:dd:4d:7d:46: ae:10:e8:03:04:ed:81:d9:c9:86:82:6f:da:47:b8: bc:68:2a:48:1e:be:28:ef:bc:34:01:6e:92:f1:c8: 7d:f5:74:1e:f5:55:75:4b:bf:0f:2d:d6:05:72:73: da:f8:a8:6c:52:17:f8:cc:48:ec:67:71:73:13:d8: 99:b0:fa:38:cd:d8:13:c1:55:31:63:28:15:76:f2: c3:7c:f9:c2:dd:bf:f2:3e:36:61:1c:61:6f:7b:3f: 5e:da:2d:8a:24:9d:e2:5a:ed:f4:05:f0:0b:b1:39: a6:4f:01:42:cc:eb:61:2c:c9:63:02:de:92:29:f4: 8a:31:98:37:0d:00:56:2c:0f:f0:85:4e:78:90:49: 0b:0f:f7:7f:04:d2:98:98:d9:13:2c:69:92:c3:2a: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:5C:57:D9:31:F1:54:61:CB:D2:DD:1C:37:15:61:BF:61:65:01 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:14:11:b4:68:e5:f1:e3:d6:42:a7:8b:d0:ee:d4:89:dc:97: 07:04:c1:e0:a7:41:86:4f:67:2f:57:e5:13:d2:ae:75:ea:66: 0a:e7:92:00:76:49:94:43:d4:eb:63:1c:44:84:fb:9b:f9:75: 96:d4:46:40:4c:d1:27:f8:5b:6f:94:ac:93:40:4e:5f:59:fb: d2:0d:84:ef:3b:50:78:60:0e:4a:43:1b:71:62:f0:4a:64:64: db:0d:32:57:c5:6a:6d:7f:3d:89:81:37:f5:36:86:73:86:80: 75:8f:6d:cd:66:70:ce:86:aa:1d:0b:97:b2:51:7c:a5:e2:8b: c2:9b:d1:ed:b1:56:2b:18:8a:4f:a7:b9:73:23:31:a0:18:18: b3:a9:b9:39:63:80:77:2e:e4:48:b6:1e:e4:d0:09:6f:7b:28: 63:9f:60:b6:b6:93:ce:99:c9:63:f7:fd:3d:de:bf:21:68:7c: 86:4b:91:8e:ce:7c:19:7d:23:70:6b:3d:63:9e:fa:97:9d:f4: 2a:d2:a5:0b:11:cc:f6:9f:10:f3:70:fd:ec:7f:3b:15:09:ac: 78:48:aa:d4:ab:d9:38:24:a6:93:5e:1d:b0:23:94:68:3b:81: ca:a9:55:b4:f1:1f:10:27:a9:a9:0d:ae:e6:60:a9:3a:46:f1: 34:8e:a5:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjYwNjA0MTczNDE3WhcNMjYwNjExMTczNDE3WjAYMRYwFAYD VQQDEw02YTIxYjcxOS04YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHOd4VJEfe4OMG1Yl12LiB1xSQRwfXbK29CW0IL5T7OBI7R2yut6/FDQZbqG WfvoQ2xBxOEuYXCQ8dqX5BSFJArfu5sEYAsLeyGB7WtrrAvaQ8eur0kjipfKK76J C6MSa9jVR91NfUauEOgDBO2B2cmGgm/aR7i8aCpIHr4o77w0AW6S8ch99XQe9VV1 S78PLdYFcnPa+KhsUhf4zEjsZ3FzE9iZsPo4zdgTwVUxYygVdvLDfPnC3b/yPjZh HGFvez9e2i2KJJ3iWu30BfALsTmmTwFCzOthLMljAt6SKfSKMZg3DQBWLA/whU54 kEkLD/d/BNKYmNkTLGmSwyp1nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBBXFfZ MfFUYcvS3Rw3FWG/YWUBMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRQRtGjl8ePWQqeL0O7UidyXBwTB4KdBhk9nL1flE9KudepmCueSAHZJlEPU 62McRIT7m/l1ltRGQEzRJ/hbb5Ssk0BOX1n70g2E7ztQeGAOSkMbcWLwSmRk2w0y V8VqbX89iYE39TaGc4aAdY9tzWZwzoaqHQuXslF8peKLwpvR7bFWKxiKT6e5cyMx oBgYs6m5OWOAdy7kSLYe5NAJb3soY59gtraTzpnJY/f9Pd6/IWh8hkuRjs58GX0j cGs9Y576l530KtKlCxHM9p8Q83D97H87FQmseEiq1KvZOCSmk14dsCOUaDuByqlV tPEfECepqQ2u5mCpOkbxNI6lWg== -----END CERTIFICATE-----Generated at Sat Jun 6 13:23:38 2026 by rpki-client