$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: vwuXc1PRzHhUWZuKPDA85EBzcetTKtC7cfvY8vRU8GY= Subject key identifier: 43:EF:86:E5:6A:15:39:7C:9B:0D:22:9F:76:4B:D4:08:48:E2:04:34 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 13FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 13F5 Signing time: Wed 20 May 2026 16:55:29 +0000 Manifest this update: Wed 20 May 2026 16:55:28 +0000 Manifest next update: Wed 27 May 2026 16:55:28 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: zgYVvWGgSL68bl8T+xW02lL2JwfaUS6MdNjoAXDad40=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: +8AddGBFIIMgwGJltYVSUMtKxs5lAyAGDBkgXORqOLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5119 (0x13ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: May 20 16:55:28 2026 GMT Not After : May 27 16:55:28 2026 GMT Subject: CN=6a0de780-b25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:16:0c:5f:a8:a2:5e:16:d2:eb:58:34:82: b1:af:c6:65:6c:79:bc:fd:4e:ad:a2:3c:23:e1:e7: 48:a6:54:a7:41:ea:b4:b3:01:a9:18:d8:47:c4:8b: 4b:4b:c5:cf:b8:86:1b:38:b9:44:0f:18:d3:b9:e6: 23:aa:42:3d:49:aa:d4:e3:82:46:e6:6b:3e:9f:fa: 0b:32:b6:22:25:5e:08:ab:5a:aa:0a:b5:76:5c:8c: ec:db:6c:52:e4:f4:3d:2a:fe:d6:9a:66:2d:14:d4: 9d:91:41:1d:1f:3d:2c:86:4f:82:a8:f6:4e:df:47: 96:78:f8:c8:aa:79:bb:01:ae:8a:4e:68:6c:39:5a: 0d:77:f6:41:2d:24:7e:41:00:00:63:62:5a:4b:d2: 19:89:ca:93:b6:be:4f:4b:d5:51:5b:e5:a1:dc:1e: 51:77:77:a4:a8:6b:a1:22:c4:d2:d3:b2:e0:9d:8d: cc:fd:5b:09:08:1f:ea:3f:48:ac:10:ef:8f:79:07: 2b:c5:ca:c0:df:4c:d5:31:c7:77:de:dd:61:92:6b: 24:37:b1:65:d1:b6:e4:75:46:d8:86:25:af:ab:91: 4d:34:55:e8:54:32:a5:13:01:54:3c:d8:34:f5:02: 73:72:25:af:09:3e:9c:57:8b:32:c3:a9:49:c7:d7: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EF:86:E5:6A:15:39:7C:9B:0D:22:9F:76:4B:D4:08:48:E2:04:34 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:14:e8:6e:54:51:b1:83:44:80:cd:03:df:aa:a2:d1:da:09: eb:23:75:02:4b:80:53:38:d8:3b:8b:5e:b5:74:d9:42:98:b2: 9e:0e:2c:6a:73:30:ce:33:5b:8e:e4:9e:83:a8:7f:f0:f4:d6: 1a:b2:9e:be:c9:88:de:5e:7c:bf:5d:24:a5:6b:f2:12:ab:ca: 13:27:21:3c:db:c0:9b:cb:fa:cd:7c:9e:be:8c:11:ed:23:66: 77:ab:c8:f8:da:10:2f:dc:b4:fe:58:b5:62:8a:da:c6:21:cf: 3b:f0:a5:e2:da:3e:47:9c:62:1d:97:01:b9:d0:d4:91:d3:77: 5d:b3:4b:ea:e3:f8:48:21:66:39:03:f9:39:09:c3:15:cb:bf: 64:79:07:3a:ee:57:d0:1f:02:53:14:ff:9f:0b:f7:a2:0e:1d: be:15:8a:18:f2:22:ed:38:d8:97:f4:ec:25:25:b0:eb:9a:86: 4a:af:1a:51:3f:ba:e9:f7:1a:d9:52:e4:95:3a:27:c6:3e:61: ce:f0:09:bb:7e:0e:aa:46:4d:af:ac:d1:0b:58:3e:ec:56:c1: c1:d5:ca:c6:75:b7:32:64:30:7b:bc:2f:c5:91:b9:69:80:71: 67:62:8c:28:84:01:ec:02:46:fa:16:cb:39:8e:77:9d:07:14: df:f0:b9:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwNTIwMTY1NTI4WhcNMjYwNTI3MTY1NTI4WjAYMRYwFAYD VQQDEw02YTBkZTc4MC1iMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYUWDF+ool4W0utYNIKxr8ZlbHm8/U6tojwj4edIplSnQeq0swGpGNhHxItL S8XPuIYbOLlEDxjTueYjqkI9SarU44JG5ms+n/oLMrYiJV4Iq1qqCrV2XIzs22xS 5PQ9Kv7WmmYtFNSdkUEdHz0shk+CqPZO30eWePjIqnm7Aa6KTmhsOVoNd/ZBLSR+ QQAAY2JaS9IZicqTtr5PS9VRW+Wh3B5Rd3ekqGuhIsTS07LgnY3M/VsJCB/qP0is EO+PeQcrxcrA30zVMcd33t1hkmskN7Fl0bbkdUbYhiWvq5FNNFXoVDKlEwFUPNg0 9QJzciWvCT6cV4syw6lJx9erKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPvhuVq FTl8mw0in3ZL1AhI4gQ0MB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPxToblRRsYNEgM0D36qi0doJ6yN1AkuAUzjYO4tetXTZQpiyng4sanMwzjNb juSeg6h/8PTWGrKevsmI3l58v10kpWvyEqvKEychPNvAm8v6zXyevowR7SNmd6vI +NoQL9y0/li1YoraxiHPO/Cl4to+R5xiHZcBudDUkdN3XbNL6uP4SCFmOQP5OQnD Fcu/ZHkHOu5X0B8CUxT/nwv3og4dvhWKGPIi7TjYl/TsJSWw65qGSq8aUT+66fca 2VLklTonxj5hzvAJu34OqkZNr6zRC1g+7FbBwdXKxnW3MmQwe7wvxZG5aYBxZ2KM KIQB7AJG+hbLOY53nQcU3/C5QA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:39 2026 by rpki-client