$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: k2DajGUcXlAI+2M3er7shSbotJSHoJoz+Ra52y4NXig= Subject key identifier: 2C:AC:C3:B9:C6:D2:CD:96:7C:4D:55:F5:60:6A:7B:2F:DA:97:32:56 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 359C Signing time: Tue 02 Jun 2026 14:39:49 +0000 Manifest this update: Tue 02 Jun 2026 14:39:49 +0000 Manifest next update: Tue 09 Jun 2026 14:39:49 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: 0NKpxTE6Sn4jwzPsmHeAMm8b5BrYA3+CGfJ2+7Rppzo=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: i7xoaF0lo4v/u3C3CSr1yIhYmxnuvtGvhXEfUH5uBHU=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=) 4: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=) 6: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=) 7: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13808 (0x35f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Jun 2 14:39:49 2026 GMT Not After : Jun 9 14:39:49 2026 GMT Subject: CN=6a1eeb35-7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:72:45:20:ae:b3:ea:5a:72:0a:d4:44:0a: bc:34:4c:0b:22:6d:7a:99:61:16:b6:c8:c4:51:1e: c6:fb:50:a4:9e:dc:6a:f0:1a:b9:83:18:81:35:17: b1:be:7f:02:23:f3:76:e1:46:9d:74:e0:8c:1d:4f: 76:0f:b3:e7:49:af:d2:33:36:7b:12:bc:f7:fd:ca: d9:ae:47:f9:98:1c:35:04:80:9b:12:c6:08:6d:df: f8:f1:03:47:fc:2b:3b:7a:20:ca:81:d9:49:f1:eb: c7:38:5e:ab:8b:75:34:1e:12:e2:df:b4:af:26:65: e0:85:34:08:05:a6:a0:d6:11:8d:a0:12:65:dc:bb: ea:86:ec:13:3f:57:0e:53:4b:20:68:d5:4c:7a:98: 74:ef:e8:f4:6a:47:ff:ac:97:c1:23:00:40:59:df: 38:69:20:fd:3d:9e:c2:a3:af:9c:55:71:5b:30:0b: 84:55:36:f1:80:44:81:33:e1:a9:bc:e5:13:c8:a9: 26:03:93:ef:40:40:55:94:8c:8a:72:42:af:2c:45: 89:66:35:a8:9f:45:37:3a:08:c5:65:3f:19:03:1d: f6:63:62:d7:6d:d8:25:39:43:51:38:e2:e6:79:df: 85:98:ff:44:20:6b:ac:01:d0:86:ec:f1:39:cb:cd: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:C3:B9:C6:D2:CD:96:7C:4D:55:F5:60:6A:7B:2F:DA:97:32:56 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:75:2c:91:51:4e:80:15:88:60:a8:ac:d9:42:31:ed:38:5f: 37:8a:d8:9c:7c:a8:77:82:d6:26:53:a4:4b:cb:a8:a2:94:77: 4f:1b:ed:cd:24:fe:aa:0c:e6:1f:24:fd:c0:7c:b2:66:2e:0a: c3:23:1b:c8:a6:ef:82:ff:89:2f:c6:3f:af:67:53:57:f1:23: c6:f4:fc:38:0e:96:49:c2:fb:81:74:ec:9f:fd:85:8e:67:e5: 34:28:71:df:1f:cf:3b:08:4d:c9:38:b3:c0:b2:55:6f:60:9d: cf:19:4e:26:6d:42:50:ed:5c:29:8d:ac:c3:28:17:0c:f4:8c: 66:35:b8:7f:15:a3:89:15:e6:64:95:70:99:52:52:8e:c6:42: 04:5f:9d:26:bf:5f:59:ba:1c:e2:51:79:12:e6:3e:38:c4:b6: 75:7c:46:48:16:01:2d:d5:ce:6d:25:22:75:aa:86:35:a3:8a: 5d:b1:33:e4:1d:4d:ce:a1:01:e4:81:c4:cf:15:3b:5f:b5:0e: 7d:f1:fb:2f:4a:ca:c7:d7:83:00:d4:ec:f9:8c:f1:6a:f9:56: 13:76:68:60:bb:e1:7a:bd:74:dc:b2:8a:9c:b2:d4:f2:b0:96: 7a:56:b8:31:bb:d0:4e:55:42:0f:07:96:80:48:cb:ec:4a:6e: e6:b0:55:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNjAyMTQzOTQ5WhcNMjYwNjA5MTQzOTQ5WjAYMRYwFAYD VQQDEw02YTFlZWIzNS03YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucxyRSCus+pacgrURAq8NEwLIm16mWEWtsjEUR7G+1Ckntxq8Bq5gxiBNRex vn8CI/N24UaddOCMHU92D7PnSa/SMzZ7Erz3/crZrkf5mBw1BICbEsYIbd/48QNH /Cs7eiDKgdlJ8evHOF6ri3U0HhLi37SvJmXghTQIBaag1hGNoBJl3LvqhuwTP1cO U0sgaNVMeph07+j0akf/rJfBIwBAWd84aSD9PZ7Co6+cVXFbMAuEVTbxgESBM+Gp vOUTyKkmA5PvQEBVlIyKckKvLEWJZjWon0U3OgjFZT8ZAx32Y2LXbdglOUNROOLm ed+FmP9EIGusAdCG7PE5y80qFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCysw7nG 0s2WfE1V9WBqey/alzJWMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjnUskVFOgBWIYKis2UIx7ThfN4rYnHyod4LWJlOkS8uoopR3TxvtzST+qgzm HyT9wHyyZi4KwyMbyKbvgv+JL8Y/r2dTV/EjxvT8OA6WScL7gXTsn/2FjmflNChx 3x/POwhNyTizwLJVb2CdzxlOJm1CUO1cKY2swygXDPSMZjW4fxWjiRXmZJVwmVJS jsZCBF+dJr9fWboc4lF5EuY+OMS2dXxGSBYBLdXObSUidaqGNaOKXbEz5B1NzqEB 5IHEzxU7X7UOffH7L0rKx9eDANTs+YzxavlWE3ZoYLvher103LKKnLLU8rCWela4 MbvQTlVCDweWgEjL7Epu5rBVmQ== -----END CERTIFICATE-----Generated at Thu Jun 4 12:25:56 2026 by rpki-client