$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: G8TWFfv9K+GMb9d6DXhgf7WyBHpCQBLsKmZTdiBDVp0= Subject key identifier: 59:06:95:D3:73:CE:2C:21:3B:7C:E8:BE:1B:E8:60:F1:05:E0:BA:E1 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 0858 Signing time: Wed 20 May 2026 20:50:33 +0000 Manifest this update: Wed 20 May 2026 20:50:32 +0000 Manifest next update: Wed 27 May 2026 20:50:32 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: 2QorwvJz1yryUmVMTwqJyEsaLrHbold7veU8+K8DDoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: May 20 20:50:32 2026 GMT Not After : May 27 20:50:32 2026 GMT Subject: CN=6a0e1e99-0125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f1:0a:24:33:44:8c:3d:7c:b0:d2:d0:95:a9: 44:6f:49:0e:8d:61:10:31:1c:db:33:82:93:71:30: 75:bf:c4:f5:b8:11:e5:92:19:53:40:14:cf:45:ac: c4:6c:50:b5:b7:87:29:2b:fe:12:2a:99:83:da:3b: de:63:24:33:e8:c1:55:68:56:17:06:30:46:1b:20: ce:63:92:43:76:e0:61:c1:a3:90:85:43:bb:7c:3a: 6f:71:4f:0f:9f:00:69:65:db:84:8c:d8:ac:84:b0: de:90:20:54:75:63:72:63:c6:12:c8:da:d5:d2:14: fb:fe:d7:1d:4b:d1:41:61:9f:3a:cd:31:de:ac:dc: f9:3d:a6:90:27:c3:33:54:87:08:7e:6c:6f:06:da: ef:b6:5d:ce:ae:9a:3f:3d:9a:e0:31:47:53:d3:0e: 72:4a:5f:fb:df:36:80:64:85:7f:3a:53:20:00:96: a6:09:de:10:de:57:80:12:fa:b9:16:76:52:32:f4: a1:50:ae:6e:c4:37:49:6c:e4:18:4e:58:a4:8f:98: b2:13:5e:bf:9d:66:8d:8f:2c:c9:65:9a:96:cd:6a: 37:95:2a:c0:ae:fe:a4:c0:9d:1b:99:32:94:b8:b8: c5:44:92:85:2e:33:d8:ea:bf:15:43:86:8a:82:f8: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:95:D3:73:CE:2C:21:3B:7C:E8:BE:1B:E8:60:F1:05:E0:BA:E1 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:1b:41:a3:17:1f:3f:a1:c2:14:45:4b:2e:14:df:30:29: 19:6c:f0:bc:b1:82:40:93:f9:70:cb:b7:04:e1:6f:96:de:33: 07:d0:95:12:02:f6:af:53:93:31:7d:80:53:52:0a:bd:7c:56: d7:c8:05:56:f1:df:09:be:44:82:c4:ee:4b:2c:ae:03:40:71: e8:9e:3a:41:60:4e:9d:5b:ba:67:96:83:9f:e7:60:2b:5d:95: 7e:a1:e3:e5:db:33:1b:34:4c:ec:6e:e7:f1:42:0e:58:73:e0: fc:67:97:fa:eb:ae:04:86:b6:02:da:a6:fe:cb:38:9d:c0:0d: d0:c1:ad:50:00:c5:f0:16:04:87:12:b3:be:7f:fa:78:bb:06: 29:93:7d:c9:eb:b5:71:0f:46:c4:8a:01:53:51:5f:97:fa:d0: d7:1c:c2:82:4e:15:33:d8:ae:9f:5d:50:2e:06:56:05:28:a3: bc:e8:ab:cb:09:1b:b6:1e:8e:d6:bf:39:c3:bb:fa:dd:35:9e: ba:78:0e:b0:d5:7c:b2:6d:ea:f1:38:20:40:76:3f:bd:5b:44: 09:c4:bb:76:c9:f8:35:58:cb:25:9e:31:c1:ff:62:ca:ca:82: ca:7a:00:17:ee:ca:f5:96:61:55:ea:db:f8:3e:20:6f:c6:a2: d8:e0:bd:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwNTIwMjA1MDMyWhcNMjYwNTI3MjA1MDMyWjAYMRYwFAYD VQQDEw02YTBlMWU5OS0wMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vEKJDNEjD18sNLQlalEb0kOjWEQMRzbM4KTcTB1v8T1uBHlkhlTQBTPRazE bFC1t4cpK/4SKpmD2jveYyQz6MFVaFYXBjBGGyDOY5JDduBhwaOQhUO7fDpvcU8P nwBpZduEjNishLDekCBUdWNyY8YSyNrV0hT7/tcdS9FBYZ86zTHerNz5PaaQJ8Mz VIcIfmxvBtrvtl3Orpo/PZrgMUdT0w5ySl/73zaAZIV/OlMgAJamCd4Q3leAEvq5 FnZSMvShUK5uxDdJbOQYTlikj5iyE16/nWaNjyzJZZqWzWo3lSrArv6kwJ0bmTKU uLjFRJKFLjPY6r8VQ4aKgvhWmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkGldNz ziwhO3zovhvoYPEF4LrhMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHBkbQaMXHz+hwhRFSy4U3zApGWzwvLGCQJP5cMu3BOFvlt4zB9CVEgL2r1OT MX2AU1IKvXxW18gFVvHfCb5EgsTuSyyuA0Bx6J46QWBOnVu6Z5aDn+dgK12VfqHj 5dszGzRM7G7n8UIOWHPg/GeX+uuuBIa2Atqm/ss4ncAN0MGtUADF8BYEhxKzvn/6 eLsGKZN9yeu1cQ9GxIoBU1Ffl/rQ1xzCgk4VM9iun11QLgZWBSijvOirywkbth6O 1r85w7v63TWeungOsNV8sm3q8TggQHY/vVtECcS7dsn4NVjLJZ4xwf9iysqCynoA F+7K9ZZhVerb+D4gb8ai2OC9iA== -----END CERTIFICATE-----Generated at Thu May 21 11:03:47 2026 by rpki-client