$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: xT3CDBSpubzeOo/jjyDOA5pjwbZpbzNf0tn1+oxBJYc= Subject key identifier: 92:D7:E5:4B:71:90:E0:E3:79:DC:FE:41:6A:31:D3:56:0D:98:0A:2E Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 074E Signing time: Wed 20 May 2026 21:46:45 +0000 Manifest this update: Wed 20 May 2026 21:46:44 +0000 Manifest next update: Wed 27 May 2026 21:46:44 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: x8YBkIclHQulx1V1uS5f1AwxBh/SSZqI/phwuYwy6xM=) 2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: POpr8wQqUbcrtsin7090l3LSjMlxCYgCxYONDuDwzEA=) 3: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 0A1AOVsjVRyjkOa0stdyBH8yBCmf007m2jZE8cgy4HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: May 20 21:46:44 2026 GMT Not After : May 27 21:46:44 2026 GMT Subject: CN=6a0e2bc5-09fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:74:af:f0:25:d0:01:09:29:4f:30:e3:0d: 01:1e:7a:25:79:59:82:e7:bd:75:6e:a1:be:8c:4d: 41:5f:33:46:c7:c7:2a:98:9d:09:df:ba:b2:96:93: 9a:3c:0b:3d:28:1f:c5:85:e4:8c:56:6a:cc:60:00: 01:79:ad:d8:a1:82:06:90:4e:48:25:1c:16:4f:b3: f3:4a:57:78:fc:ce:93:c1:32:b6:fe:21:04:39:cd: 13:a3:32:47:ba:77:b2:f6:ae:30:6a:6b:ab:5d:78: 18:17:77:84:34:a8:c0:c5:a5:c5:a1:a4:c5:bf:6e: cf:13:05:8e:9f:07:ab:28:fb:b8:19:85:46:e3:0b: 23:24:26:6b:05:4e:b0:b9:e0:d7:d8:8e:56:5b:57: 87:cb:30:3c:17:8a:c2:95:29:81:e3:25:15:7f:99: 93:4f:7c:89:82:b6:b5:74:f7:e2:e6:36:5a:aa:c0: 16:0b:79:86:b6:f0:df:86:16:9c:d2:4f:96:9a:c5: b4:65:99:88:e5:36:3a:b6:e8:22:2b:97:70:ac:63: 07:62:6e:ab:9d:0c:df:ab:5a:fd:f5:eb:cb:57:45: af:c5:ab:83:83:4d:1b:17:6e:07:76:79:1c:87:29: 02:21:fc:73:42:35:71:0c:fa:6a:22:79:da:f2:eb: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:E5:4B:71:90:E0:E3:79:DC:FE:41:6A:31:D3:56:0D:98:0A:2E X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b4:7f:04:c4:85:34:6c:bb:29:0f:59:8a:5e:87:d9:f6:8d: 8b:6a:8e:89:83:37:5f:a6:b0:4b:69:39:f4:64:0a:b0:53:4f: 64:1b:b6:46:87:51:75:ae:07:24:f8:70:28:b3:6f:a2:b7:3e: b1:72:1a:72:12:3e:a1:b6:db:b2:5b:44:12:b7:27:16:cf:f3: ae:cb:bf:52:51:03:cf:af:00:b6:ec:0b:e7:01:28:1a:8e:90: f0:3b:f9:61:a8:de:63:55:03:e0:15:66:12:d2:70:b4:cb:89: 06:ff:f8:b9:28:97:0e:57:19:7f:33:34:e8:17:53:9c:dc:39: 81:dd:17:eb:28:a8:6b:95:6e:ff:73:9c:1c:68:b2:eb:c3:7b: b4:be:ca:a9:72:d5:d5:0e:26:70:c9:db:30:cd:a9:18:de:d8: 08:7d:5e:69:b9:8a:77:92:a0:2d:bf:8d:21:39:a7:30:2f:ef: a4:89:f3:31:72:81:f6:30:38:a7:63:bf:ab:7c:89:1a:8b:ff: b5:94:df:d4:64:69:5a:af:cd:14:22:96:d2:0f:26:d5:5e:6b: bd:34:97:90:2f:ab:d4:7f:1d:cf:58:2d:a9:bd:ed:63:c6:3b: 42:c6:63:b2:67:b9:7e:54:0c:13:ae:9b:8e:94:66:77:67:0d: ac:68:4c:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwNTIwMjE0NjQ0WhcNMjYwNTI3MjE0NjQ0WjAYMRYwFAYD VQQDEw02YTBlMmJjNS0wOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kx0r/Al0AEJKU8w4w0BHnoleVmC5711bqG+jE1BXzNGx8cqmJ0J37qylpOa PAs9KB/FheSMVmrMYAABea3YoYIGkE5IJRwWT7PzSld4/M6TwTK2/iEEOc0TozJH uney9q4wamurXXgYF3eENKjAxaXFoaTFv27PEwWOnwerKPu4GYVG4wsjJCZrBU6w ueDX2I5WW1eHyzA8F4rClSmB4yUVf5mTT3yJgra1dPfi5jZaqsAWC3mGtvDfhhac 0k+WmsW0ZZmI5TY6tugiK5dwrGMHYm6rnQzfq1r99evLV0WvxauDg00bF24Hdnkc hykCIfxzQjVxDPpqInna8uvp2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLX5Utx kODjedz+QWox01YNmAouMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvLR/BMSFNGy7KQ9Zil6H2faNi2qOiYM3X6awS2k59GQKsFNPZBu2RodRda4H JPhwKLNvorc+sXIachI+obbbsltEErcnFs/zrsu/UlEDz68AtuwL5wEoGo6Q8Dv5 YajeY1UD4BVmEtJwtMuJBv/4uSiXDlcZfzM06BdTnNw5gd0X6yioa5Vu/3OcHGiy 68N7tL7KqXLV1Q4mcMnbMM2pGN7YCH1eabmKd5KgLb+NITmnMC/vpInzMXKB9jA4 p2O/q3yJGov/tZTf1GRpWq/NFCKW0g8m1V5rvTSXkC+r1H8dz1gtqb3tY8Y7QsZj sme5flQME66bjpRmd2cNrGhMkg== -----END CERTIFICATE-----Generated at Thu May 21 10:16:16 2026 by rpki-client