$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: gw7hLEVxYKKuOXIkW7kZz/LdMAqbgLQIhn0GCLn3Y7g= Subject key identifier: B9:C9:95:B6:03:0C:E9:91:CF:90:D8:69:7F:E9:2E:15:91:D6:91:B7 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 5D Signing time: Thu 21 May 2026 08:10:44 +0000 Manifest this update: Thu 21 May 2026 08:10:44 +0000 Manifest next update: Thu 28 May 2026 08:10:44 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: hXzH+UtTzsdBz/fJicoZNNr1C4mjtynCxHsuUbY5fzQ=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: May 21 08:10:44 2026 GMT Not After : May 28 08:10:44 2026 GMT Subject: CN=6a0ebe04-ca0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:5b:02:4a:7d:77:cb:75:e7:f8:4e:53:ef: c2:fc:7f:cd:a8:1b:12:41:05:71:70:96:27:5a:fc: e7:99:2a:f7:f7:cd:af:b9:33:fd:1c:65:91:24:e4: ef:69:7c:0c:7d:a9:3b:e3:68:92:40:d1:78:42:2a: 97:4c:13:17:be:5e:df:cf:23:43:9a:bf:8a:7c:45: bf:2f:51:67:38:3e:7a:73:6f:80:0d:c9:45:2f:f4: 5f:fd:24:67:bb:a7:ef:db:68:23:38:ef:aa:d9:48: 1f:96:39:d2:c3:e9:88:8c:6f:30:8f:4a:0d:27:23: de:81:80:ac:07:8a:3f:77:3e:89:45:4f:6a:0f:26: df:f2:60:0f:f2:c5:6c:6d:76:35:69:e2:2c:18:26: cf:ac:a7:af:fd:df:0d:5f:c5:58:18:bb:cd:27:c6: 38:05:58:3e:c3:c7:b7:9c:fa:eb:ec:a8:b3:7b:48: c4:88:d2:6d:a4:a9:c2:1b:60:04:d2:b8:7e:6d:29: 2a:b9:78:bf:5e:c9:91:b5:d3:93:50:99:81:1f:e2: 16:e1:38:f3:b8:4e:e2:ae:8b:c6:14:87:fc:1e:0c: 90:69:1c:59:c3:e7:92:90:a5:fd:28:d3:b0:55:52: cd:20:f7:b6:76:dd:df:30:96:bf:27:9c:05:7d:5f: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:95:B6:03:0C:E9:91:CF:90:D8:69:7F:E9:2E:15:91:D6:91:B7 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:0c:c3:c9:4e:b6:13:7b:47:a7:a1:11:54:2c:84:90:fe: 2d:ac:94:33:3f:d2:cb:d2:8f:12:64:e5:93:2e:28:c1:f7:be: a1:42:78:96:c4:94:9d:c9:63:5d:d3:f9:f9:5a:65:00:02:95: 77:aa:71:83:f3:ff:a3:0c:bd:94:9e:c5:f4:1b:5e:f3:59:4b: f7:79:80:ed:fa:bb:0c:cc:50:d4:90:f1:02:e7:3f:3b:02:56: b3:b4:b0:18:8f:1f:6b:54:b0:af:79:05:c3:41:5a:ac:4e:a1: 15:fa:e4:3f:9f:42:a3:c0:b4:c8:1b:37:7d:f9:7e:e8:cf:a9: de:16:47:ca:bd:11:fb:a0:88:90:c8:8b:5c:0b:8b:c2:19:b9: 84:89:c7:79:29:d6:c4:b1:45:66:fb:5a:04:d3:98:23:61:26: 5b:cc:77:37:69:1a:0e:9a:af:3d:58:71:12:69:15:88:64:6a: 7b:a8:fe:d9:28:80:cb:46:ca:b6:dd:45:ba:70:4f:2f:2b:b9: 70:8c:df:08:6d:78:6d:58:8a:38:55:15:c8:79:b7:a5:4c:90: 92:94:20:47:59:6a:44:9e:35:e6:55:c3:0f:8c:c6:09:42:ce: 69:f5:33:83:6a:2b:5c:d4:85:03:47:9a:54:c5:a4:dd:4d:d4: 00:43:1e:3e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNjA1MjEwODEwNDRaFw0yNjA1MjgwODEwNDRaMBgxFjAUBgNV BAMTDTZhMGViZTA0LWNhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa4VsCSn13y3Xn+E5T78L8f82oGxJBBXFwlida/OeZKvf3za+5M/0cZZEk5O9p fAx9qTvjaJJA0XhCKpdMExe+Xt/PI0Oav4p8Rb8vUWc4Pnpzb4ANyUUv9F/9JGe7 p+/baCM476rZSB+WOdLD6YiMbzCPSg0nI96BgKwHij93PolFT2oPJt/yYA/yxWxt djVp4iwYJs+sp6/93w1fxVgYu80nxjgFWD7Dx7ec+uvsqLN7SMSI0m2kqcIbYATS uH5tKSq5eL9eyZG105NQmYEf4hbhOPO4TuKui8YUh/weDJBpHFnD55KQpf0o07BV Us0g97Z23d8wlr8nnAV9X27zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUucmVtgMM 6ZHPkNhpf+kuFZHWkbcwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAIXgzDyU62E3tHp6ERVCyEkP4trJQzP9LL0o8SZOWTLijB976hQniWxJSdyWNd 0/n5WmUAApV3qnGD8/+jDL2UnsX0G17zWUv3eYDt+rsMzFDUkPEC5z87AlaztLAY jx9rVLCveQXDQVqsTqEV+uQ/n0KjwLTIGzd9+X7oz6neFkfKvRH7oIiQyItcC4vC GbmEicd5KdbEsUVm+1oE05gjYSZbzHc3aRoOmq89WHESaRWIZGp7qP7ZKIDLRsq2 3UW6cE8vK7lwjN8IbXhtWIo4VRXIebelTJCSlCBHWWpEnjXmVcMPjMYJQs5p9TOD aitc1IUDR5pUxaTdTdQAQx4+ -----END CERTIFICATE-----Generated at Thu May 21 10:16:08 2026 by rpki-client