$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: 7yVPFbwRyHeDs1/oGTMi5OKsTaU6NCFX3bunSk/BGwI= Subject key identifier: EF:FD:C7:21:3C:62:E7:19:A3:D2:77:C6:57:86:99:FE:9E:84:D6:A0 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 124C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1234 Signing time: Wed 20 May 2026 17:08:21 +0000 Manifest this update: Wed 20 May 2026 17:08:20 +0000 Manifest next update: Wed 27 May 2026 17:08:20 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: DOtk9r+P/ZlqHuRoWYejLR1LKvWgEna7bOthC8M22aI=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4684 (0x124c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: May 20 17:08:20 2026 GMT Not After : May 27 17:08:20 2026 GMT Subject: CN=6a0dea85-04a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:a5:a5:9d:4c:a9:79:b8:52:6f:11:4e:6e: 74:78:c4:c3:c5:83:73:8a:5b:44:d6:2d:0f:7e:74: 83:e1:a8:29:5f:41:43:b5:da:c6:d9:cb:9c:3c:62: c9:57:f6:d0:e4:02:3b:dc:3e:4d:de:9a:ec:28:40: f2:a8:2e:00:1b:de:a8:cb:05:01:dd:62:35:28:44: 77:3d:af:7a:3c:74:34:1a:a4:98:74:af:3b:ac:56: 14:08:10:0b:ba:79:4b:08:fc:99:0a:f3:18:c1:04: a6:7d:14:86:a1:7c:c1:f6:ad:3a:e5:40:da:3b:e1: d0:d0:3e:f6:14:1b:76:fb:07:6e:61:99:5e:c5:cf: ff:ba:31:63:96:91:44:63:c8:41:08:cb:c2:94:f6: fb:f9:9f:c5:47:2d:84:b3:62:32:e4:df:6a:ba:0b: d4:66:5f:cf:77:5b:6f:be:aa:ee:60:4d:7d:46:cf: af:a5:6b:50:be:b6:65:06:85:d0:84:ff:55:30:9c: 8c:56:f5:d2:be:01:b6:91:5e:f3:a8:75:63:d0:8b: e5:55:bf:df:38:3e:09:15:d7:b5:6e:c7:5e:c8:a8: fc:a0:f5:46:bd:a6:54:18:3f:8c:3e:cc:af:df:f1: fe:4c:70:fb:70:da:c9:f0:fa:17:e2:b3:f0:55:9f: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:C7:21:3C:62:E7:19:A3:D2:77:C6:57:86:99:FE:9E:84:D6:A0 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:39:d6:5c:d7:86:44:cd:a5:1d:ec:4f:12:ed:49:d0:36: 74:e5:45:2e:4c:ac:9a:e0:24:b2:72:be:74:dd:23:a7:62:4e: 3d:fe:72:8c:91:86:f6:0d:e2:b0:c8:c9:42:10:b0:77:27:a6: 95:62:4f:13:b1:08:1b:1a:b8:d3:d0:e9:83:ed:09:00:eb:eb: 85:03:2d:a0:b0:b1:15:cd:c7:33:4d:41:5a:07:79:ba:0c:78: dd:a4:40:1c:a1:62:f6:11:67:6a:32:19:db:2e:34:73:36:88: 9c:0f:3c:0f:a3:7b:11:94:5a:f1:a0:7f:44:61:37:76:eb:0e: 63:00:36:d0:3e:83:7f:14:52:91:19:55:e0:18:c6:5c:01:11: 88:3d:0c:fa:37:8b:8b:9d:02:2d:d4:91:df:de:8f:fe:4a:df: ed:6d:24:fc:d8:65:58:40:bb:e8:26:c3:1a:32:67:6d:88:61: 61:2f:4a:d9:07:a5:66:44:fe:c4:6e:7a:43:21:92:e5:6d:60: d7:a6:9b:77:7a:c2:70:bd:d6:4c:ed:11:39:98:3e:ec:ed:5a: ab:29:d4:ba:a2:18:81:b8:49:03:6c:a8:9e:cf:24:eb:f9:71: 3f:49:54:f1:ca:b2:5d:59:94:4c:45:ea:6a:bf:0c:df:8a:b9: bf:e6:3b:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjYwNTIwMTcwODIwWhcNMjYwNTI3MTcwODIwWjAYMRYwFAYD VQQDEw02YTBkZWE4NS0wNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NqlpZ1MqXm4Um8RTm50eMTDxYNziltE1i0PfnSD4agpX0FDtdrG2cucPGLJ V/bQ5AI73D5N3prsKEDyqC4AG96oywUB3WI1KER3Pa96PHQ0GqSYdK87rFYUCBAL unlLCPyZCvMYwQSmfRSGoXzB9q065UDaO+HQ0D72FBt2+wduYZlexc//ujFjlpFE Y8hBCMvClPb7+Z/FRy2Es2Iy5N9qugvUZl/Pd1tvvqruYE19Rs+vpWtQvrZlBoXQ hP9VMJyMVvXSvgG2kV7zqHVj0IvlVb/fOD4JFde1bsdeyKj8oPVGvaZUGD+MPsyv 3/H+THD7cNrJ8PoX4rPwVZ/TQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/9xyE8 YucZo9J3xleGmf6ehNagMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOI51lzXhkTNpR3sTxLtSdA2dOVFLkysmuAksnK+dN0jp2JOPf5yjJGG9g3i sMjJQhCwdyemlWJPE7EIGxq409Dpg+0JAOvrhQMtoLCxFc3HM01BWgd5ugx43aRA HKFi9hFnajIZ2y40czaInA88D6N7EZRa8aB/RGE3dusOYwA20D6DfxRSkRlV4BjG XAERiD0M+jeLi50CLdSR396P/krf7W0k/NhlWEC76CbDGjJnbYhhYS9K2QelZkT+ xG56QyGS5W1g16abd3rCcL3WTO0ROZg+7O1aqynUuqIYgbhJA2yons8k6/lxP0lU 8cqyXVmUTEXqar8M34q5v+Y7ew== -----END CERTIFICATE-----Generated at Thu May 21 10:54:09 2026 by rpki-client