$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: OT9y/lZcupe7fjqWalM3M9/wh/expKL3QRIa1useENw= Subject key identifier: 95:69:3E:AC:9B:50:5C:93:FA:9B:4D:82:87:DD:B6:B3:3E:3F:C0:C8 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 0376 Signing time: Thu 21 May 2026 00:55:31 +0000 Manifest this update: Thu 21 May 2026 00:55:31 +0000 Manifest next update: Thu 28 May 2026 00:55:31 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: 0WuvwTta2lVXI7TlTstPJNBKsiOVjZ0rV72bvlb6ieY=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: nkQmNKNtDWtkko/kc3lrW6+9g0X+EY77aB0EFy2ZQ0I=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: VSmy2GGy/MUnJpKHQqfyFcFHs7o9CbczIhcZ8oDgTIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: May 21 00:55:31 2026 GMT Not After : May 28 00:55:31 2026 GMT Subject: CN=6a0e5803-3a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:ee:26:1c:1a:00:39:b7:1d:03:31:0b:24: 58:8b:c6:9e:18:31:b4:fe:f7:4b:fa:46:25:00:b1: 6a:7d:15:9b:dc:dc:4c:d0:0a:b5:16:8e:e2:89:2c: 3e:93:aa:30:6a:8b:d5:25:31:1c:5f:72:c2:03:be: 44:ab:31:9a:62:36:f0:70:38:60:23:88:80:d7:f1: ca:5a:9c:76:aa:24:58:1f:ac:9d:54:50:94:cd:fb: 5f:26:47:09:38:d8:d6:14:cf:03:bb:7e:60:f3:a3: 0c:83:e6:7a:ed:e3:e1:12:9f:28:1f:e9:8c:77:21: 6d:9a:54:c6:cd:d8:c8:6b:92:1b:2a:ed:5c:b3:a0: df:e9:77:79:cc:dd:ac:09:54:3a:2a:fd:49:ff:b7: ce:64:9d:b4:7f:ab:83:88:62:d3:32:3c:d9:c3:94: d6:fc:1b:fc:60:4b:95:49:35:7b:33:14:1b:eb:63: 31:70:17:26:74:98:fd:78:2c:d4:af:b6:d0:84:02: 29:18:88:38:b7:06:54:7c:02:1d:c7:3b:7c:bb:bd: 2d:c1:c3:f3:63:36:2d:28:75:46:48:e3:01:c7:fc: f7:13:d0:de:fe:92:db:0a:d6:b9:94:14:f6:a5:3f: 9f:f3:cd:19:28:af:c4:7a:2a:bb:8f:b5:4d:40:2f: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:69:3E:AC:9B:50:5C:93:FA:9B:4D:82:87:DD:B6:B3:3E:3F:C0:C8 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c6:71:6d:9e:4a:3f:2b:c1:ff:dc:b7:2b:73:00:a6:af:e9: 27:33:43:9b:53:65:fc:6f:a6:57:28:b9:d0:4c:02:70:4c:38: 93:af:0e:5c:4c:4f:b2:83:77:fd:cc:fe:f7:53:18:91:9f:51: 09:6d:a4:af:53:63:a9:db:2a:4c:ac:c9:97:a8:0b:8d:16:c0: 98:1c:96:57:7f:1f:78:29:5d:c3:3a:08:98:72:54:c2:78:98: 60:37:32:9d:33:e6:e8:d9:2e:97:d3:13:bd:36:e2:4d:bb:6b: 3d:7f:65:ad:45:bf:ab:a9:ae:b8:d3:d1:eb:9c:8f:29:51:c6: 27:69:f9:25:6c:c6:e3:c0:1a:87:86:fa:19:85:be:7b:9d:bd: 52:4a:31:40:e0:2b:67:32:af:dd:bc:d6:b7:e1:e1:93:50:2a: aa:45:fd:22:c1:6f:be:50:db:50:bd:44:f8:b5:2a:94:c8:5f: 7a:36:a3:7e:4f:3b:94:6d:ee:97:94:46:94:01:b3:ea:32:fc: 51:c6:c8:86:60:ce:63:40:26:12:b8:c4:78:5a:a6:9e:44:4d: f3:24:b1:f3:f7:cc:91:2b:0e:c3:c8:0e:86:0d:48:32:13:e4: 3e:00:64:c0:c6:ec:bd:8e:b4:04:e8:2c:7e:80:cd:df:38:99: 88:07:9d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjYwNTIxMDA1NTMxWhcNMjYwNTI4MDA1NTMxWjAYMRYwFAYD VQQDEw02YTBlNTgwMy0zYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq17uJhwaADm3HQMxCyRYi8aeGDG0/vdL+kYlALFqfRWb3NxM0Aq1Fo7iiSw+ k6owaovVJTEcX3LCA75EqzGaYjbwcDhgI4iA1/HKWpx2qiRYH6ydVFCUzftfJkcJ ONjWFM8Du35g86MMg+Z67ePhEp8oH+mMdyFtmlTGzdjIa5IbKu1cs6Df6Xd5zN2s CVQ6Kv1J/7fOZJ20f6uDiGLTMjzZw5TW/Bv8YEuVSTV7MxQb62MxcBcmdJj9eCzU r7bQhAIpGIg4twZUfAIdxzt8u70twcPzYzYtKHVGSOMBx/z3E9De/pLbCta5lBT2 pT+f880ZKK/Eeiq7j7VNQC8WkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVpPqyb UFyT+ptNgofdtrM+P8DIMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMZxbZ5KPyvB/9y3K3MApq/pJzNDm1Nl/G+mVyi50EwCcEw4k68OXExPsoN3 /cz+91MYkZ9RCW2kr1NjqdsqTKzJl6gLjRbAmByWV38feCldwzoImHJUwniYYDcy nTPm6Nkul9MTvTbiTbtrPX9lrUW/q6muuNPR65yPKVHGJ2n5JWzG48Aah4b6GYW+ e529UkoxQOArZzKv3bzWt+Hhk1AqqkX9IsFvvlDbUL1E+LUqlMhfejajfk87lG3u l5RGlAGz6jL8UcbIhmDOY0AmErjEeFqmnkRN8ySx8/fMkSsOw8gOhg1IMhPkPgBk wMbsvY60BOgsfoDN3ziZiAedUg== -----END CERTIFICATE-----Generated at Fri May 22 15:11:17 2026 by rpki-client