$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft File: huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft (raw, json) Hash identifier: iTI44WW8flK7ZqKRa0ZROJwISPwc3D9wM0HLbrI3j3I= Subject key identifier: F1:D3:2A:51:8D:E6:0D:37:96:0E:2D:4C:A8:F3:3B:AB:C1:39:05:2F Authority key identifier: 86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5 Certificate issuer: /CN=A91C6A87/serialNumber=86E425237BD23CE43D1198351812609BF40555F5 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft Manifest number: 23 Signing time: Thu 21 May 2026 08:58:55 +0000 Manifest this update: Thu 21 May 2026 08:58:54 +0000 Manifest next update: Thu 28 May 2026 08:58:54 +0000 Files and hashes: 1: huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl (hash: uSarkNJ9BwN4MqgDsqr9zJwHWoQLlgGWiyhAJGBRBLk=) 2: 55D930E024C611F1B0EE1E69A6833773.roa (hash: Hw7ENTeCIJUN2Q7kCZRq1jtY4Qdg596dbpso11pOaj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A87, serialNumber=86E425237BD23CE43D1198351812609BF40555F5 Validity Not Before: May 21 08:58:54 2026 GMT Not After : May 28 08:58:54 2026 GMT Subject: CN=6a0ec94f-d875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:6f:6e:a9:b8:70:a4:0f:44:0e:45:6d:b7: dc:2e:02:28:c6:43:bc:a0:3c:ce:29:14:94:dd:d6: 1f:9a:e8:9d:ca:a6:4b:7b:72:c4:a9:bd:1c:e0:c9: fc:8b:1b:82:0b:d1:31:b5:04:db:ae:f9:a5:86:21: 1e:1b:81:ff:32:27:f1:d9:21:a2:85:17:7d:65:bd: ec:c1:dd:e9:40:29:52:99:98:e0:11:b7:11:29:4a: e2:45:88:67:25:90:e6:ac:55:47:33:6b:62:2a:01: b5:4a:ad:c5:93:fc:ce:f7:c4:2a:44:e9:97:e1:08: c8:08:6c:34:ce:41:ed:ac:3b:21:9c:46:14:36:57: b4:b9:c4:b2:78:11:3d:df:f2:6a:45:0a:60:c4:df: 46:7f:c1:c9:9f:62:18:51:a3:5f:91:36:7b:9a:78: 2f:6a:d5:ff:95:b3:d7:4a:9d:68:58:16:ce:d1:df: 8b:3a:fa:57:93:9c:b2:ea:d4:7b:52:e8:01:03:b6: e9:36:8b:6d:c9:bf:4c:7f:a2:77:2c:1d:a5:4b:f7: 52:c9:4a:bc:52:e1:d0:65:f5:bc:d7:43:08:fc:62: 2c:61:c1:81:4d:5c:5a:09:75:d0:5d:ff:37:ee:67: 79:33:66:a2:37:ad:70:d5:11:fe:ff:7e:0f:51:81: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D3:2A:51:8D:E6:0D:37:96:0E:2D:4C:A8:F3:3B:AB:C1:39:05:2F X509v3 Authority Key Identifier: keyid:86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e4:95:a1:3f:01:2e:88:b3:ae:7b:0b:d1:a0:af:c3:9d:b0: eb:0b:40:52:78:42:07:fe:56:cc:30:0a:bb:de:77:17:55:af: c7:d5:0e:00:39:1e:ab:4d:43:5c:5a:30:53:52:1e:0d:45:b2: a2:26:77:d3:0c:49:f5:68:df:cc:88:6c:c4:df:5e:e0:3e:f1: 81:0a:4e:21:6d:18:b0:75:8d:ea:88:b2:18:71:24:16:1d:71: 8b:c1:50:c2:82:9e:60:e3:c3:f9:31:08:df:43:38:28:03:4c: 53:43:3c:0f:71:5d:55:98:8a:c4:13:35:39:09:43:7e:67:0a: 99:db:bf:14:77:2a:d0:c8:92:89:5f:b5:85:9f:5d:1a:c5:19: fb:40:75:31:93:d8:02:5f:3a:52:bc:2a:d7:dc:d5:ac:95:d8: 06:b7:67:6f:bb:d6:fd:a5:58:7c:e9:65:d8:5c:e7:bf:e8:6e: 51:ea:bc:8e:0b:33:e9:41:fc:ac:33:da:cc:64:a4:29:57:09: bf:9e:14:61:5c:30:16:00:12:17:60:b0:7c:e9:4f:c5:9d:4c: 33:1a:a6:dd:a9:a1:36:63:f3:70:21:1f:1c:bb:cd:4b:61:6f: c3:f5:0e:f0:0d:71:00:e2:47:70:22:b3:38:b6:9d:5f:d5:a8: 93:83:45:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkE4NzExMC8GA1UEBRMoODZFNDI1MjM3QkQyM0NFNDNEMTE5ODM1MTgxMjYwOUJG NDA1NTVGNTAeFw0yNjA1MjEwODU4NTRaFw0yNjA1MjgwODU4NTRaMBgxFjAUBgNV BAMTDTZhMGVjOTRmLWQ4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsXG9uqbhwpA9EDkVtt9wuAijGQ7ygPM4pFJTd1h+a6J3Kpkt7csSpvRzgyfyL G4IL0TG1BNuu+aWGIR4bgf8yJ/HZIaKFF31lvezB3elAKVKZmOARtxEpSuJFiGcl kOasVUcza2IqAbVKrcWT/M73xCpE6ZfhCMgIbDTOQe2sOyGcRhQ2V7S5xLJ4ET3f 8mpFCmDE30Z/wcmfYhhRo1+RNnuaeC9q1f+Vs9dKnWhYFs7R34s6+leTnLLq1HtS 6AEDtuk2i23Jv0x/oncsHaVL91LJSrxS4dBl9bzXQwj8YixhwYFNXFoJddBd/zfu Z3kzZqI3rXDVEf7/fg9Rgd1fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8dMqUY3m DTeWDi1MqPM7q8E5BS8wHwYDVR0jBBgwFoAUhuQlI3vSPOQ9EZg1GBJgm/QFVfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0RBMjQzNTRFMjRD NTExRjE5QTQyMEVFQkE1ODMzNzczL2h1UWxJM3ZTUE9ROUVaZzFHQkpnbV9RRlZm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvaHVRbEkzdlNQT1E5RVpnMUdCSmdtX1FGVmZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTg3L0RBMjQzNTRFMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2h1UWxJM3ZTUE9R OUVaZzFHQkpnbV9RRlZmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCn5JWhPwEuiLOuewvRoK/DnbDrC0BSeEIH/lbMMAq73ncXVa/H1Q4AOR6rTUNc WjBTUh4NRbKiJnfTDEn1aN/MiGzE317gPvGBCk4hbRiwdY3qiLIYcSQWHXGLwVDC gp5g48P5MQjfQzgoA0xTQzwPcV1VmIrEEzU5CUN+ZwqZ278UdyrQyJKJX7WFn10a xRn7QHUxk9gCXzpSvCrX3NWsldgGt2dvu9b9pVh86WXYXOe/6G5R6ryOCzPpQfys M9rMZKQpVwm/nhRhXDAWABIXYLB86U/FnUwzGqbdqaE2Y/NwIR8cu81LYW/D9Q7w DXEA4kdwIrM4tp1f1aiTg0Xf -----END CERTIFICATE-----Generated at Thu May 21 12:22:12 2026 by rpki-client