$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: 2hbzYG7rgpAkz451dxhk21JD1PBNn6gL3NDhHqkNxN0= Subject key identifier: 46:19:BF:A7:2D:D2:09:63:03:09:7B:BD:EB:D1:9B:EC:7A:11:E0:BE Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: BA Signing time: Thu 21 May 2026 07:07:04 +0000 Manifest this update: Thu 21 May 2026 07:07:03 +0000 Manifest next update: Thu 28 May 2026 07:07:03 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: KgmGdVEBO3ptwlBOQbi3NxvTWfiu94PHCiJePZqKNow=) 2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: May 21 07:07:03 2026 GMT Not After : May 28 07:07:03 2026 GMT Subject: CN=6a0eaf18-778b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:43:8a:e7:80:97:93:a1:99:f6:1c:c8:21: 21:08:2d:2a:16:e0:90:c7:5e:5a:90:e4:c5:e3:cd: 39:1b:e4:e6:a9:50:dd:6f:bc:81:b0:b7:fb:a2:fc: 6b:1a:3f:56:7e:db:54:10:de:67:97:15:56:1e:e9: 0d:64:32:4b:f6:80:55:53:c6:98:92:7e:e6:57:61: 77:ac:ac:c7:07:cf:d3:cb:61:71:ac:d5:fd:d5:a5: b7:55:4b:f6:8f:ca:75:ed:48:a5:4a:ea:0a:9e:a7: f0:42:7d:38:a1:03:c4:f6:1f:65:a6:b1:20:91:7f: b6:75:c6:c5:1e:fd:20:3e:6f:10:d0:be:a2:4e:71: fc:37:1b:20:d6:47:53:dc:67:8b:45:66:11:0b:72: 56:17:03:88:08:e1:09:fe:b6:71:e1:60:80:d0:5a: 39:0f:33:6f:35:d4:c3:30:f4:91:97:7c:3b:6b:ba: 23:30:f5:19:b1:0b:bc:0b:df:af:83:cd:2c:86:d2: 5a:83:9a:56:db:e4:2d:de:bf:83:97:c7:d8:36:d3: dd:1e:ff:69:6c:ad:3a:77:93:65:4e:2c:3e:1f:c2: 51:ac:79:74:88:db:86:77:0b:41:ec:0a:e2:73:42: 3c:bf:6e:32:a3:80:20:c4:3e:8f:6e:60:14:02:3d: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:BF:A7:2D:D2:09:63:03:09:7B:BD:EB:D1:9B:EC:7A:11:E0:BE X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f4:f2:25:50:6e:c5:98:f9:96:2d:5e:c8:68:bf:1f:06:f3: 37:38:aa:37:27:0d:0c:9f:4c:5a:dd:00:50:9f:28:8c:d4:ef: 01:e5:49:35:bc:8b:bb:bb:da:9f:9a:e2:e1:bb:b8:1e:ae:a1: 78:c7:1c:f7:92:72:ab:c3:11:3c:ad:a8:9b:11:7e:9a:91:b1: a9:fe:6a:0b:03:10:a2:1c:20:a3:73:a6:cc:3e:f6:15:62:51: 8d:ff:b9:48:43:20:fd:f7:58:51:26:18:e7:62:0e:41:e6:12: e1:04:f6:c7:2b:3f:1c:2a:ef:e0:05:88:ec:d8:e1:c7:b7:51: ad:d8:cb:bc:48:d4:7e:9c:ed:bb:0f:71:5e:c8:e4:3b:23:bd: 38:9e:fa:f6:69:1c:bf:75:c6:1f:5d:6b:ae:5b:9d:e3:24:23: 7d:f2:c4:9c:74:08:d3:47:82:76:24:f1:71:7d:96:1b:1a:d6: dc:c3:44:9a:0e:72:e6:da:7e:3b:e3:a6:05:22:63:ed:d4:0f: 32:a2:50:1f:47:41:50:8f:9b:80:1a:56:e9:85:cb:42:cc:c7: 93:c3:9e:25:84:3c:2d:83:98:24:78:f6:7d:a0:4f:f9:25:ed: 2c:59:88:f8:22:f2:01:d4:96:6c:ed:81:e2:5c:2a:30:57:35: b7:97:5d:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEUwN0U1NzY4OUMyN0E5OTM2MTFDQkFCQTk3QjE5NEQz MTc5NkNGNkYwHhcNMjYwNTIxMDcwNzAzWhcNMjYwNTI4MDcwNzAzWjAYMRYwFAYD VQQDEw02YTBlYWYxOC03NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75JDiueAl5OhmfYcyCEhCC0qFuCQx15akOTF4805G+TmqVDdb7yBsLf7ovxr Gj9WfttUEN5nlxVWHukNZDJL9oBVU8aYkn7mV2F3rKzHB8/Ty2FxrNX91aW3VUv2 j8p17UilSuoKnqfwQn04oQPE9h9lprEgkX+2dcbFHv0gPm8Q0L6iTnH8Nxsg1kdT 3GeLRWYRC3JWFwOICOEJ/rZx4WCA0Fo5DzNvNdTDMPSRl3w7a7ojMPUZsQu8C9+v g80shtJag5pW2+Qt3r+Dl8fYNtPdHv9pbK06d5NlTiw+H8JRrHl0iNuGdwtB7Ari c0I8v24yo4AgxD6PbmAUAj1bmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYZv6ct 0gljAwl7vevRm+x6EeC+MB8GA1UdIwQYMBaAFOB+V2icJ6mTYRy6upexlNMXls9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9FMTRGNzIyNDND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFaTmhITHE2bDdHVTB4ZVd6 MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9FMTRGNzIyNDNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFa TmhITHE2bDdHVTB4ZVd6MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACfTyJVBuxZj5li1eyGi/HwbzNziqNycNDJ9MWt0AUJ8ojNTvAeVJNbyLu7va n5ri4bu4Hq6heMcc95Jyq8MRPK2omxF+mpGxqf5qCwMQohwgo3OmzD72FWJRjf+5 SEMg/fdYUSYY52IOQeYS4QT2xys/HCrv4AWI7Njhx7dRrdjLvEjUfpztuw9xXsjk OyO9OJ769mkcv3XGH11rrlud4yQjffLEnHQI00eCdiTxcX2WGxrW3MNEmg5y5tp+ O+OmBSJj7dQPMqJQH0dBUI+bgBpW6YXLQszHk8OeJYQ8LYOYJHj2faBP+SXtLFmI +CLyAdSWbO2B4lwqMFc1t5ddqQ== -----END CERTIFICATE-----Generated at Thu May 21 11:59:06 2026 by rpki-client