$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft File: tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json) Hash identifier: TKDYMjZiCdkRjaA31ki4BEcQp+k6O9UsLIIG9wJ4O0M= Subject key identifier: B9:21:38:65:67:D1:AA:38:D8:AB:CD:6F:FA:22:17:B1:12:8F:90:C8 Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft Manifest number: 0F Signing time: Sun 31 May 2026 23:02:06 +0000 Manifest this update: Sun 31 May 2026 23:02:05 +0000 Manifest next update: Sun 07 Jun 2026 23:02:05 +0000 Files and hashes: 1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: GigzOTjdJhDHgYm7zAaYt4jAO45B0836A5T81IJhJLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 23:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: May 31 23:02:05 2026 GMT Not After : Jun 7 23:02:05 2026 GMT Subject: CN=6a1cbded-e732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:82:66:7e:e5:53:72:55:3e:26:fd:93:db: 1b:ae:b6:c6:a9:5b:44:02:fd:fa:6e:2f:14:05:39: 88:3b:85:98:1b:37:5f:b6:68:55:05:94:e6:e7:ce: e2:0f:f5:21:9f:97:b5:05:f5:d2:db:3d:ef:66:ec: 27:b8:da:62:55:c0:59:4b:3c:fa:fa:cb:0d:f5:99: 4c:1f:9b:41:51:b7:42:f1:82:12:e6:43:2a:b5:a5: 77:eb:20:4b:49:57:9c:02:b2:8a:1a:c8:4c:25:4f: 18:a2:8c:94:75:b1:24:27:91:6f:c3:e5:a3:ff:c4: fd:74:2f:59:75:3a:9f:6e:4b:9e:25:bc:5f:ad:f4: 08:75:4f:eb:e9:c5:e3:e7:d9:7a:86:11:77:a7:4a: 5b:29:85:56:6b:60:13:d8:36:0c:f6:b3:48:b1:a6: 15:1d:5d:20:f9:53:73:34:e4:8a:4a:35:fa:b2:55: 7a:26:64:7c:4e:98:87:e1:f8:17:ec:8a:85:b7:9c: 20:51:9e:c5:7c:3f:e5:38:a4:13:74:52:c1:e8:f8: cc:32:ec:a7:f0:51:76:85:2c:79:9d:27:20:c1:69: 58:65:70:72:a1:40:64:9e:d5:51:10:a1:63:54:81: e0:c1:a8:ef:74:07:b9:f0:f5:8a:2f:ba:5d:b9:10: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:38:65:67:D1:AA:38:D8:AB:CD:6F:FA:22:17:B1:12:8F:90:C8 X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2a:09:60:e8:14:46:48:6f:ad:1d:58:e1:21:3e:32:88:61: 63:83:c6:ac:4d:1f:77:87:d9:b9:ea:cf:5d:2b:c5:6f:db:bd: a4:0a:bc:40:22:fa:42:5c:41:ff:30:de:d5:12:57:68:13:01: 2c:fa:71:f8:ea:46:8f:99:c8:e6:31:ac:29:07:9e:62:6d:58: 99:49:6b:b5:13:c6:b6:1d:7b:61:7e:20:b4:1a:a1:39:59:ba: 01:e3:74:60:88:e4:8f:9c:ed:fa:f8:fe:2a:27:12:9b:d7:3d: ba:fc:41:33:e2:fd:b8:fe:dc:df:a6:4b:aa:7e:b1:fc:d9:76: 95:9e:e9:6d:9a:05:41:cc:8a:5c:59:82:25:75:4c:c7:bc:e7: f6:92:2d:74:14:93:44:89:b3:a9:71:f2:38:b6:4d:0c:fe:1e: c1:2f:8b:96:ad:2b:f1:96:ca:eb:a6:73:b3:44:aa:1a:0f:dc: a8:ef:df:83:43:9f:98:53:93:6a:41:ab:35:7f:8b:1b:51:8c: 53:fb:0f:77:1e:c4:98:3c:b3:04:1a:0b:f6:ef:e9:80:aa:72: 61:98:8c:bc:5c:ff:84:16:c2:2c:01:f8:d2:bc:61:c7:4e:f4: 3b:d9:3d:6f:97:a4:73:26:2f:c6:50:c5:1e:81:ab:f7:30:e5: 29:4c:65:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjA1MzEyMzAyMDVaFw0yNjA2MDcyMzAyMDVaMBgxFjAUBgNV BAMTDTZhMWNiZGVkLWU3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgRYJmfuVTclU+Jv2T2xuutsapW0QC/fpuLxQFOYg7hZgbN1+2aFUFlObnzuIP 9SGfl7UF9dLbPe9m7Ce42mJVwFlLPPr6yw31mUwfm0FRt0LxghLmQyq1pXfrIEtJ V5wCsooayEwlTxiijJR1sSQnkW/D5aP/xP10L1l1Op9uS54lvF+t9Ah1T+vpxePn 2XqGEXenSlsphVZrYBPYNgz2s0ixphUdXSD5U3M05IpKNfqyVXomZHxOmIfh+Bfs ioW3nCBRnsV8P+U4pBN0UsHo+Mwy7KfwUXaFLHmdJyDBaVhlcHKhQGSe1VEQoWNU geDBqO90B7nw9Yovul25EC4TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuSE4ZWfR qjjYq81v+iIXsRKPkMgwHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QTQwLzRFRUVBMUE2NDkwQzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBH ZGVsbllFYXhlYWllZ0R4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdKglg6BRGSG+tHVjhIT4yiGFjg8asTR93h9m56s9dK8Vv272kCrxAIvpCXEH/ MN7VEldoEwEs+nH46kaPmcjmMawpB55ibViZSWu1E8a2HXthfiC0GqE5WboB43Rg iOSPnO36+P4qJxKb1z26/EEz4v24/tzfpkuqfrH82XaVnultmgVBzIpcWYIldUzH vOf2ki10FJNEibOpcfI4tk0M/h7BL4uWrSvxlsrrpnOzRKoaD9yo79+DQ5+YU5Nq Qas1f4sbUYxT+w93HsSYPLMEGgv27+mAqnJhmIy8XP+EFsIsAfjSvGHHTvQ72T1v l6RzJi/GUMUegav3MOUpTGV4 -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:40 2026 by rpki-client