$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: 2u8YhLTnD9VGphnbcdmftOq/P4PRW8NpCwOzz4Byjqg= Subject key identifier: CD:DA:C0:D2:C5:75:C7:DE:9E:FD:5B:2E:2A:55:B1:83:07:1E:6E:6A Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 025D Signing time: Thu 21 May 2026 02:18:15 +0000 Manifest this update: Thu 21 May 2026 02:18:15 +0000 Manifest next update: Thu 28 May 2026 02:18:15 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: avNVUnc3oSWN7PqDFby/sEXJl5Rg4NKpuNGIBtxcg/Y=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: Y24abX/8QA8DifcLB/85duUm8cvIDWQiy6dojc92dC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: May 21 02:18:15 2026 GMT Not After : May 28 02:18:15 2026 GMT Subject: CN=6a0e6b67-7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:70:a0:9d:c6:22:ff:a6:8a:83:f4:57:de: 50:9e:25:ee:bd:36:91:dd:25:c5:47:7d:16:cd:9d: 5d:4f:33:c5:f2:35:62:d4:33:b5:7d:5d:05:b8:5f: c6:cf:01:55:ad:ea:ff:d3:84:33:18:b0:d0:56:a7: 73:15:55:63:90:d2:23:c6:ab:bd:7c:74:ac:91:0d: e6:11:98:fa:89:90:4a:23:ed:26:08:3b:f6:f2:8e: 65:9e:8f:39:65:6c:36:99:3e:e2:bf:5a:4d:55:4f: d7:2c:23:89:f8:a0:9a:43:c3:10:ae:db:eb:18:06: da:c9:61:a1:a4:f5:c6:56:90:43:9f:dc:0b:75:ef: 00:cc:0c:9e:08:0a:07:10:eb:1d:df:0a:87:ce:3d: d9:f7:fc:6a:a0:8c:d5:6b:bf:87:9a:3e:89:33:b1: 84:da:4a:8e:18:3b:1a:5a:f7:80:98:3c:56:7d:9b: 7c:a9:c3:53:c8:22:80:9d:0c:f1:07:5e:e3:2e:d6: db:76:78:4f:5e:57:9e:fc:89:6e:3f:22:32:50:d7: e1:8c:60:5a:30:4a:f7:23:1a:a5:29:3c:4e:cf:95: 2d:1b:4b:7a:f6:8a:6d:c2:18:8a:73:97:e5:e6:8a: 49:74:31:90:4e:86:b4:dc:85:5e:19:c7:5d:24:a0: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:C0:D2:C5:75:C7:DE:9E:FD:5B:2E:2A:55:B1:83:07:1E:6E:6A X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:f6:29:e4:ff:37:30:4f:ac:39:80:15:88:1d:af:79:ea: 24:0a:34:91:0c:73:8e:0a:8d:d1:78:42:70:ca:c3:03:d4:08: 0f:ee:bd:ce:d9:46:1f:6a:96:64:f0:7f:75:c6:ab:c9:77:52: fb:0e:20:75:bc:0e:06:58:cd:e8:01:d5:c8:b5:c3:52:be:85: 21:67:48:30:60:9a:c9:1c:df:82:42:76:f1:56:c2:a9:c1:02: 69:77:9c:71:7f:5a:5d:ec:30:99:aa:f7:0e:38:03:23:ba:ae: 92:25:1a:ff:6f:fd:e7:ba:b0:ca:d8:65:37:71:98:9b:d8:4c: 58:d0:95:9b:33:16:c6:7a:18:9e:53:4d:ab:ec:85:62:37:fd: e9:ed:ca:73:a2:38:8b:32:05:f2:fb:c1:5e:1b:cc:4a:6d:00: a3:18:a2:84:89:2e:25:c3:a2:9c:83:70:e9:a8:f1:53:63:13: dd:0c:ea:62:d4:63:b8:fc:02:05:15:b1:3f:3d:ee:8f:c4:c7: 8a:a1:32:3b:13:a0:71:33:55:28:a0:d9:26:6b:bd:d6:dc:23: 0b:75:14:fe:b3:31:90:45:22:81:76:0a:60:4b:1d:9c:e7:eb: 49:1e:2c:5d:09:dd:93:0a:a1:66:c0:b7:ef:e3:8f:da:55:05: 80:55:2e:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjYwNTIxMDIxODE1WhcNMjYwNTI4MDIxODE1WjAYMRYwFAYD VQQDEw02YTBlNmI2Ny03ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9lwoJ3GIv+mioP0V95QniXuvTaR3SXFR30WzZ1dTzPF8jVi1DO1fV0FuF/G zwFVrer/04QzGLDQVqdzFVVjkNIjxqu9fHSskQ3mEZj6iZBKI+0mCDv28o5lno85 ZWw2mT7iv1pNVU/XLCOJ+KCaQ8MQrtvrGAbayWGhpPXGVpBDn9wLde8AzAyeCAoH EOsd3wqHzj3Z9/xqoIzVa7+Hmj6JM7GE2kqOGDsaWveAmDxWfZt8qcNTyCKAnQzx B17jLtbbdnhPXlee/IluPyIyUNfhjGBaMEr3IxqlKTxOz5UtG0t69optwhiKc5fl 5opJdDGQToa03IVeGcddJKD+4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3awNLF dcfenv1bLipVsYMHHm5qMB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7H2KeT/NzBPrDmAFYgdr3nqJAo0kQxzjgqN0XhCcMrDA9QID+69ztlGH2qW ZPB/dcaryXdS+w4gdbwOBljN6AHVyLXDUr6FIWdIMGCayRzfgkJ28VbCqcECaXec cX9aXewwmar3DjgDI7qukiUa/2/957qwythlN3GYm9hMWNCVmzMWxnoYnlNNq+yF Yjf96e3Kc6I4izIF8vvBXhvMSm0AoxiihIkuJcOinINw6ajxU2MT3QzqYtRjuPwC BRWxPz3uj8THiqEyOxOgcTNVKKDZJmu91twjC3UU/rMxkEUigXYKYEsdnOfrSR4s XQndkwqhZsC37+OP2lUFgFUu9A== -----END CERTIFICATE-----Generated at Thu May 21 10:14:49 2026 by rpki-client