$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: OQXrsDqR6hFyZN7H/xHy3ensJZ4jqkU/3YnujzKRdTg= Subject key identifier: 37:93:45:77:D6:20:DC:76:EF:4B:FB:FC:6A:A1:86:34:01:39:D6:22 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 0491 Signing time: Thu 21 May 2026 00:06:42 +0000 Manifest this update: Thu 21 May 2026 00:06:41 +0000 Manifest next update: Thu 28 May 2026 00:06:41 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: yBepBBhBI6uL1H+G8PH/LoklVjBOuZpmwDukKtrFuv4=) 2: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=) 3: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: May 21 00:06:41 2026 GMT Not After : May 28 00:06:41 2026 GMT Subject: CN=6a0e4c92-3523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:bf:cb:64:88:9b:20:05:c5:2e:d4:72:c4: c1:6d:52:5d:49:7a:87:27:47:32:66:58:13:41:cb: 1c:3c:2a:ac:71:e6:78:09:18:bf:76:26:db:c4:6a: bf:0c:c0:5d:10:b0:19:7d:11:7b:66:9f:b4:49:3b: 02:6d:40:8a:9c:d9:9d:30:a9:4e:2d:d3:aa:39:67: 8d:eb:17:37:da:ce:78:62:33:95:13:1a:89:ff:52: 87:06:08:8f:72:90:c0:68:7e:a3:58:ee:be:26:4e: f4:d4:5e:de:69:2d:0e:48:72:5e:18:e9:51:61:a9: dd:8f:0c:72:c6:8a:8b:6d:aa:e5:cf:81:34:d1:97: d9:fc:e5:30:10:8b:71:29:d4:72:e2:8c:71:b6:24: be:8d:73:32:2e:e2:bc:33:1e:a0:c9:ae:17:37:11: 41:67:5e:69:cb:52:0b:0c:4f:07:17:a5:32:b2:8d: c7:eb:23:62:f8:be:8b:01:33:1e:85:cc:d9:89:01: c5:ec:c2:f4:a9:38:2b:a0:d7:c9:2a:fa:18:55:3e: aa:d7:2d:af:6a:93:7b:ee:5d:ae:f5:bf:41:1f:6f: 21:91:9a:ce:b3:cf:8d:4c:54:fa:9d:c3:e3:f0:fa: 95:5d:9d:af:5b:a5:ec:e3:5c:21:1c:22:83:2b:06: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:45:77:D6:20:DC:76:EF:4B:FB:FC:6A:A1:86:34:01:39:D6:22 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7d:86:40:96:9a:6d:5a:d9:0d:48:ab:56:d0:59:e8:24:dc: 69:d0:26:0d:a5:a0:66:f3:3a:59:ce:7e:c8:03:b6:99:90:44: 52:7e:79:bb:7f:cd:ab:68:e9:97:06:d2:ce:e0:f4:bc:40:c2: 78:4b:46:af:0b:1f:53:2b:01:01:1e:18:5c:d9:7f:86:14:d4: 72:1d:c5:2f:17:00:70:38:23:d4:ab:55:18:61:4c:74:72:f2: 29:ab:82:9f:17:04:82:8b:a9:f9:8b:26:a0:5f:14:76:d1:7c: f7:cf:06:33:23:4c:f1:f8:fb:0c:ae:b7:97:6f:2d:8a:0b:25: 53:92:82:ba:d6:68:e3:82:44:89:ee:59:a5:27:3b:72:38:10: 7d:e2:f0:b6:ac:3e:9a:bc:a0:83:f7:25:5d:ad:df:d3:64:5d: 04:bd:9c:8d:8d:92:29:f9:86:e6:c9:28:c7:72:ae:a2:7c:87: 17:f3:86:91:87:40:6c:ef:8f:00:4d:5b:c6:7a:cd:c4:a6:06: 88:80:da:5e:85:5b:6b:3b:33:1d:d1:d0:44:8d:7e:b0:2f:0f: 3d:4c:e1:a5:70:a6:bf:0f:cf:57:1b:6d:c3:c6:69:01:a0:ab: 5f:41:7a:d3:bf:48:5e:24:0a:51:05:1d:cd:8a:10:99:ef:b9: 6e:1f:bc:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYwNTIxMDAwNjQxWhcNMjYwNTI4MDAwNjQxWjAYMRYwFAYD VQQDEw02YTBlNGM5Mi0zNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonG/y2SImyAFxS7UcsTBbVJdSXqHJ0cyZlgTQcscPCqsceZ4CRi/dibbxGq/ DMBdELAZfRF7Zp+0STsCbUCKnNmdMKlOLdOqOWeN6xc32s54YjOVExqJ/1KHBgiP cpDAaH6jWO6+Jk701F7eaS0OSHJeGOlRYandjwxyxoqLbarlz4E00ZfZ/OUwEItx KdRy4oxxtiS+jXMyLuK8Mx6gya4XNxFBZ15py1ILDE8HF6Uyso3H6yNi+L6LATMe hczZiQHF7ML0qTgroNfJKvoYVT6q1y2vapN77l2u9b9BH28hkZrOs8+NTFT6ncPj 8PqVXZ2vW6Xs41whHCKDKwYUjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeTRXfW INx270v7/GqhhjQBOdYiMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsX2GQJaabVrZDUirVtBZ6CTcadAmDaWgZvM6Wc5+yAO2mZBEUn55u3/Nq2jp lwbSzuD0vEDCeEtGrwsfUysBAR4YXNl/hhTUch3FLxcAcDgj1KtVGGFMdHLyKauC nxcEgoup+YsmoF8UdtF8988GMyNM8fj7DK63l28tigslU5KCutZo44JEie5ZpSc7 cjgQfeLwtqw+mrygg/clXa3f02RdBL2cjY2SKfmG5skox3KuonyHF/OGkYdAbO+P AE1bxnrNxKYGiIDaXoVbazszHdHQRI1+sC8PPUzhpXCmvw/PVxttw8ZpAaCrX0F6 079IXiQKUQUdzYoQme+5bh+82A== -----END CERTIFICATE-----Generated at Thu May 21 12:58:15 2026 by rpki-client