$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: 2nBlJkrWCFBnuMyHZIHjAxDozVnpiHj+vEIqBNm6BFo= Subject key identifier: 55:02:CE:4B:78:DE:B4:F1:6C:3C:7D:7A:9B:0D:AD:FB:65:E5:04:01 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 077E Signing time: Thu 14 May 2026 21:43:45 +0000 Manifest this update: Thu 14 May 2026 21:43:44 +0000 Manifest next update: Thu 21 May 2026 21:43:44 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: szr4cxEHvYl/fBhocna9Uwb59aV5BVyr1M0qo3+Zvmc=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 21:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: May 14 21:43:44 2026 GMT Not After : May 21 21:43:44 2026 GMT Subject: CN=6a064211-d102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:19:00:86:af:18:e0:c9:7a:1c:40:48:61: 91:2c:16:c3:25:73:b2:c4:90:ed:46:f2:b3:bb:63: e1:cf:2c:6a:2b:cd:89:25:88:e2:3e:a6:85:5b:a3: bf:38:31:30:29:80:68:63:80:96:42:30:e5:37:05: 72:b3:6f:34:30:de:d6:a4:3c:c4:34:19:12:68:6f: ad:53:45:97:78:3b:48:96:12:8e:b2:7f:50:5e:b1: fc:ac:f0:fe:41:9b:2d:76:30:88:8c:cc:76:0f:17: 38:66:0d:da:87:33:97:2b:5a:7a:cb:81:b8:91:6b: 54:be:ae:f4:df:06:db:3d:de:48:e7:3e:dd:42:9d: da:b7:c2:a4:f3:89:ac:10:ef:c0:2b:fa:44:97:21: d0:25:f0:58:b6:b0:18:64:44:5e:ae:e9:04:58:d9: d0:81:33:67:9b:69:0a:08:76:cc:b9:3e:86:53:6d: bb:05:79:80:44:ae:56:c0:d0:cd:1a:30:7d:64:34: 65:41:95:d8:b8:c7:41:fe:71:c1:da:a2:ec:2c:9d: d5:9c:db:7f:a0:77:a3:f9:2a:72:a4:03:d9:a8:b9: 2f:d4:ae:bd:b8:1c:ce:01:0f:96:4c:ad:60:69:a9: be:29:85:a8:5b:a6:42:68:f1:12:02:e2:ff:06:58: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:CE:4B:78:DE:B4:F1:6C:3C:7D:7A:9B:0D:AD:FB:65:E5:04:01 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:92:79:58:fb:e2:4e:13:96:92:6d:16:e4:ed:e6:f0:84:86: 32:ff:f9:c3:de:ab:26:2a:ae:c0:b3:fd:2b:07:54:cc:d2:ed: ea:03:4d:ea:29:c8:6c:84:38:39:33:2d:d2:f3:f5:a9:08:05: 6a:2c:ed:4d:62:aa:bd:b3:b5:91:df:7a:76:a4:d0:7a:70:87: 61:23:9f:e6:71:b6:f7:0f:5e:c7:b4:3b:b6:08:3d:4b:e4:30: 98:e7:ab:70:79:72:da:4e:45:5f:a7:54:0b:ae:69:5f:f0:b4: 29:0a:9f:29:d5:83:67:61:6a:63:63:6e:54:a5:55:39:01:a7: 3e:91:0e:87:32:71:71:33:61:59:ea:f2:95:6f:f6:f4:ce:36: d7:a1:c9:6e:af:9b:c4:d0:25:4a:37:ab:ff:b0:d9:d8:78:b2: 57:35:cb:29:f7:5e:f2:37:73:1e:f0:7a:96:54:2f:fa:40:bc: ac:33:7e:04:bd:fa:de:08:70:1b:da:b2:3f:64:c6:2d:4b:96: 00:e1:8f:6a:e4:f1:d3:ae:6a:21:bb:40:a0:98:27:6e:d5:bd: 9e:d4:4f:05:89:d4:83:84:01:79:77:db:0a:e6:1c:f3:e0:dc: 26:57:cc:d6:e1:df:d2:a2:2e:1d:c0:f4:2d:3a:53:cd:9d:cf: bf:2b:e1:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwNTE0MjE0MzQ0WhcNMjYwNTIxMjE0MzQ0WjAYMRYwFAYD VQQDEw02YTA2NDIxMS1kMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KkZAIavGODJehxASGGRLBbDJXOyxJDtRvKzu2PhzyxqK82JJYjiPqaFW6O/ ODEwKYBoY4CWQjDlNwVys280MN7WpDzENBkSaG+tU0WXeDtIlhKOsn9QXrH8rPD+ QZstdjCIjMx2Dxc4Zg3ahzOXK1p6y4G4kWtUvq703wbbPd5I5z7dQp3at8Kk84ms EO/AK/pElyHQJfBYtrAYZERerukEWNnQgTNnm2kKCHbMuT6GU227BXmARK5WwNDN GjB9ZDRlQZXYuMdB/nHB2qLsLJ3VnNt/oHej+SpypAPZqLkv1K69uBzOAQ+WTK1g aam+KYWoW6ZCaPESAuL/BlhJtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUCzkt4 3rTxbDx9epsNrftl5QQBMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy5J5WPviThOWkm0W5O3m8ISGMv/5w96rJiquwLP9KwdUzNLt6gNN6inIbIQ4 OTMt0vP1qQgFaiztTWKqvbO1kd96dqTQenCHYSOf5nG29w9ex7Q7tgg9S+QwmOer cHly2k5FX6dUC65pX/C0KQqfKdWDZ2FqY2NuVKVVOQGnPpEOhzJxcTNhWerylW/2 9M4216HJbq+bxNAlSjer/7DZ2HiyVzXLKfde8jdzHvB6llQv+kC8rDN+BL363ghw G9qyP2TGLUuWAOGPauTx065qIbtAoJgnbtW9ntRPBYnUg4QBeXfbCuYc8+DcJlfM 1uHf0qIuHcD0LTpTzZ3PvyvhDg== -----END CERTIFICATE-----Generated at Sat May 16 20:19:09 2026 by rpki-client