$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: pCVpVYnUppaReTCx/in+Xhpn0bzO2EJ0PYPaucsZtKM= Subject key identifier: E1:B9:BA:72:D8:F4:E1:B2:C6:3D:96:16:2F:C4:F5:C1:A8:EC:D7:DF Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 019F Signing time: Thu 21 May 2026 04:43:26 +0000 Manifest this update: Thu 21 May 2026 04:43:25 +0000 Manifest next update: Thu 28 May 2026 04:43:25 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: c9SsQR1aUEuZ8Wfzn3YbGH5OESAV9MguVslATKrs8hc=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: May 21 04:43:25 2026 GMT Not After : May 28 04:43:25 2026 GMT Subject: CN=6a0e8d6d-8ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:d2:6c:8b:3b:46:f6:09:d8:da:8d:e6:7a: 68:e6:9c:50:48:62:e6:2c:d1:75:0e:5f:65:27:73: 38:6e:52:8d:0f:33:9a:81:e5:dc:a5:82:73:a1:eb: 9c:d4:97:ee:92:97:c4:c8:f6:72:ce:68:7a:e5:d6: e3:74:45:28:0e:a3:29:ca:f5:fb:70:d5:32:8c:44: b7:21:57:c9:bf:8e:bb:b7:b1:f4:9a:4e:3b:58:69: 4e:6d:a9:23:f6:5a:31:7e:ee:cf:f7:be:18:62:62: 9e:97:a7:2a:f2:6a:37:61:12:57:43:10:0d:25:f3: 13:04:35:a9:f1:07:f4:af:d9:57:7d:04:cc:d2:40: e8:d7:eb:b7:c9:66:81:8a:d2:1b:ca:90:4b:44:e2: 95:76:ac:d4:9b:67:8f:00:2e:7d:23:55:80:c4:a2: 59:c1:d1:94:68:85:83:df:85:81:e7:8d:8e:89:a1: 88:b2:0c:18:f6:3d:3e:da:1d:cd:a7:87:59:b7:3a: 29:31:1c:88:41:eb:fc:fc:eb:34:d2:b7:ef:ac:0e: 73:1d:ea:bf:15:0f:df:3a:f2:a6:f7:ee:e3:3b:b5: b0:5c:7d:f4:49:7b:f9:c5:0c:7f:d3:82:cb:59:ee: 9c:36:42:d8:6b:04:95:60:9b:08:b9:14:2d:18:8d: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:BA:72:D8:F4:E1:B2:C6:3D:96:16:2F:C4:F5:C1:A8:EC:D7:DF X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:38:ef:d2:fe:1f:5d:4d:49:f4:6f:d7:d0:c9:60:91:cf:c5: e6:02:72:ee:5f:a2:6b:ba:46:fa:14:28:28:3a:61:89:48:88: 67:6b:dc:19:1a:73:5b:60:70:8b:aa:2e:c5:1d:7a:28:37:91: f7:a6:15:c1:3c:e3:b9:d9:12:e4:16:66:7f:8d:2f:f5:48:01: a0:fb:c1:bb:68:65:c1:ce:dd:fa:99:33:cc:ae:50:c6:87:fb: 41:8e:f1:df:8d:ac:c7:78:9b:36:3f:fd:e3:3d:2d:6f:1b:20: 8e:65:26:25:6f:5a:77:cb:67:a9:1d:35:5c:69:97:74:d3:20: 15:5d:cd:00:19:63:c5:41:c0:ad:bb:7a:85:58:83:c4:59:f9: 83:9d:93:f6:51:73:60:1f:9e:29:fa:ed:66:70:62:4f:f3:18: eb:4b:79:b5:65:96:e0:fa:51:05:2b:38:da:fc:60:3d:f6:57: 12:2d:ce:ca:52:e0:40:02:b4:3f:f0:06:68:db:c1:14:20:92: 29:94:dd:3f:d4:3c:56:d0:a1:6a:10:bd:d5:8d:75:74:cd:a1: 17:fa:40:00:bd:7b:57:97:02:ab:43:b1:9b:5a:5b:c3:c9:cb: 11:19:f7:e7:2c:30:5d:f0:36:86:ff:d8:48:77:0e:2b:b7:a0: 87:7d:26:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwNTIxMDQ0MzI1WhcNMjYwNTI4MDQ0MzI1WjAYMRYwFAYD VQQDEw02YTBlOGQ2ZC04YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9fSbIs7RvYJ2NqN5npo5pxQSGLmLNF1Dl9lJ3M4blKNDzOageXcpYJzoeuc 1JfukpfEyPZyzmh65dbjdEUoDqMpyvX7cNUyjES3IVfJv467t7H0mk47WGlObakj 9loxfu7P974YYmKel6cq8mo3YRJXQxANJfMTBDWp8Qf0r9lXfQTM0kDo1+u3yWaB itIbypBLROKVdqzUm2ePAC59I1WAxKJZwdGUaIWD34WB542OiaGIsgwY9j0+2h3N p4dZtzopMRyIQev8/Os00rfvrA5zHeq/FQ/fOvKm9+7jO7WwXH30SXv5xQx/04LL We6cNkLYawSVYJsIuRQtGI347QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOG5unLY 9OGyxj2WFi/E9cGo7NffMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGTjv0v4fXU1J9G/X0Mlgkc/F5gJy7l+ia7pG+hQoKDphiUiIZ2vcGRpzW2Bw i6ouxR16KDeR96YVwTzjudkS5BZmf40v9UgBoPvBu2hlwc7d+pkzzK5Qxof7QY7x 342sx3ibNj/94z0tbxsgjmUmJW9ad8tnqR01XGmXdNMgFV3NABljxUHArbt6hViD xFn5g52T9lFzYB+eKfrtZnBiT/MY60t5tWWW4PpRBSs42vxgPfZXEi3OylLgQAK0 P/AGaNvBFCCSKZTdP9Q8VtChahC91Y11dM2hF/pAAL17V5cCq0Oxm1pbw8nLERn3 5ywwXfA2hv/YSHcOK7egh30mIg== -----END CERTIFICATE-----Generated at Fri May 22 15:19:06 2026 by rpki-client