$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: s98bCPPOcKR29JX4SPJI4zWTdKZNIdI95gGM+/FlaAY= Subject key identifier: F2:C2:36:2A:2D:D9:D4:EA:4E:3E:B6:D9:0C:66:C8:59:24:7E:DA:11 Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: E5 Signing time: Thu 21 May 2026 06:38:06 +0000 Manifest this update: Thu 21 May 2026 06:38:06 +0000 Manifest next update: Thu 28 May 2026 06:38:06 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: vM8+Pk+1deuoRnNnb1grrfc4g6P8uYMMuyGRc1PYXkU=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: May 21 06:38:06 2026 GMT Not After : May 28 06:38:06 2026 GMT Subject: CN=6a0ea84e-aa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:be:4d:57:ba:0c:8c:41:19:5a:25:f9:c3: f1:29:07:16:0a:74:32:7b:2e:aa:7a:3c:d5:66:58: c3:24:f1:ca:ea:96:3d:24:9b:51:e3:50:40:ad:ed: 3e:20:fe:2e:bb:0a:62:20:1b:b2:c1:ea:94:cb:aa: 15:06:9d:61:ad:b1:4d:af:2f:59:9b:71:c8:9e:cd: f6:bb:3f:c6:77:8e:1e:47:b5:9f:17:9b:8f:91:f9: a7:2e:73:00:b0:48:19:40:4d:a3:57:cf:e7:99:a0: 08:ad:92:27:cd:93:14:f0:65:4f:39:80:77:e1:ab: 20:52:69:66:eb:f6:f7:27:10:d5:64:4c:71:6c:df: c0:2e:e4:bd:14:2e:f5:23:c8:3e:a7:7f:30:c0:ec: ef:0b:25:48:1a:f0:64:b8:a4:a7:9a:dc:a7:95:b8: 59:a8:e4:f8:aa:0c:22:84:b5:fa:c2:a3:86:b2:58: d6:55:ed:80:c7:71:77:6d:8e:26:14:dd:cb:71:09: b0:a9:ee:f5:04:3f:5d:49:2b:1e:21:74:36:01:c0: da:4d:84:5e:ca:e7:4a:47:53:a3:7a:89:53:8b:6d: 6c:ae:a2:18:3a:e1:98:b8:cf:b4:35:c9:65:e9:e1: 24:40:49:f9:b3:26:c4:30:18:b1:d5:8c:2f:02:05: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C2:36:2A:2D:D9:D4:EA:4E:3E:B6:D9:0C:66:C8:59:24:7E:DA:11 X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:92:02:e2:2b:a6:cc:4c:b4:71:0f:c2:61:7e:b7:27:a5:db: 9c:0a:96:ba:45:72:ef:85:bd:c8:8d:7a:60:a8:16:a9:1b:3a: 92:74:67:4e:de:72:5d:d8:83:22:d5:4f:1e:59:11:04:48:6c: ae:92:53:94:0c:06:b9:b0:f3:fc:62:7b:b2:f0:90:64:ba:9c: a1:ae:f3:6f:b8:3c:94:e2:31:e1:23:95:6a:6c:65:99:96:be: c8:55:e1:e2:93:ba:ff:6c:29:ee:61:b9:f5:40:1a:3b:05:3f: ff:39:04:e6:13:ca:c0:69:f2:f8:8e:64:6e:bf:1c:61:a0:c0: 01:9e:2d:63:fc:8e:3e:b7:00:72:2b:83:02:39:6f:5b:3c:78: 92:92:94:77:f2:6a:d8:44:c1:b5:a2:3f:f2:9a:a1:4e:bc:67: 84:ee:1d:2c:56:0f:2c:b0:63:09:54:71:b0:31:0e:87:64:56: 6f:f1:2f:4b:c0:c7:b4:27:61:cd:46:42:02:c0:47:85:1e:c6: 97:d0:1a:68:80:31:ed:44:c5:2e:9f:a5:e3:50:ef:91:75:d1: 53:08:fb:b0:de:1d:56:94:4a:c6:f6:44:e4:f1:65:16:cf:f9: cc:ab:f1:e3:ed:0c:13:d9:9c:d9:0c:27:63:10:95:93:f7:5a: 34:6b:1f:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE MjBFNjlBMjQwHhcNMjYwNTIxMDYzODA2WhcNMjYwNTI4MDYzODA2WjAYMRYwFAYD VQQDEw02YTBlYTg0ZS1hYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLC+TVe6DIxBGVol+cPxKQcWCnQyey6qejzVZljDJPHK6pY9JJtR41BAre0+ IP4uuwpiIBuyweqUy6oVBp1hrbFNry9Zm3HIns32uz/Gd44eR7WfF5uPkfmnLnMA sEgZQE2jV8/nmaAIrZInzZMU8GVPOYB34asgUmlm6/b3JxDVZExxbN/ALuS9FC71 I8g+p38wwOzvCyVIGvBkuKSnmtynlbhZqOT4qgwihLX6wqOGsljWVe2Ax3F3bY4m FN3LcQmwqe71BD9dSSseIXQ2AcDaTYReyudKR1OjeolTi21srqIYOuGYuM+0Ncll 6eEkQEn5sybEMBix1YwvAgURaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLCNiot 2dTqTj622QxmyFkkftoRMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB TmZfNHh4empXZVhTRG1taVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpIC4iumzEy0cQ/CYX63J6XbnAqWukVy74W9yI16YKgWqRs6knRnTt5yXdiD ItVPHlkRBEhsrpJTlAwGubDz/GJ7svCQZLqcoa7zb7g8lOIx4SOVamxlmZa+yFXh 4pO6/2wp7mG59UAaOwU//zkE5hPKwGny+I5kbr8cYaDAAZ4tY/yOPrcAciuDAjlv Wzx4kpKUd/Jq2ETBtaI/8pqhTrxnhO4dLFYPLLBjCVRxsDEOh2RWb/EvS8DHtCdh zUZCAsBHhR7Gl9AaaIAx7UTFLp+l41DvkXXRUwj7sN4dVpRKxvZE5PFlFs/5zKvx 4+0ME9mc2QwnYxCVk/daNGsfdQ== -----END CERTIFICATE-----Generated at Sat May 23 07:57:19 2026 by rpki-client