$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: LZDwanA6kPsstXcRwrpTFTw48roCVF2eOPm61nC4T/k= Subject key identifier: C6:7A:D8:C9:10:54:E7:15:13:DC:F5:CC:00:91:3F:08:98:8B:2C:22 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1E7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E5F Signing time: Fri 12 Jun 2026 16:02:25 +0000 Manifest this update: Fri 12 Jun 2026 16:02:25 +0000 Manifest next update: Fri 19 Jun 2026 16:02:25 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: hkuhiNML8r42YQ+yfqa6/ZtyAuDZi8xV8YYE+WPAbo8=) 2: 1D57FF40A01311E684546521C4F9AE02.roa (hash: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=) 3: 4865DD00A13B11E687921078C4F9AE02.roa (hash: ct9I/aMYPGYqo53jKTnyxK/j3JeT25nkuXtpX13/eJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7802 (0x1e7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Jun 12 16:02:25 2026 GMT Not After : Jun 19 16:02:25 2026 GMT Subject: CN=6a2c2d91-7eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:cd:1b:5e:51:47:9a:cb:48:56:6e:da:67: ea:45:d5:a3:f7:a2:7e:71:51:14:b1:fd:73:4c:bf: 9c:21:a2:67:8d:91:9f:48:ff:c2:6e:1c:12:58:d3: 71:21:4c:23:b7:e0:01:d5:d9:b1:40:3d:21:f3:4d: b6:08:95:f1:58:17:24:d7:c4:93:b3:99:92:03:5e: a1:cb:14:1f:ea:54:4d:1f:f9:63:75:ed:23:c1:5c: 5c:00:7d:6f:ba:cb:74:01:00:8b:5d:3e:3b:e3:8b: c4:c8:03:c4:5c:c5:6d:5e:a8:28:ad:39:ae:74:09: 81:72:f0:a7:00:0d:d6:98:07:34:d5:d0:10:fb:89: aa:a3:70:d0:ae:84:1b:5d:f5:aa:b7:dc:de:a3:86: 5d:81:26:b6:c4:ce:b6:d9:16:6a:e8:6c:a7:27:bf: 7d:c5:3d:bb:a4:d7:ff:a5:8f:53:65:41:5f:3e:da: 46:c4:65:27:0f:6b:4d:c0:e9:48:46:95:30:92:99: f5:0b:c3:a2:da:a7:c9:37:d1:4a:3e:fd:42:4b:d8: e0:af:b8:98:f6:28:fd:3b:2c:79:e6:19:78:e8:f9: 4c:3e:0a:fc:d2:59:f7:48:3a:0a:e4:37:65:78:28: 93:31:ae:df:00:a7:83:00:38:bd:6c:7e:fc:54:d4: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7A:D8:C9:10:54:E7:15:13:DC:F5:CC:00:91:3F:08:98:8B:2C:22 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:00:6e:11:c2:ca:41:d8:11:be:5a:fc:2e:e1:ba:c2:89:c0: d8:fe:5f:50:70:45:67:be:90:90:f5:c6:4c:32:f0:34:15:01: 17:12:45:71:63:11:14:bb:51:b4:68:d2:04:67:b1:72:cd:5a: d2:fa:e4:90:92:05:d2:66:8c:4e:fa:65:6e:66:50:b3:fe:a6: f8:1c:a9:98:05:3c:4f:5b:9c:75:b0:53:7e:00:fa:d3:b5:be: d9:0c:f6:c4:cf:09:35:51:af:c8:15:be:73:22:b4:b3:11:ea: d0:b5:b2:f4:8d:e7:32:2e:a7:47:b5:74:c3:5a:ec:fb:01:ed: d9:5a:af:8b:46:1d:a3:60:a9:be:5f:45:8b:b4:17:0f:9c:d2: 98:51:d1:d4:2f:71:3e:70:e4:d2:e6:33:79:cd:94:3f:be:55: 94:65:e7:61:06:f2:d5:7a:dd:a2:e3:64:58:d9:54:91:d0:6a: 42:7e:c6:e6:72:26:90:aa:79:e8:5b:4f:62:42:66:0e:f7:52: f7:6a:fc:1a:41:2c:2d:95:b3:7f:76:b6:99:cf:67:e0:8f:f7: 99:6d:11:76:77:2a:1c:fc:c6:dc:6b:03:98:45:e1:9e:87:27: 1b:4c:e7:b9:1c:78:63:fb:9f:c9:3b:c7:64:cd:ee:aa:d3:cc: b8:93:87:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjYwNjEyMTYwMjI1WhcNMjYwNjE5MTYwMjI1WjAYMRYwFAYD VQQDEw02YTJjMmQ5MS03ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxzNG15RR5rLSFZu2mfqRdWj96J+cVEUsf1zTL+cIaJnjZGfSP/CbhwSWNNx IUwjt+AB1dmxQD0h8022CJXxWBck18STs5mSA16hyxQf6lRNH/ljde0jwVxcAH1v ust0AQCLXT4744vEyAPEXMVtXqgorTmudAmBcvCnAA3WmAc01dAQ+4mqo3DQroQb XfWqt9zeo4ZdgSa2xM622RZq6GynJ799xT27pNf/pY9TZUFfPtpGxGUnD2tNwOlI RpUwkpn1C8Oi2qfJN9FKPv1CS9jgr7iY9ij9Oyx55hl46PlMPgr80ln3SDoK5Ddl eCiTMa7fAKeDADi9bH78VNTSuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZ62MkQ VOcVE9z1zACRPwiYiywiMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASQBuEcLKQdgRvlr8LuG6wonA2P5fUHBFZ76QkPXGTDLwNBUBFxJFcWMRFLtR tGjSBGexcs1a0vrkkJIF0maMTvplbmZQs/6m+BypmAU8T1ucdbBTfgD607W+2Qz2 xM8JNVGvyBW+cyK0sxHq0LWy9I3nMi6nR7V0w1rs+wHt2Vqvi0Ydo2Cpvl9Fi7QX D5zSmFHR1C9xPnDk0uYzec2UP75VlGXnYQby1XrdouNkWNlUkdBqQn7G5nImkKp5 6FtPYkJmDvdS92r8GkEsLZWzf3a2mc9n4I/3mW0RdncqHPzG3GsDmEXhnocnG0zn uRx4Y/ufyTvHZM3uqtPMuJOHmw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:36:36 2026 by rpki-client