$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: vxq16HUKgr3P7f+b4MdOz5dh5Jddmig1rAvQIpLJomg= Subject key identifier: B0:B4:B6:3B:4F:43:62:AA:58:86:FC:5E:2F:B4:92:B9:15:B2:C8:2C Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: EC Signing time: Sun 05 Apr 2026 05:48:24 +0000 Manifest this update: Sun 05 Apr 2026 05:48:23 +0000 Manifest next update: Sun 12 Apr 2026 05:48:23 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: IugKTz6vpWfSoSSvLTPIpxgPrCyK9UWDe6sAWoZ7hl8=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Apr 5 05:48:23 2026 GMT Not After : Apr 12 05:48:23 2026 GMT Subject: CN=69d1f7a8-8364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:1d:da:64:e4:a3:46:a2:eb:3e:a5:de:7d: 94:36:17:2e:0f:07:9e:b1:6e:ba:f8:a6:9c:4a:81: a6:17:5d:fe:8b:62:fa:da:88:28:aa:2c:fe:82:69: bd:dc:f9:92:eb:5c:b6:5e:a2:62:74:26:93:2e:c4: 41:5b:9a:f6:b4:d1:e1:a4:7b:77:6e:c5:98:7e:68: 0a:82:16:d6:2a:5b:bc:24:4b:01:48:ea:a9:dc:b7: d8:66:3c:ec:08:0d:7b:74:aa:9c:48:2d:f9:81:b3: 39:5a:2a:b1:46:34:9b:da:b8:df:84:66:50:b7:07: 2c:10:6f:a9:6b:57:16:99:13:06:81:51:e2:86:1c: 56:ec:d9:2b:c5:98:5d:f4:2e:39:04:fd:57:f1:ee: d3:88:cf:01:36:53:fc:fa:59:e6:89:b3:b7:6b:d5: 0f:32:c2:47:38:1e:4a:e2:61:9f:18:de:2c:70:62: 2a:0a:b8:c8:2b:32:dc:97:05:63:89:b3:4d:59:48: 2f:ae:fd:3e:d3:05:07:5d:94:8b:6e:70:af:30:62: fc:8b:5d:6e:85:cc:f9:6b:7e:60:78:56:a4:9f:d4: 4e:6d:01:bc:19:47:4e:8a:fa:54:9a:50:2b:c8:f7: 4b:da:93:70:9c:80:87:29:3f:99:a3:a5:bd:ed:78: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:B6:3B:4F:43:62:AA:58:86:FC:5E:2F:B4:92:B9:15:B2:C8:2C X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f1:19:de:29:06:a6:2c:dc:a6:a0:c5:a0:c1:06:2d:8c:32: 33:23:35:00:b3:4d:22:05:37:8a:cb:78:53:bd:46:c2:61:c0: f5:db:ab:ef:23:59:aa:8b:1f:4a:e0:f4:d8:44:fa:7f:6d:19: 3c:2a:2a:bc:06:ae:46:a6:07:83:41:20:c0:99:65:fe:79:bf: 66:92:f3:b2:99:17:20:02:43:a1:c9:bc:6c:10:bf:b3:1b:47: d6:a8:cd:13:e5:65:a8:91:a9:be:6c:77:96:52:1c:62:41:02: 92:cf:94:de:79:68:11:c3:79:c5:33:41:f0:cd:ff:8e:b2:31: 72:62:ef:0a:ba:1c:99:ea:ad:01:a5:7d:15:22:b8:7d:9f:f9: e4:8b:2a:8b:33:84:f0:5f:39:d2:e2:c3:b5:08:8e:a5:f4:64: 00:2a:cf:2e:0c:6b:f8:ea:42:88:4a:a4:6b:84:e5:c6:59:43: 24:11:aa:5c:7f:cc:2d:f7:c9:16:b7:28:a1:6a:d6:51:ee:41: 14:cd:0e:04:f1:fc:29:94:e4:73:3b:24:9c:11:87:8f:4d:bc: fb:09:b3:02:8b:2e:10:14:17:62:88:8f:3f:0b:53:37:b7:8f: e2:c2:df:7a:f9:a3:f3:c1:1a:f2:e8:ac:87:5f:48:32:28:87: 65:34:b3:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz MEU3NDBGMDcwHhcNMjYwNDA1MDU0ODIzWhcNMjYwNDEyMDU0ODIzWjAYMRYwFAYD VQQDEw02OWQxZjdhOC04MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRkd2mTko0ai6z6l3n2UNhcuDweesW66+KacSoGmF13+i2L62ogoqiz+gmm9 3PmS61y2XqJidCaTLsRBW5r2tNHhpHt3bsWYfmgKghbWKlu8JEsBSOqp3LfYZjzs CA17dKqcSC35gbM5WiqxRjSb2rjfhGZQtwcsEG+pa1cWmRMGgVHihhxW7NkrxZhd 9C45BP1X8e7TiM8BNlP8+lnmibO3a9UPMsJHOB5K4mGfGN4scGIqCrjIKzLclwVj ibNNWUgvrv0+0wUHXZSLbnCvMGL8i11uhcz5a35geFakn9RObQG8GUdOivpUmlAr yPdL2pNwnICHKT+Zo6W97Xh3RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLC0tjtP Q2KqWIb8Xi+0krkVssgsMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G WGduck5FZUlFNVF3NTBEd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfEZ3ikGpizcpqDFoMEGLYwyMyM1ALNNIgU3ist4U71GwmHA9dur7yNZqosf SuD02ET6f20ZPCoqvAauRqYHg0EgwJll/nm/ZpLzspkXIAJDocm8bBC/sxtH1qjN E+VlqJGpvmx3llIcYkECks+U3nloEcN5xTNB8M3/jrIxcmLvCrocmeqtAaV9FSK4 fZ/55IsqizOE8F850uLDtQiOpfRkACrPLgxr+OpCiEqka4TlxllDJBGqXH/MLffJ FrcooWrWUe5BFM0OBPH8KZTkczsknBGHj028+wmzAosuEBQXYoiPPwtTN7eP4sLf evmj88Ea8uish19IMiiHZTSzSA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:50 2026 by rpki-client