$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: MwLO5RHOUscJ3JIfRxpok9p6XxAqNnZyWt3sMRro86Q= Subject key identifier: 91:46:95:3C:91:11:A7:69:EF:44:E7:41:C2:68:79:46:C9:03:F5:9E Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1DBD Signing time: Sat 04 Apr 2026 16:02:17 +0000 Manifest this update: Sat 04 Apr 2026 16:02:17 +0000 Manifest next update: Sat 11 Apr 2026 16:02:17 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: 0ZtXbKfmURDQrZTdn8sD6cM/fs/csPDEHZrwUlZJXVw=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: aM1BSZ3PF2IzE+AJHUzu7Yk2PU3p6ogZh2Ox+iMNzws=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: SnQLKrTdABnlhkWQ+AVqddVj1mUuPuJmeCU6LxGP6eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7666 (0x1df2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Apr 4 16:02:17 2026 GMT Not After : Apr 11 16:02:17 2026 GMT Subject: CN=69d13609-bbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:68:9c:6e:92:d2:16:21:23:65:7c:21:f6: 0d:42:0f:90:f0:7a:3c:89:1b:7f:c4:56:50:32:51: 84:7a:59:3e:12:0e:38:67:ea:9a:73:d0:79:ad:f4: f9:1a:48:ca:9c:0b:51:ec:5b:e9:0c:c4:d3:ae:e3: cc:9e:2f:c5:2c:c1:fc:10:f7:c2:c1:b7:0f:90:9e: 1e:f5:2d:c2:55:e3:b4:7d:e4:2b:96:cb:98:d1:e7: f8:d2:ed:95:ff:79:ca:ab:ac:7f:83:31:dd:80:96: 6e:1f:6b:c3:b6:f1:44:5e:ad:c8:55:75:6d:84:d0: 25:96:32:53:2b:a9:d1:3b:f1:97:8a:c3:d4:05:d7: 49:42:16:35:59:00:47:d9:c4:6b:6d:76:54:9c:53: 1e:67:8d:c3:f7:22:45:c8:c1:9c:15:aa:e1:62:a9: f7:48:13:f0:cd:96:b0:a1:94:90:ef:89:bd:e1:57: 7f:1e:02:75:05:cc:63:58:6f:d0:a2:73:00:36:b1: 22:cc:c6:cf:6f:4d:1a:12:b0:e9:b9:81:5c:d0:8e: f9:f1:ab:51:2b:9d:10:49:29:c0:c0:95:51:2a:f4: 3d:68:25:f4:a7:4d:33:36:df:26:c4:32:d5:d1:21: c7:f6:81:02:4a:d1:50:09:1b:1e:14:4b:cd:a1:5f: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:95:3C:91:11:A7:69:EF:44:E7:41:C2:68:79:46:C9:03:F5:9E X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:09:79:fa:2f:74:ba:2e:f3:cb:53:59:5a:62:98:92:41:e8: 66:82:38:10:7e:fc:01:e0:71:ce:85:f3:bf:ea:8c:17:a7:22: d9:12:1b:f4:e3:80:ad:6b:83:20:66:2b:1b:62:c4:d4:b6:7b: 45:d0:92:8b:23:5b:1b:39:31:06:59:a9:cd:08:2c:e9:cf:93: b5:f4:32:e5:7f:76:d6:7d:2e:ce:58:2f:34:57:b8:88:3a:10: 51:ac:dc:53:c5:4e:90:3d:fa:ae:61:8f:59:9f:31:5b:0b:35: 6b:e3:e8:99:5b:88:63:01:6d:59:10:8f:39:01:ee:46:05:83: ca:f0:e5:fd:89:93:c7:58:4c:87:ea:4b:e7:0f:94:81:0a:09: 1b:e7:b8:ca:d4:8b:12:ef:41:df:54:56:d0:56:85:eb:58:b3: 17:97:a6:75:5d:75:8f:12:73:00:58:7d:fe:fd:d5:2b:2d:72: ed:b8:94:17:b7:69:27:00:f5:c7:ef:18:95:0d:52:d2:41:79: 31:1f:7d:73:65:5c:3d:c1:1a:8a:5b:94:12:55:12:57:8c:85: ca:12:e1:44:6f:e4:5c:20:74:9e:a7:65:99:d4:c5:45:0b:5b: 34:dd:cd:6f:d4:7b:21:6c:cf:79:4c:4d:f8:f1:0e:53:ac:0d: 6a:0f:85:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjYwNDA0MTYwMjE3WhcNMjYwNDExMTYwMjE3WjAYMRYwFAYD VQQDEw02OWQxMzYwOS1iYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshtonG6S0hYhI2V8IfYNQg+Q8Ho8iRt/xFZQMlGEelk+Eg44Z+qac9B5rfT5 GkjKnAtR7FvpDMTTruPMni/FLMH8EPfCwbcPkJ4e9S3CVeO0feQrlsuY0ef40u2V /3nKq6x/gzHdgJZuH2vDtvFEXq3IVXVthNAlljJTK6nRO/GXisPUBddJQhY1WQBH 2cRrbXZUnFMeZ43D9yJFyMGcFarhYqn3SBPwzZawoZSQ74m94Vd/HgJ1BcxjWG/Q onMANrEizMbPb00aErDpuYFc0I758atRK50QSSnAwJVRKvQ9aCX0p00zNt8mxDLV 0SHH9oECStFQCRseFEvNoV+6UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFGlTyR Eadp70TnQcJoeUbJA/WeMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQl5+i90ui7zy1NZWmKYkkHoZoI4EH78AeBxzoXzv+qMF6ci2RIb9OOArWuD IGYrG2LE1LZ7RdCSiyNbGzkxBlmpzQgs6c+TtfQy5X921n0uzlgvNFe4iDoQUazc U8VOkD36rmGPWZ8xWws1a+PomVuIYwFtWRCPOQHuRgWDyvDl/YmTx1hMh+pL5w+U gQoJG+e4ytSLEu9B31RW0FaF61izF5emdV11jxJzAFh9/v3VKy1y7biUF7dpJwD1 x+8YlQ1S0kF5MR99c2VcPcEailuUElUSV4yFyhLhRG/kXCB0nqdlmdTFRQtbNN3N b9R7IWzPeUxN+PEOU6wNag+FmA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:02 2026 by rpki-client