$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: HdBCUDkcS5uzbzNz+XczJcDwCuVXlEcyORhhDa4e2vo= Subject key identifier: 7B:57:F1:1A:64:91:04:9E:0F:FF:70:76:9C:BE:5C:0B:47:40:AA:63 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 46 Signing time: Sun 05 Apr 2026 07:41:06 +0000 Manifest this update: Sun 05 Apr 2026 07:41:06 +0000 Manifest next update: Sun 12 Apr 2026 07:41:06 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: 32uCxNgJpdtYMUVq41Iss51YqcwsAuev1OJggXszyeI=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Apr 5 07:41:06 2026 GMT Not After : Apr 12 07:41:06 2026 GMT Subject: CN=69d21212-181a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:f7:3c:59:b0:4b:b7:e5:f7:ad:57:e6:92: 8f:34:d4:90:cd:34:9d:4d:43:5a:00:56:77:38:29: b6:27:0c:b0:1e:03:d8:13:7b:75:fd:4e:d0:c8:17: ff:02:60:64:6b:a2:57:87:ba:c0:dd:66:b7:aa:5e: cb:11:4f:95:4e:a5:b6:37:68:41:47:fa:00:cd:da: b0:74:5a:cb:22:90:79:33:09:c3:96:48:10:c4:84: 64:f9:1b:c3:10:d7:2c:3d:e2:9c:58:18:45:2a:e2: 13:02:af:02:81:8f:66:5b:03:3f:ca:fe:e4:5d:3f: 3b:fd:13:e0:a5:5c:5a:ef:48:e4:fb:41:56:2d:b7: 48:5e:04:27:98:e1:63:92:e0:cd:de:95:c3:40:39: 48:86:8e:7f:63:52:c9:e4:02:8d:d6:c5:be:b6:0d: b1:eb:e0:04:a9:14:41:35:eb:26:6f:af:d7:77:3f: bf:b3:aa:d0:c9:71:db:9f:e0:5e:4d:55:60:6e:f0: 3c:cf:96:15:88:66:3e:ed:54:8a:64:6d:bb:ca:bf: 63:3e:d2:a0:bb:15:53:2f:4e:91:1a:40:c3:81:37: 61:d5:80:a7:6b:5e:aa:84:89:f0:0a:12:ee:51:3f: 0e:f7:fd:a1:83:81:11:10:43:fd:d9:68:aa:d5:bc: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:57:F1:1A:64:91:04:9E:0F:FF:70:76:9C:BE:5C:0B:47:40:AA:63 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:af:e1:d8:fb:57:08:ac:d0:d6:89:57:c4:f1:81:77:f0: ce:60:8a:f9:af:32:4d:5d:a8:cc:b6:f0:2d:f4:8c:67:b6:cf: 1e:16:a5:dc:bb:58:f2:a1:ea:63:03:a7:e4:40:1e:27:49:0c: 71:29:2d:1a:37:0f:df:6a:94:5b:9b:f2:2f:f8:d3:32:eb:b4: 88:a3:1d:2e:7f:2c:67:ca:e3:8c:e6:64:0f:a5:d1:e3:5d:73: 92:7e:79:06:89:14:2a:5b:10:d0:10:26:c2:b6:b1:b3:76:1e: 7f:41:87:0e:20:15:0d:2e:ae:ce:50:06:63:9f:20:b1:11:71: f2:19:ed:3f:9a:72:8a:9b:ee:e8:bc:5f:df:a1:06:36:98:41: 92:80:34:cd:5c:99:73:d2:ee:29:c6:68:f8:06:2f:16:f8:a5: 9d:21:3e:9c:c8:b3:03:11:59:68:39:b3:2a:22:c8:54:c6:b2: 9a:65:a8:44:dd:dc:d4:1e:98:7b:25:56:24:30:fe:53:19:9e: e4:09:99:f7:73:18:b3:47:55:81:a4:a6:df:01:eb:15:19:f0: 0b:af:5e:83:ba:50:d3:8a:67:39:af:6f:d0:55:8d:d3:66:43: 2b:aa:bb:fb:7d:aa:70:05:e5:16:0e:f0:68:8d:6f:ed:35:5c: 7f:d0:2a:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNjA0MDUwNzQxMDZaFw0yNjA0MTIwNzQxMDZaMBgxFjAUBgNV BAMTDTY5ZDIxMjEyLTE4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9aPc8WbBLt+X3rVfmko801JDNNJ1NQ1oAVnc4KbYnDLAeA9gTe3X9TtDIF/8C YGRroleHusDdZreqXssRT5VOpbY3aEFH+gDN2rB0WssikHkzCcOWSBDEhGT5G8MQ 1yw94pxYGEUq4hMCrwKBj2ZbAz/K/uRdPzv9E+ClXFrvSOT7QVYtt0heBCeY4WOS 4M3elcNAOUiGjn9jUsnkAo3Wxb62DbHr4ASpFEE16yZvr9d3P7+zqtDJcduf4F5N VWBu8DzPlhWIZj7tVIpkbbvKv2M+0qC7FVMvTpEaQMOBN2HVgKdrXqqEifAKEu5R Pw73/aGDgREQQ/3ZaKrVvNiLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe1fxGmSR BJ4P/3B2nL5cC0dAqmMwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJs6/h2PtXCKzQ1olXxPGBd/DOYIr5rzJNXajMtvAt9Ixnts8eFqXcu1jyoepj A6fkQB4nSQxxKS0aNw/fapRbm/Iv+NMy67SIox0ufyxnyuOM5mQPpdHjXXOSfnkG iRQqWxDQECbCtrGzdh5/QYcOIBUNLq7OUAZjnyCxEXHyGe0/mnKKm+7ovF/foQY2 mEGSgDTNXJlz0u4pxmj4Bi8W+KWdIT6cyLMDEVloObMqIshUxrKaZahE3dzUHph7 JVYkMP5TGZ7kCZn3cxizR1WBpKbfAesVGfALr16DulDTimc5r2/QVY3TZkMrqrv7 fapwBeUWDvBojW/tNVx/0CoO -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:07 2026 by rpki-client