$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft File: hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json) Hash identifier: w7ra4N1lMbMDa7fO0hii67PPYlvacAadYOxW/PMoV6Y= Subject key identifier: 67:98:EE:1A:81:CB:5D:2D:99:2D:17:87:71:71:B6:B3:62:E8:08:07 Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF Certificate issuer: /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft Manifest number: 2D Signing time: Sun 05 Apr 2026 08:03:49 +0000 Manifest this update: Sun 05 Apr 2026 08:03:49 +0000 Manifest next update: Sun 12 Apr 2026 08:03:49 +0000 Files and hashes: 1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: hGOMXZtFI0f4DARyXfJSGJQk9GUHH8l6N9wS3H1JSI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF Validity Not Before: Apr 5 08:03:49 2026 GMT Not After : Apr 12 08:03:49 2026 GMT Subject: CN=69d21765-c180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:19:b3:e9:9a:0a:e6:e2:e3:3c:31:af:9b: e5:3a:e7:8f:03:eb:b7:3e:2a:a1:cf:d6:47:14:6f: a1:ca:c9:23:fb:f1:67:3f:8b:32:e8:3a:3d:ee:22: 3e:5b:e0:3e:99:c4:92:77:bd:f9:26:d9:ac:72:c7: 8f:16:6d:27:4b:01:d5:6b:5e:f4:e2:be:d9:e5:19: a0:7b:18:44:2f:2b:2b:46:0b:c0:a8:f9:3b:0c:b6: 87:9c:73:41:69:bb:2a:53:f8:fb:01:89:10:37:14: f4:cd:a9:e6:32:eb:e2:c2:e8:01:24:f7:32:67:12: 7b:84:a3:c4:0f:fc:68:53:25:81:50:8b:d3:8b:64: 2d:a2:d9:80:74:b8:49:66:9e:43:8e:56:bd:c3:3c: cb:27:fd:30:bb:0f:62:81:98:d8:f0:f5:01:8b:00: c2:9b:0d:67:28:5f:ab:08:2f:ed:49:a3:2f:98:26: ed:7d:0e:38:04:2d:04:c5:fc:45:be:fd:11:83:1d: 7b:6f:36:c6:f8:9a:5e:74:0c:7f:ca:2c:64:2a:b1: 33:28:7e:82:93:d2:8d:ef:59:3e:b4:04:c4:7c:8f: 0f:04:c3:86:50:75:83:e5:85:7a:3e:1d:03:98:6b: c0:ad:67:55:fd:4b:17:da:63:f4:c1:aa:a8:b0:13: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:98:EE:1A:81:CB:5D:2D:99:2D:17:87:71:71:B6:B3:62:E8:08:07 X509v3 Authority Key Identifier: keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b7:49:9a:6e:b7:98:89:7e:b8:cc:71:99:35:22:a1:ba:f8: 3e:ec:a4:6d:90:de:a2:05:d6:2a:00:a8:42:84:95:ba:0c:d7: 47:a6:d4:0e:e7:dc:45:08:a0:34:08:5f:c1:af:11:c4:64:a9: 97:ca:ff:36:7b:e5:25:1c:b5:f2:9b:31:f6:56:4c:d2:3a:4b: ce:4b:c6:07:6a:bf:4f:87:ee:0c:19:3f:e4:ab:94:70:8e:71: 3c:81:cc:74:05:ff:78:c1:03:6d:5d:5d:34:94:21:64:ab:7d: de:20:62:f5:4c:95:cb:15:3a:6a:51:3f:70:19:ff:e2:eb:3c: f6:e7:98:11:ef:94:e9:65:d2:df:0e:66:7f:1d:04:1d:11:37: b5:72:c2:fb:25:bd:0a:62:63:83:34:3c:5a:07:ff:18:34:4e: f7:29:4a:80:5a:69:d8:f1:ba:a0:ce:2d:6d:a7:32:23:12:32: c9:74:a9:74:f4:58:7b:4a:d7:b3:36:ac:7f:1e:a9:75:10:bc: 56:95:94:c8:67:eb:ca:5e:82:92:b5:56:55:47:fb:90:95:c2: 2d:6e:33:13:67:49:66:66:0d:a3:d4:d9:80:47:84:ae:f3:01: cc:6b:84:29:73:e2:6e:39:5a:18:ad:98:c2:4c:4d:17:f3:3e: 72:8c:7b:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUE4QTExMC8GA1UEBRMoODQyMzMyOTFEMkRDNkFDODYwRjU0QkVFQ0U4MUQ1NEIw MzQ0MDNCRjAeFw0yNjA0MDUwODAzNDlaFw0yNjA0MTIwODAzNDlaMBgxFjAUBgNV BAMTDTY5ZDIxNzY1LWMxODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+1xmz6ZoK5uLjPDGvm+U6548D67c+KqHP1kcUb6HKySP78Wc/izLoOj3uIj5b 4D6ZxJJ3vfkm2axyx48WbSdLAdVrXvTivtnlGaB7GEQvKytGC8Co+TsMtoecc0Fp uypT+PsBiRA3FPTNqeYy6+LC6AEk9zJnEnuEo8QP/GhTJYFQi9OLZC2i2YB0uElm nkOOVr3DPMsn/TC7D2KBmNjw9QGLAMKbDWcoX6sIL+1Joy+YJu19DjgELQTF/EW+ /RGDHXtvNsb4ml50DH/KLGQqsTMofoKT0o3vWT60BMR8jw8Ew4ZQdYPlhXo+HQOY a8CtZ1X9SxfaY/TBqqiwEzIBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ5juGoHL XS2ZLReHcXG2s2LoCAcwHwYDVR0jBBgwFoAUhCMykdLcashg9UvuzoHVSwNEA78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQThBLzlGM0U1NTE2RjJE MTExRjA5ODlBRDhDRTNDNkY1NkJDL2hDTXlrZExjYXNoZzlVdnV6b0hWU3dORUE3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaENNeWtkTGNhc2hnOVV2dXpvSFZTd05FQTc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB QThBLzlGM0U1NTE2RjJEMTExRjA5ODlBRDhDRTNDNkY1NkJDL2hDTXlrZExjYXNo ZzlVdnV6b0hWU3dORUE3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDt0mabreYiX64zHGZNSKhuvg+7KRtkN6iBdYqAKhChJW6DNdHptQO59xFCKA0 CF/BrxHEZKmXyv82e+UlHLXymzH2VkzSOkvOS8YHar9Ph+4MGT/kq5RwjnE8gcx0 Bf94wQNtXV00lCFkq33eIGL1TJXLFTpqUT9wGf/i6zz255gR75TpZdLfDmZ/HQQd ETe1csL7Jb0KYmODNDxaB/8YNE73KUqAWmnY8bqgzi1tpzIjEjLJdKl09Fh7Stez Nqx/Hql1ELxWlZTIZ+vKXoKStVZVR/uQlcItbjMTZ0lmZg2j1NmAR4Su8wHMa4Qp c+JuOVoYrZjCTE0X8z5yjHsz -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:35 2026 by rpki-client