$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: YotXUMozwsxOdhe6LNi1TYQHXPnDy4MZl9hv8yWE6+E= Subject key identifier: E5:C9:E6:75:5F:E1:4E:A9:CE:3B:74:58:4B:46:67:A0:54:C1:24:80 Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 022E Signing time: Sun 05 Apr 2026 02:23:21 +0000 Manifest this update: Sun 05 Apr 2026 02:23:21 +0000 Manifest next update: Sun 12 Apr 2026 02:23:21 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: OB67qUnfS1vSYmMy8dn8uAilcnci1jsLrsMdeyRFmKU=) 2: 3C4FDE3C0FCA11F18E293E94403D8C67.roa (hash: WfW3TvX//PVo0P/ZBW64rIIqCW2R7aTX6JlE3iuszp0=) 3: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: 7FkfyTgMYCNyYJWlTpM6j8Of7FP+cV14dFT59AfozbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Apr 5 02:23:21 2026 GMT Not After : Apr 12 02:23:21 2026 GMT Subject: CN=69d1c799-e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:be:e9:de:17:a7:db:94:10:81:f1:0b:52: b4:df:3e:de:7f:51:04:f2:99:d9:0f:64:02:e4:2d: 2d:77:0f:04:2f:88:47:a6:df:48:ea:7d:b7:00:4c: b3:47:d6:da:94:9c:db:9c:d9:8e:f9:c9:41:93:3f: fd:f9:9b:0d:cc:47:ae:72:ab:ed:76:89:14:b6:71: c4:9f:88:5e:03:6d:fe:8c:96:e8:e0:a5:ef:c3:cf: ca:6a:72:58:c6:81:cc:58:e6:22:d7:a8:1b:b2:60: 75:96:7c:34:b5:00:24:aa:4c:5c:b9:c3:e6:51:13: a3:75:98:90:31:41:28:a8:0e:67:b5:bf:0d:bc:f3: 7c:ed:26:81:b1:77:b8:08:ca:fd:8c:95:3d:9b:47: 59:fb:2c:25:30:79:80:44:12:b7:6e:c8:6b:3c:0b: 63:44:de:70:9b:5e:83:7e:ab:af:68:aa:80:f1:52: e2:5a:f6:a4:77:c1:58:3d:90:fc:68:8c:ed:cb:d1: 70:93:74:ea:9e:56:2f:33:28:94:e1:19:7d:2a:d4: 0a:d6:cc:13:20:b5:ae:e2:6a:c7:2e:90:7c:ca:91: 70:4c:1c:49:86:2b:08:a1:1d:b6:2e:ad:d0:f4:40: b1:e6:08:ce:8c:04:1e:af:5d:f1:47:66:c5:d8:f1: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C9:E6:75:5F:E1:4E:A9:CE:3B:74:58:4B:46:67:A0:54:C1:24:80 X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:92:3d:8e:9c:2f:57:84:a0:e5:0a:44:e7:8d:ba:00:4a: c9:70:19:9e:60:88:ba:0b:0e:ce:9d:6e:99:78:af:84:35:08: 67:13:d0:62:37:9c:1d:e6:7d:82:cb:e9:ca:56:5f:14:46:d5: be:24:cd:96:6b:62:45:8f:f5:14:63:bf:f4:91:86:3f:5c:7d: 4d:d4:9d:e0:1d:13:f0:41:31:6b:1d:7c:fc:7a:32:94:ab:4f: d5:4c:d3:ee:aa:db:3c:d7:57:4c:85:d1:8c:98:e7:69:90:dd: 5e:2d:8f:98:d4:ed:43:ed:5a:a9:ee:aa:ac:99:39:2f:20:5a: d1:15:c4:34:48:c2:d9:02:e5:9c:95:f0:61:5e:55:f2:40:08: d9:da:6f:61:b1:cd:ea:c6:d0:10:b2:7d:21:ee:de:a3:ca:30: d1:8f:d6:50:67:35:07:3b:59:8b:33:d6:0b:d9:6d:8b:5e:ec: 4f:ef:dd:d9:e2:ee:81:4b:b7:e0:98:ca:ea:23:37:73:ae:d3: 96:53:10:22:a1:25:04:69:07:e7:c8:46:06:ba:39:43:a7:a5: 89:ba:99:c2:f5:1f:97:2c:45:38:21:c0:2f:46:b0:16:56:8f: f2:75:a5:62:1f:e1:3e:72:7a:b4:1c:34:51:bc:dd:fb:39:d9: aa:60:86:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjYwNDA1MDIyMzIxWhcNMjYwNDEyMDIyMzIxWjAYMRYwFAYD VQQDEw02OWQxYzc5OS1lM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxK+6d4Xp9uUEIHxC1K03z7ef1EE8pnZD2QC5C0tdw8EL4hHpt9I6n23AEyz R9balJzbnNmO+clBkz/9+ZsNzEeucqvtdokUtnHEn4heA23+jJbo4KXvw8/KanJY xoHMWOYi16gbsmB1lnw0tQAkqkxcucPmUROjdZiQMUEoqA5ntb8NvPN87SaBsXe4 CMr9jJU9m0dZ+ywlMHmARBK3bshrPAtjRN5wm16DfquvaKqA8VLiWvakd8FYPZD8 aIzty9Fwk3TqnlYvMyiU4Rl9KtQK1swTILWu4mrHLpB8ypFwTBxJhisIoR22Lq3Q 9ECx5gjOjAQer13xR2bF2PEg5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXJ5nVf 4U6pzjt0WEtGZ6BUwSSAMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrySPY6cL1eEoOUKROeNugBKyXAZnmCIugsOzp1umXivhDUIZxPQYjecHeZ9 gsvpylZfFEbVviTNlmtiRY/1FGO/9JGGP1x9TdSd4B0T8EExax18/HoylKtP1UzT 7qrbPNdXTIXRjJjnaZDdXi2PmNTtQ+1aqe6qrJk5LyBa0RXENEjC2QLlnJXwYV5V 8kAI2dpvYbHN6sbQELJ9Ie7eo8ow0Y/WUGc1BztZizPWC9lti17sT+/d2eLugUu3 4JjK6iM3c67TllMQIqElBGkH58hGBro5Q6elibqZwvUflyxFOCHAL0awFlaP8nWl Yh/hPnJ6tBw0Ubzd+znZqmCGtQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:13 2026 by rpki-client