$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: JNxnWf/o358fWuThaz0fLoMOtOF5uyzrozYz7d2hLTs= Subject key identifier: 12:68:46:20:50:F3:E6:2C:8F:96:64:06:CA:B5:6F:F8:15:2B:FD:9F Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 0173 Signing time: Sun 05 Apr 2026 04:12:32 +0000 Manifest this update: Sun 05 Apr 2026 04:12:32 +0000 Manifest next update: Sun 12 Apr 2026 04:12:32 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: FuReqzrKRHZgL0ANOpJR7KnG6qTAf3v9qPtB2lffjV0=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Apr 5 04:12:32 2026 GMT Not After : Apr 12 04:12:32 2026 GMT Subject: CN=69d1e130-a178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:89:a3:ba:6a:8e:37:d5:c3:58:65:7e:99: 34:56:3c:3b:22:9b:9e:c1:34:51:fd:e2:4e:fa:30: 66:9f:eb:2f:75:eb:91:80:fb:5a:55:30:e9:9b:e1: fd:92:a5:43:b9:4a:9a:1b:67:0a:bb:e6:67:e3:39: ad:67:0f:3b:42:83:bc:7f:ad:2d:ee:d7:c6:7c:2b: 6d:10:35:72:94:f1:c0:49:36:2a:6e:96:ad:ec:29: f7:80:f2:22:a7:bb:88:89:6f:a1:da:46:78:fb:8c: bf:76:45:9c:a9:ea:b6:cc:74:16:64:60:8e:7f:21: e0:11:4c:30:12:4e:5a:eb:b4:61:80:35:48:ba:ba: 5f:4f:7f:23:be:02:71:53:a9:66:7e:15:67:69:c9: 71:17:9c:e0:e7:2f:b7:3e:65:39:f7:b8:62:c1:ea: ca:69:88:52:af:01:23:59:e6:6d:a7:61:a2:3e:0d: 21:4e:8a:f4:56:bf:40:42:6e:c5:f5:0a:05:f6:95: 87:0b:5a:2d:2d:6a:84:7c:19:c6:c7:7c:df:8f:91: 75:ca:77:47:78:1a:ce:77:76:44:59:e4:aa:10:ba: 21:21:26:8e:a6:99:ec:aa:8b:c8:b3:21:9d:b8:0a: 7a:8c:0f:24:d9:a9:97:83:f3:21:1e:26:20:94:ac: de:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:46:20:50:F3:E6:2C:8F:96:64:06:CA:B5:6F:F8:15:2B:FD:9F X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:00:6a:82:77:ee:d9:29:6c:8c:17:60:4a:bd:0e:df:ec:e3: e7:08:e2:45:17:12:16:60:2e:10:50:ea:78:c5:4d:cf:a7:5b: b1:dc:38:cf:c0:f3:41:de:1f:fe:d1:cf:f1:e0:d4:f3:d4:99: 11:5b:c6:09:f6:38:73:ef:4e:a1:b7:6a:57:41:26:bf:52:65: 88:75:76:4f:16:0a:ba:4e:65:ff:38:6e:c3:4a:2d:c9:ef:40: 47:81:e9:08:f7:04:44:eb:f0:0a:45:23:53:c9:6c:8f:ce:2f: dd:1f:3a:52:02:ff:84:cb:8f:02:35:6a:ff:55:22:be:1f:35: 95:98:13:c5:14:f9:28:f9:37:7f:9d:36:26:db:1d:6c:cb:3b: 7b:3f:07:20:ba:58:72:3e:e8:03:a7:0b:aa:70:f7:27:69:9f: 53:4f:5f:b4:cd:26:c3:fb:f2:74:de:56:8d:89:fe:36:ec:34: b2:88:ed:a0:43:dc:e3:a6:dd:b9:f2:24:d1:58:1a:a5:d3:c8: f1:dc:76:42:10:8d:ed:2e:bd:4e:77:a5:22:1b:42:db:62:d1: 7f:78:c2:f7:d8:4b:85:58:e3:99:ee:62:da:25:4a:5e:85:f1: da:52:90:67:c8:4d:4a:1d:7b:71:8b:b2:c2:ff:19:db:c3:70: 55:4f:f3:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwNDA1MDQxMjMyWhcNMjYwNDEyMDQxMjMyWjAYMRYwFAYD VQQDEw02OWQxZTEzMC1hMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhg6Jo7pqjjfVw1hlfpk0Vjw7IpuewTRR/eJO+jBmn+svdeuRgPtaVTDpm+H9 kqVDuUqaG2cKu+Zn4zmtZw87QoO8f60t7tfGfCttEDVylPHASTYqbpat7Cn3gPIi p7uIiW+h2kZ4+4y/dkWcqeq2zHQWZGCOfyHgEUwwEk5a67RhgDVIurpfT38jvgJx U6lmfhVnaclxF5zg5y+3PmU597hiwerKaYhSrwEjWeZtp2GiPg0hTor0Vr9AQm7F 9QoF9pWHC1otLWqEfBnGx3zfj5F1yndHeBrOd3ZEWeSqELohISaOppnsqovIsyGd uAp6jA8k2amXg/MhHiYglKze5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJoRiBQ 8+Ysj5ZkBsq1b/gVK/2fMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQBqgnfu2SlsjBdgSr0O3+zj5wjiRRcSFmAuEFDqeMVNz6dbsdw4z8DzQd4f /tHP8eDU89SZEVvGCfY4c+9OobdqV0Emv1JliHV2TxYKuk5l/zhuw0otye9AR4Hp CPcEROvwCkUjU8lsj84v3R86UgL/hMuPAjVq/1Uivh81lZgTxRT5KPk3f502Jtsd bMs7ez8HILpYcj7oA6cLqnD3J2mfU09ftM0mw/vydN5WjYn+Nuw0sojtoEPc46bd ufIk0VgapdPI8dx2QhCN7S69TnelIhtC22LRf3jC99hLhVjjme5i2iVKXoXx2lKQ Z8hNSh17cYuywv8Z28NwVU/zJA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:26 2026 by rpki-client