$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: SrbGXNUa749xDUrD3c3lvzfZ8CDx+t/gTmtv5cQh1f4= Subject key identifier: 8A:5F:11:F5:27:0D:40:4A:E4:BD:C6:3E:B0:F3:DC:B4:49:2D:C9:5C Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 358E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 355C Signing time: Sat 04 Apr 2026 14:34:26 +0000 Manifest this update: Sat 04 Apr 2026 14:34:26 +0000 Manifest next update: Sat 11 Apr 2026 14:34:26 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: atn9oxG0FDtWG9FefrmRhkLu2RLnx/38Y6vlE4xxfLY=) 2: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: mYW3nKsnG4GE83HF25tjaBek0p6fEGk2hgZHM+Eo7hs=) 3: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: Ehg/3ByY4in17WS9HIHSCx7iYIaT6e+zSPAMzsvhayg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13710 (0x358e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Apr 4 14:34:26 2026 GMT Not After : Apr 11 14:34:26 2026 GMT Subject: CN=69d12172-2059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:a5:e5:9e:a9:17:19:17:6c:32:41:84:e1: e5:29:28:90:24:cc:a9:09:62:04:a5:07:ca:b8:1b: 1a:b3:ff:21:f6:e3:80:ac:6d:42:a1:32:60:08:6e: 98:9a:d5:17:57:93:b2:60:08:34:46:c7:5d:5d:80: 13:04:23:d1:44:a4:90:3f:42:46:1b:f0:93:d0:4c: 89:dd:61:06:5e:95:7e:67:e3:d9:07:09:58:4e:e3: ee:87:97:3f:29:c7:61:f3:aa:66:bc:2f:44:be:d8: 88:08:4c:7a:75:98:2b:3f:9f:52:0c:b7:4a:ad:19: b1:fa:0d:10:2f:25:cf:09:10:e9:fc:da:78:1f:c8: ff:f4:b5:7e:24:19:0d:64:5b:3a:e3:d3:23:ef:12: c5:6b:e0:74:07:d1:41:85:34:49:a5:a2:fa:29:ef: 06:12:1a:0a:f0:60:82:51:9e:8d:3f:b3:d2:eb:25: 7b:ec:55:3f:13:23:05:9d:23:bb:57:0f:3e:1e:5a: 17:b4:4f:32:4d:1b:1c:16:c9:a5:b9:13:a0:aa:e6: 32:3f:c9:af:73:7f:a6:b0:47:56:e4:18:93:9a:1e: 7a:11:b6:c7:de:84:74:79:f0:44:20:a2:09:03:dc: c0:a1:86:89:01:6a:ed:48:ca:28:c2:05:59:09:bc: 9d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:11:F5:27:0D:40:4A:E4:BD:C6:3E:B0:F3:DC:B4:49:2D:C9:5C X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fe:a8:26:fb:07:c4:65:eb:40:24:66:7e:9b:e3:e7:20:5c: c1:cb:f4:95:37:cc:c4:e8:47:2d:27:65:53:b8:d6:55:a2:fc: b7:d3:00:37:48:dd:95:d7:b8:e7:f5:49:70:16:a7:59:62:b7: 2f:45:bd:5e:ae:33:15:ae:5c:90:6d:65:c2:84:f4:f4:a0:18: 9a:aa:07:92:8e:1d:63:5f:40:ba:ea:6d:e2:f1:51:43:1d:d4: a3:cf:63:6a:c9:43:1a:01:d6:18:f8:13:9f:cc:51:6b:9f:de: f7:78:cb:d3:de:4e:d1:35:67:f6:db:6a:be:8d:03:39:1b:f2: 4b:18:24:eb:88:93:3b:e3:38:e1:f1:46:e6:cf:93:e9:1e:0f: 82:f6:5e:ec:ca:c6:d7:66:db:7e:3d:67:00:e2:ff:e6:eb:9d: 1f:a7:56:89:50:2c:5a:21:64:d6:0c:41:c3:b8:f8:66:28:20: fe:c4:71:0e:9f:6f:dc:b2:19:a2:9e:8c:a9:3f:5d:b2:43:ed: 1e:d4:e4:71:db:1e:53:02:f6:71:ea:92:d4:4d:5a:b0:d5:2f: 26:2d:10:8e:26:fa:f4:81:72:d9:6b:b6:3c:20:1c:09:75:c3: 69:c8:9a:09:d5:f3:33:db:9d:9f:34:64:31:46:da:d2:2e:ad: 1c:40:d6:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjYwNDA0MTQzNDI2WhcNMjYwNDExMTQzNDI2WjAYMRYwFAYD VQQDEw02OWQxMjE3Mi0yMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Wl5Z6pFxkXbDJBhOHlKSiQJMypCWIEpQfKuBsas/8h9uOArG1CoTJgCG6Y mtUXV5OyYAg0RsddXYATBCPRRKSQP0JGG/CT0EyJ3WEGXpV+Z+PZBwlYTuPuh5c/ Kcdh86pmvC9EvtiICEx6dZgrP59SDLdKrRmx+g0QLyXPCRDp/Np4H8j/9LV+JBkN ZFs649Mj7xLFa+B0B9FBhTRJpaL6Ke8GEhoK8GCCUZ6NP7PS6yV77FU/EyMFnSO7 Vw8+HloXtE8yTRscFsmluROgquYyP8mvc3+msEdW5BiTmh56EbbH3oR0efBEIKIJ A9zAoYaJAWrtSMoowgVZCbydbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpfEfUn DUBK5L3GPrDz3LRJLclcMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAov6oJvsHxGXrQCRmfpvj5yBcwcv0lTfMxOhHLSdlU7jWVaL8t9MAN0jdlde4 5/VJcBanWWK3L0W9Xq4zFa5ckG1lwoT09KAYmqoHko4dY19Auupt4vFRQx3Uo89j aslDGgHWGPgTn8xRa5/e93jL095O0TVn9ttqvo0DORvySxgk64iTO+M44fFG5s+T 6R4PgvZe7MrG12bbfj1nAOL/5uudH6dWiVAsWiFk1gxBw7j4Zigg/sRxDp9v3LIZ op6MqT9dskPtHtTkcdseUwL2ceqS1E1asNUvJi0Qjib69IFy2Wu2PCAcCXXDacia CdXzM9udnzRkMUba0i6tHEDWrA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:57:07 2026 by rpki-client