$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json) Hash identifier: fGj4YzVaDNzyeR72keRZMEmfqs1T6ZscjQ04I2Bhav0= Subject key identifier: 8F:D5:96:04:A5:C6:2B:7A:6D:33:B6:4C:F8:5B:C7:A7:A8:DB:CD:C9 Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft Manifest number: 0521 Signing time: Sat 04 Apr 2026 23:22:10 +0000 Manifest this update: Sat 04 Apr 2026 23:22:10 +0000 Manifest next update: Sat 11 Apr 2026 23:22:10 +0000 Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: afX24yaYMWehcP+AttE+4Fcgpa3ebqlPb0JG6YZGNe4=) 2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Validity Not Before: Apr 4 23:22:10 2026 GMT Not After : Apr 11 23:22:10 2026 GMT Subject: CN=69d19d22-f869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:1a:6b:76:b5:10:ce:dd:0f:45:c8:dd:33: 5a:9a:4a:a6:0b:43:db:52:bd:f5:5e:25:81:d4:f4: 7c:95:18:a0:28:81:5c:43:46:e3:5d:a7:65:28:3a: 14:97:d0:86:1d:31:9a:10:a5:9d:b5:db:46:ca:a3: 76:7c:e4:62:36:d3:7c:84:8a:29:5a:e5:be:02:60: 02:48:aa:ff:17:a6:14:3e:e1:d2:f1:ff:79:6e:1c: c3:ed:01:1b:6e:27:01:10:61:b1:db:02:9e:73:52: f8:ff:6c:d2:07:40:06:7e:2d:42:ba:94:42:77:fd: 28:5a:e4:5d:1d:6f:f4:7b:1a:56:36:00:5f:86:29: 1b:12:93:b2:ac:35:0c:04:1b:68:9c:5c:c3:58:2e: 72:6b:94:10:3f:6b:f3:a0:b9:7b:01:fe:6c:7a:a8: 14:bc:d7:3c:c7:e5:8f:ba:b2:e0:90:cc:7d:46:1a: 50:58:5d:ce:34:d8:9b:26:13:e9:f6:98:6d:0f:12: ee:f1:5a:8e:39:97:82:b2:f3:53:ee:68:7a:b3:00: 01:c4:89:ac:6d:03:4f:61:8f:e8:b5:46:96:37:4a: 42:bd:20:c7:b1:49:fd:a0:92:f4:2b:41:17:d2:4f: 17:6b:c5:63:e8:5e:77:73:15:4a:02:2e:5b:6e:e1: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:96:04:A5:C6:2B:7A:6D:33:B6:4C:F8:5B:C7:A7:A8:DB:CD:C9 X509v3 Authority Key Identifier: keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:8c:ef:5a:79:ed:ef:8c:f6:8c:be:04:33:0e:87:19:dc: 06:54:9f:c0:b4:11:38:29:1c:c5:bf:2a:b4:65:cf:a9:8b:5d: c8:22:37:74:91:ab:5b:bd:9e:07:92:7b:d9:f8:af:9a:49:9c: 0f:f6:8f:50:18:fd:fe:14:a9:83:b4:6f:71:05:2c:86:69:77: ff:89:e2:b6:33:24:99:62:d0:7e:0c:e8:e6:52:6b:bb:d9:86: f4:50:c3:69:50:0a:15:ab:49:d6:aa:52:75:4a:c2:4a:fa:7b: f2:e5:00:c7:af:36:a5:32:0a:22:e7:74:34:6c:11:7b:2a:d4: 2a:ad:6c:06:8c:c8:ba:32:07:59:87:f8:24:b0:c0:32:5f:33: 53:fd:3c:b3:fd:b5:b3:86:18:3c:36:60:54:9e:2b:b6:2c:82: 14:c3:5f:2c:55:ac:84:f5:c9:14:98:4c:7e:b9:ba:ba:d4:45: 74:bb:62:c7:92:cb:d6:c9:4e:67:db:d4:cc:85:5c:0b:34:a9: a1:eb:86:c7:f2:45:6d:c7:00:f7:e1:90:48:71:fd:21:a3:5b: dd:d3:2c:53:51:25:71:47:28:66:3a:b3:60:11:f0:b7:24:60: 1f:3f:21:8d:5c:16:0b:14:ed:f2:69:71:d0:5e:26:ee:9f:e3: 57:e8:fa:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2 MUM0MUQ5OUEwHhcNMjYwNDA0MjMyMjEwWhcNMjYwNDExMjMyMjEwWjAYMRYwFAYD VQQDEw02OWQxOWQyMi1mODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1caa3a1EM7dD0XI3TNamkqmC0PbUr31XiWB1PR8lRigKIFcQ0bjXadlKDoU l9CGHTGaEKWdtdtGyqN2fORiNtN8hIopWuW+AmACSKr/F6YUPuHS8f95bhzD7QEb bicBEGGx2wKec1L4/2zSB0AGfi1CupRCd/0oWuRdHW/0expWNgBfhikbEpOyrDUM BBtonFzDWC5ya5QQP2vzoLl7Af5seqgUvNc8x+WPurLgkMx9RhpQWF3ONNibJhPp 9phtDxLu8VqOOZeCsvNT7mh6swABxImsbQNPYY/otUaWN0pCvSDHsUn9oJL0K0EX 0k8Xa8Vj6F53cxVKAi5bbuEF9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/VlgSl xit6bTO2TPhbx6eo283JMB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ M2M5TnpvUW93enRoeEIyWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANbyM71p57e+M9oy+BDMOhxncBlSfwLQROCkcxb8qtGXPqYtdyCI3dJGrW72e B5J72fivmkmcD/aPUBj9/hSpg7RvcQUshml3/4nitjMkmWLQfgzo5lJru9mG9FDD aVAKFatJ1qpSdUrCSvp78uUAx682pTIKIud0NGwReyrUKq1sBozIujIHWYf4JLDA Ml8zU/08s/21s4YYPDZgVJ4rtiyCFMNfLFWshPXJFJhMfrm6utRFdLtix5LL1slO Z9vUzIVcCzSpoeuGx/JFbccA9+GQSHH9IaNb3dMsU1ElcUcoZjqzYBHwtyRgHz8h jVwWCxTt8mlx0F4m7p/jV+j6vA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:13:55 2026 by rpki-client