$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: Xpj64Cfsq1TBSs1x61Z3x1jnQTYGGR6ehfGcI3xeYUg= Subject key identifier: E5:E9:EF:21:6C:5C:2A:A5:E9:8B:BB:2F:9C:82:65:17:F4:01:D5:BC Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 357B Signing time: Sat 04 Apr 2026 14:39:33 +0000 Manifest this update: Sat 04 Apr 2026 14:39:32 +0000 Manifest next update: Sat 11 Apr 2026 14:39:32 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: uPJ8enTd8NbprtBuQt20+SVpGbgplH8Mayd2q2hEsMQ=) 2: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: KXODx+nI9I+IBelGkGtFFlSKzu6f9jybWi8Lv3W1Fu8=) 3: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: ASkZLn/NWBAwVh59cVjcukQp4AEdjyXM88LF9t8bVkY=) 4: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: yHM3DnwjT+cPJR9y5D69EEWvn7HmBwkRwxEMyaTJ7Sc=) 5: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: 1QTKJD4vqX7bem3GLJ46R87e+RPm3/ksMd9HYKhn61A=) 6: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: C9kDwfmBiY6vCRGQDDyB4fRaHn0qARnsMTPVrfiPE3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13769 (0x35c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 4 14:39:32 2026 GMT Not After : Apr 11 14:39:32 2026 GMT Subject: CN=69d122a5-f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:c2:db:11:d0:e4:73:23:05:c7:dc:cc:a7: 43:04:4a:6b:0c:b5:54:d1:7b:80:fb:12:08:85:bc: 52:89:0e:ed:3a:c2:1f:9d:0c:35:e9:a9:62:29:d7: bc:4a:6b:f2:42:b3:81:26:0f:c3:37:e9:9e:51:c6: 1d:f6:a7:c2:d1:16:96:98:e9:c4:9e:d3:6e:83:1e: 5b:81:41:ec:5f:66:95:bd:3f:0f:86:ec:79:51:6b: f6:00:65:1f:39:07:fc:68:c7:2a:ac:cb:66:cb:13: 91:d8:ac:06:e8:cc:f6:3c:a5:29:28:51:15:5b:c8: 47:fd:75:ff:bf:5a:db:86:14:49:3c:ab:2f:0c:1f: 6b:fc:01:6e:59:86:0e:47:05:63:72:3f:9a:e5:74: d2:67:c0:86:8b:61:9b:74:8f:19:69:95:2d:99:3f: 31:a2:78:61:eb:5e:c9:e9:cf:6e:6a:b3:a7:45:7d: 5a:cd:60:76:a1:7c:e6:04:93:9e:3d:42:92:89:ba: 13:60:30:4e:54:7f:c8:8c:38:49:87:e6:2b:ae:f4: 00:b3:69:0d:b3:3c:e5:e7:8d:bb:21:1a:c6:c8:f0: af:f7:06:4c:fc:05:39:11:9c:03:b4:bd:bd:40:72: df:e8:57:4d:77:a0:75:d2:c3:ab:df:8e:ba:ad:9a: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:EF:21:6C:5C:2A:A5:E9:8B:BB:2F:9C:82:65:17:F4:01:D5:BC X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f1:a7:4a:ce:fa:1f:5a:3c:fd:cf:39:9f:1f:e7:ba:ae:18: cf:af:a0:e2:4b:7c:6c:2d:ef:77:e5:4d:df:ae:01:d9:a3:6a: 6b:3b:17:7a:86:71:52:87:00:94:fc:34:a8:06:d8:70:dd:f8: 85:58:4a:9c:85:17:ca:3e:53:ac:a5:db:4b:05:c4:93:1f:0d: 47:68:6b:70:fd:17:e9:14:d5:7f:e2:4e:ec:fd:ba:3b:06:b5: 31:92:d3:4e:bc:50:7e:c0:71:12:c5:b9:67:2a:94:ab:f0:89: 24:5d:9a:35:c3:84:7b:ac:a2:55:94:a3:31:22:c7:05:d3:55: 0e:1f:67:04:f5:77:ae:b0:28:8a:2f:aa:48:a6:03:1d:d0:fa: 74:2d:e5:8e:a4:e4:4b:a4:2f:0d:b9:81:3f:94:04:46:4d:c4: 05:55:61:72:d2:25:fe:d9:fb:87:8f:a2:c7:9f:6f:d8:40:26: 2a:a2:31:6b:c3:c1:c8:7d:a5:28:b2:4b:35:01:fb:c4:69:5f: 5e:0c:8f:08:80:d3:9a:08:6f:22:34:0d:3d:06:da:36:fe:5f: a5:e2:08:89:a6:62:97:5c:1b:38:1a:3c:19:55:83:0f:28:b1: 72:42:a1:ba:ca:a4:61:03:57:1e:99:25:4c:f8:a3:16:95:64: 35:4d:bf:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNDA0MTQzOTMyWhcNMjYwNDExMTQzOTMyWjAYMRYwFAYD VQQDEw02OWQxMjJhNS1mOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HbC2xHQ5HMjBcfczKdDBEprDLVU0XuA+xIIhbxSiQ7tOsIfnQw16aliKde8 SmvyQrOBJg/DN+meUcYd9qfC0RaWmOnEntNugx5bgUHsX2aVvT8Phux5UWv2AGUf OQf8aMcqrMtmyxOR2KwG6Mz2PKUpKFEVW8hH/XX/v1rbhhRJPKsvDB9r/AFuWYYO RwVjcj+a5XTSZ8CGi2GbdI8ZaZUtmT8xonhh617J6c9uarOnRX1azWB2oXzmBJOe PUKSiboTYDBOVH/IjDhJh+YrrvQAs2kNszzl5427IRrGyPCv9wZM/AU5EZwDtL29 QHLf6FdNd6B10sOr3466rZoTcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXp7yFs XCql6Yu7L5yCZRf0AdW8MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPGnSs76H1o8/c85nx/nuq4Yz6+g4kt8bC3vd+VN364B2aNqazsXeoZxUocA lPw0qAbYcN34hVhKnIUXyj5TrKXbSwXEkx8NR2hrcP0X6RTVf+JO7P26Owa1MZLT TrxQfsBxEsW5ZyqUq/CJJF2aNcOEe6yiVZSjMSLHBdNVDh9nBPV3rrAoii+qSKYD HdD6dC3ljqTkS6QvDbmBP5QERk3EBVVhctIl/tn7h4+ix59v2EAmKqIxa8PByH2l KLJLNQH7xGlfXgyPCIDTmghvIjQNPQbaNv5fpeIIiaZil1wbOBo8GVWDDyixckKh usqkYQNXHpklTPijFpVkNU2/MQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:01 2026 by rpki-client