$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: cDBpWo0BU1p/wajtUZDv0iIWBbKiJ8b0FYb6UmlC9HI= Subject key identifier: 0A:01:FE:B7:37:F2:E7:22:E9:93:00:55:D0:6F:D2:D3:20:C3:AF:56 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 0841 Signing time: Sat 04 Apr 2026 20:39:43 +0000 Manifest this update: Sat 04 Apr 2026 20:39:43 +0000 Manifest next update: Sat 11 Apr 2026 20:39:43 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: xiF1XHTi58JUlMMQ7AfbcGgueN9DMKyKe/WxXEJjxW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Apr 4 20:39:43 2026 GMT Not After : Apr 11 20:39:43 2026 GMT Subject: CN=69d1770f-010d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:73:36:3c:5c:52:eb:1f:63:4e:87:fd:91: af:0f:0e:8d:30:df:a1:b9:bb:75:b9:5b:aa:f3:a0: 41:24:45:ec:76:80:3a:2f:6a:55:1d:53:cc:1d:e0: 5a:6b:2e:50:fc:f9:f0:bb:36:b5:8e:1b:fb:dc:0e: b9:49:dc:eb:7c:11:f1:59:dd:44:30:b6:d6:29:8a: ec:ca:87:7f:c0:94:8e:f9:0a:71:09:97:57:1d:e6: 09:77:cd:cc:58:82:5d:a6:90:63:b0:ca:4f:cd:c3: 02:e2:2e:9c:af:c4:99:96:d8:da:a4:51:ad:3e:8f: 1f:69:c4:39:6a:27:a8:05:5e:4d:65:6f:a7:58:26: cc:88:ed:92:eb:b7:b2:8b:d6:a5:4d:3e:b8:9f:20: f4:31:0a:45:5f:00:97:e6:36:3f:9a:c7:25:63:0e: 17:57:fb:0c:7d:fc:d6:2c:2a:44:b0:0c:06:ad:4e: d8:be:3c:c1:15:33:20:72:35:e2:50:69:ea:3a:10: c3:f1:d5:4f:7f:1b:36:52:e6:07:48:b7:cd:1d:62: 16:9e:bc:e1:1b:8a:60:aa:d9:3e:92:e6:95:3d:aa: 3f:ed:34:0d:3c:52:d6:97:7c:65:b5:28:29:98:7d: 09:35:b3:2f:7a:6f:18:3e:5f:d9:e9:2d:44:9f:78: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:01:FE:B7:37:F2:E7:22:E9:93:00:55:D0:6F:D2:D3:20:C3:AF:56 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:27:a2:82:d8:94:63:14:03:9c:99:a3:71:35:f7:c5:bc: 66:27:67:34:0e:c0:de:ad:2b:6c:7a:38:cf:5c:42:af:d0:71: 67:4a:1c:86:20:77:6e:3f:df:32:6a:9e:4f:a1:ca:21:f0:51: 76:d4:1d:f8:f9:9b:45:4b:43:02:61:87:91:ce:f4:80:b6:5b: 38:0e:d9:ff:28:8b:4d:0f:91:59:c3:74:a7:23:eb:7b:f1:82: ff:a6:1b:0d:e7:0f:33:ca:6a:77:09:08:21:83:74:b3:87:98: 57:02:65:ea:e1:76:eb:8e:51:6d:ce:93:a6:52:d8:2a:f5:b2: 75:0a:f8:cf:c9:d5:07:d2:84:a2:29:e6:a2:a5:60:dd:ae:47: 2e:f4:6d:3f:49:d3:49:3b:2d:9a:0c:ed:c7:0f:97:4c:b7:f3: 4d:87:c1:bf:f1:1d:9a:3f:41:3f:86:03:e8:0c:95:82:e6:99: 1d:c8:af:45:7b:f3:5b:c9:6b:7b:1f:42:08:db:4d:04:6c:50: 35:84:15:85:78:61:15:0f:ce:10:af:5b:55:8f:5b:4d:08:6d: 29:fa:ae:84:92:f3:86:ec:6a:11:ef:69:1d:e4:70:2f:12:60: 86:67:cf:cc:31:9c:35:e9:4d:56:42:70:cd:51:8e:13:26:0c: 54:0f:d0:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwNDA0MjAzOTQzWhcNMjYwNDExMjAzOTQzWjAYMRYwFAYD VQQDEw02OWQxNzcwZi0wMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F1zNjxcUusfY06H/ZGvDw6NMN+hubt1uVuq86BBJEXsdoA6L2pVHVPMHeBa ay5Q/Pnwuza1jhv73A65SdzrfBHxWd1EMLbWKYrsyod/wJSO+QpxCZdXHeYJd83M WIJdppBjsMpPzcMC4i6cr8SZltjapFGtPo8facQ5aieoBV5NZW+nWCbMiO2S67ey i9alTT64nyD0MQpFXwCX5jY/msclYw4XV/sMffzWLCpEsAwGrU7YvjzBFTMgcjXi UGnqOhDD8dVPfxs2UuYHSLfNHWIWnrzhG4pgqtk+kuaVPao/7TQNPFLWl3xltSgp mH0JNbMvem8YPl/Z6S1En3hJpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoB/rc3 8uci6ZMAVdBv0tMgw69WMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABcQnooLYlGMUA5yZo3E198W8ZidnNA7A3q0rbHo4z1xCr9BxZ0ochiB3bj/f MmqeT6HKIfBRdtQd+PmbRUtDAmGHkc70gLZbOA7Z/yiLTQ+RWcN0pyPre/GC/6Yb DecPM8pqdwkIIYN0s4eYVwJl6uF2645Rbc6TplLYKvWydQr4z8nVB9KEoinmoqVg 3a5HLvRtP0nTSTstmgztxw+XTLfzTYfBv/Edmj9BP4YD6AyVguaZHcivRXvzW8lr ex9CCNtNBGxQNYQVhXhhFQ/OEK9bVY9bTQhtKfquhJLzhuxqEe9pHeRwLxJghmfP zDGcNelNVkJwzVGOEyYMVA/Qjg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:21 2026 by rpki-client