$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: /zYarRSDD9S9V4E+wEfW6dgKmpTHCUde9rrExz8V3+Y= Subject key identifier: 7F:42:46:AC:1C:CE:30:84:D0:DB:13:E1:AB:E7:49:50:6B:20:93:AB Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 17DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 17CE Signing time: Sat 04 Apr 2026 16:27:51 +0000 Manifest this update: Sat 04 Apr 2026 16:27:51 +0000 Manifest next update: Sat 11 Apr 2026 16:27:51 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: +rVq2kbgNzc2XaeSH0v2GpqqLChOuWWgDemJbKmF6hA=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: v3H/p5Ktvsz+MkxJKek+k3rhTh/FkFVJc40/XtTzh38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6107 (0x17db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Apr 4 16:27:51 2026 GMT Not After : Apr 11 16:27:51 2026 GMT Subject: CN=69d13c07-b40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:d2:39:69:3b:7b:ec:68:a0:c2:0a:dc:40: c7:f1:fa:a1:01:61:88:31:10:2c:63:96:30:86:c5: 47:ed:ff:0e:02:97:ff:8c:b1:4f:d6:7d:72:92:6d: 40:04:90:a6:43:0b:bc:25:ef:8f:e5:a9:83:28:6e: 18:d9:5e:31:ea:23:6b:60:2a:3c:ec:00:b0:03:83: 56:7a:63:41:03:14:25:3c:86:b8:3d:e2:94:79:d0: 39:6c:c5:80:07:6d:3e:d8:9a:24:66:a4:1f:b4:e0: c6:c9:ab:a0:94:ba:58:e6:95:64:df:c2:6f:14:12: ff:e8:f9:5d:42:16:4a:19:76:cd:c6:03:78:5d:17: cb:d2:18:9f:ef:17:e6:fa:d7:9e:80:dc:89:87:f2: 3b:50:70:c5:46:7e:5c:76:2a:38:d6:16:81:7a:19: 82:8a:01:d3:61:dd:df:48:8b:3c:df:bc:16:48:6e: 22:15:24:12:d0:62:28:7f:c3:34:4c:5f:30:fd:ba: 7d:77:17:63:a2:77:ca:b1:d2:33:56:80:79:64:72: 1b:f9:48:d0:fc:4f:df:da:dd:af:03:71:c1:72:f5: 2a:3c:40:c1:10:df:84:0c:a8:aa:48:53:5b:dd:79: 8c:96:49:34:b8:c5:69:14:97:56:df:d4:db:c0:b0: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:46:AC:1C:CE:30:84:D0:DB:13:E1:AB:E7:49:50:6B:20:93:AB X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:28:dd:83:90:19:d2:36:f5:93:95:c3:27:86:cf:09:a2: 03:3a:01:a8:7a:c0:4f:c2:cf:0b:b0:33:08:b2:57:ea:c0:86: 64:5a:75:43:63:fe:e2:c6:ca:39:ce:8c:68:49:a4:2d:cd:db: 53:53:e4:82:88:80:dd:c4:d2:ac:58:f8:1a:09:c3:82:03:ae: a6:3f:49:18:4a:65:14:ca:e7:bf:88:aa:c5:3d:6a:0d:ac:5b: 04:4a:5e:ad:10:c5:5f:16:e1:da:19:50:4f:64:96:9a:67:d7: b3:1a:5c:c6:28:f2:b1:50:4c:45:59:9f:2c:72:01:df:2c:29: 8f:98:a4:c5:f3:97:ea:b3:83:5d:47:2e:1e:12:cf:95:74:14: 6f:b3:22:9a:16:d2:a0:ca:97:55:be:b7:ba:77:37:e0:47:61: b0:31:67:ea:db:90:52:6a:cb:ec:cc:ea:94:d0:88:f4:ce:da: cf:c1:b1:25:07:c2:f5:ec:d4:fd:31:97:11:77:ae:c7:df:a9: 97:aa:4e:bd:2a:00:97:ae:0e:a0:e6:68:f9:ef:0e:8d:46:fa: bc:4d:00:02:2b:41:24:4c:80:ed:9d:eb:6a:00:a9:7d:74:d3: e2:24:63:57:10:5d:12:b0:e0:15:9a:9d:ec:ce:53:4b:ba:3e: 3c:41:ef:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjYwNDA0MTYyNzUxWhcNMjYwNDExMTYyNzUxWjAYMRYwFAYD VQQDEw02OWQxM2MwNy1iNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zrSOWk7e+xooMIK3EDH8fqhAWGIMRAsY5YwhsVH7f8OApf/jLFP1n1ykm1A BJCmQwu8Je+P5amDKG4Y2V4x6iNrYCo87ACwA4NWemNBAxQlPIa4PeKUedA5bMWA B20+2JokZqQftODGyauglLpY5pVk38JvFBL/6PldQhZKGXbNxgN4XRfL0hif7xfm +teegNyJh/I7UHDFRn5cdio41haBehmCigHTYd3fSIs837wWSG4iFSQS0GIof8M0 TF8w/bp9dxdjonfKsdIzVoB5ZHIb+UjQ/E/f2t2vA3HBcvUqPEDBEN+EDKiqSFNb 3XmMlkk0uMVpFJdW39TbwLAX4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9CRqwc zjCE0NsT4avnSVBrIJOrMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5co3YOQGdI29ZOVwyeGzwmiAzoBqHrAT8LPC7AzCLJX6sCGZFp1Q2P+4sbK Oc6MaEmkLc3bU1PkgoiA3cTSrFj4GgnDggOupj9JGEplFMrnv4iqxT1qDaxbBEpe rRDFXxbh2hlQT2SWmmfXsxpcxijysVBMRVmfLHIB3ywpj5ikxfOX6rODXUcuHhLP lXQUb7MimhbSoMqXVb63unc34EdhsDFn6tuQUmrL7MzqlNCI9M7az8GxJQfC9ezU /TGXEXeux9+pl6pOvSoAl64OoOZo+e8OjUb6vE0AAitBJEyA7Z3ragCpfXTT4iRj VxBdErDgFZqd7M5TS7o+PEHvbQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:06:06 2026 by rpki-client