$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: rX6LiL6KSoxBz9To1wG/XuwVIfGbU17p2QnRA+r8n2s= Subject key identifier: 96:51:1C:C8:13:FA:A2:C0:D5:CD:D8:E4:BF:3F:1D:22:7E:51:E5:AC Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 04D7 Signing time: Sun 26 Apr 2026 23:47:07 +0000 Manifest this update: Sun 26 Apr 2026 23:47:07 +0000 Manifest next update: Sun 03 May 2026 23:47:07 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: ejoGWseltdyzWmAPf1Zn+uV2LvZOSgKQUs3SO2FfQtY=) 2: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=) 3: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Apr 26 23:47:07 2026 GMT Not After : May 3 23:47:07 2026 GMT Subject: CN=69eea3fb-8fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:c6:d6:28:ce:3e:4b:c8:af:91:34:28:87: 2a:49:e8:5f:c5:92:65:cb:5c:75:c2:da:13:3e:b4: 8c:a3:83:fb:53:21:a0:45:6a:d4:3d:bd:78:96:23: 68:c3:1e:9c:40:9d:c1:9b:1b:76:2d:17:d9:f5:8e: 25:0c:d5:c0:32:cf:ea:e4:ab:9b:c7:f1:9d:be:6f: e8:3f:b4:0d:20:c4:39:3a:ee:b5:44:55:f7:0e:70: c2:05:57:b6:b1:a2:98:db:9b:37:2f:4e:76:cc:0c: 5e:a8:30:70:95:7f:59:24:08:5e:34:e2:3e:78:35: 1c:f8:0f:97:c6:76:b6:d5:a5:c0:19:02:fa:71:56: 95:ae:4b:a2:5a:5f:87:15:85:5c:f3:c7:99:e9:af: 19:6d:ca:e0:f9:d1:8c:2d:46:1d:d6:ed:a9:48:de: 0e:cd:a3:24:7f:ec:7e:02:47:10:b7:73:1c:04:ce: e1:3e:39:18:36:25:eb:97:1e:43:f3:18:1c:3b:d0: 36:9f:b3:30:57:0b:ec:c6:bb:a9:e3:8e:07:51:ac: fe:87:71:1e:92:83:f3:02:ca:4e:8e:5f:ad:4e:2b: e8:d9:b7:a5:0b:4d:14:19:b7:b9:fc:51:fd:bf:a6: 6b:8f:5b:bd:76:d4:86:5f:de:f0:65:a6:43:9c:4c: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:1C:C8:13:FA:A2:C0:D5:CD:D8:E4:BF:3F:1D:22:7E:51:E5:AC X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:74:47:98:b7:f9:7f:b8:24:ee:d9:6e:b8:5a:e5:27:45:8a: 74:bf:f2:9c:03:32:4a:90:32:71:79:d8:fb:e9:50:3e:3d:63: eb:80:67:ef:41:95:57:dd:be:6d:fe:6a:61:93:62:20:01:ca: 7d:bd:bb:6a:f4:09:e3:5a:04:59:c7:2c:fd:e7:34:e9:52:cc: bf:5d:05:44:8a:f7:c5:fe:81:7f:a2:6d:fa:f6:5b:b9:5c:30: 10:31:21:42:f9:3c:b6:d4:9d:50:5c:77:6b:2b:02:9b:16:97: a5:a9:5a:a7:00:b3:35:88:66:0a:d7:00:51:a6:07:f3:d3:09: a1:02:f7:3c:6e:64:dc:e3:71:cb:90:68:0f:74:a4:ad:fd:f4: 19:ce:9c:e0:c1:f7:86:f4:f2:87:08:20:58:01:d9:c6:ad:35: 48:32:b6:8d:e8:bd:18:32:75:e0:70:aa:fe:ee:1f:b4:0b:3a: d7:b9:69:9e:68:ae:f6:be:d1:9d:74:bb:63:a6:31:48:6d:2e: 14:42:e0:4a:4a:93:08:ee:37:dc:7d:04:20:d6:25:db:71:85: b8:c1:76:45:5d:46:9a:fd:c5:38:e8:cf:a9:d5:a9:6f:f0:09: 3d:10:75:27:49:e3:40:c4:72:72:d9:71:85:16:a3:a3:47:3f: ac:20:a3:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjYwNDI2MjM0NzA3WhcNMjYwNTAzMjM0NzA3WjAYMRYwFAYD VQQDEw02OWVlYTNmYi04ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E7G1ijOPkvIr5E0KIcqSehfxZJly1x1wtoTPrSMo4P7UyGgRWrUPb14liNo wx6cQJ3Bmxt2LRfZ9Y4lDNXAMs/q5Kubx/Gdvm/oP7QNIMQ5Ou61RFX3DnDCBVe2 saKY25s3L052zAxeqDBwlX9ZJAheNOI+eDUc+A+Xxna21aXAGQL6cVaVrkuiWl+H FYVc88eZ6a8Zbcrg+dGMLUYd1u2pSN4OzaMkf+x+AkcQt3McBM7hPjkYNiXrlx5D 8xgcO9A2n7MwVwvsxrup444HUaz+h3EekoPzAspOjl+tTivo2belC00UGbe5/FH9 v6Zrj1u9dtSGX97wZaZDnEzuUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZRHMgT +qLA1c3Y5L8/HSJ+UeWsMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXRHmLf5f7gk7tluuFrlJ0WKdL/ynAMySpAycXnY++lQPj1j64Bn70GVV92+ bf5qYZNiIAHKfb27avQJ41oEWccs/ec06VLMv10FRIr3xf6Bf6Jt+vZbuVwwEDEh Qvk8ttSdUFx3aysCmxaXpalapwCzNYhmCtcAUaYH89MJoQL3PG5k3ONxy5BoD3Sk rf30Gc6c4MH3hvTyhwggWAHZxq01SDK2jei9GDJ14HCq/u4ftAs617lpnmiu9r7R nXS7Y6YxSG0uFELgSkqTCO433H0EINYl23GFuMF2RV1Gmv3FOOjPqdWpb/AJPRB1 J0njQMRyctlxhRajo0c/rCCjBw== -----END CERTIFICATE-----Generated at Tue Apr 28 17:28:32 2026 by rpki-client