$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: GfUXfZXABpiPvanKZcOvKqUvgJfIyqEURjE3icZYwyg= Subject key identifier: 1D:1B:F2:57:E1:64:6D:0E:7D:29:9F:5C:E5:E2:00:5B:67:40:46:7B Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 06B1 Signing time: Sat 04 Apr 2026 22:29:27 +0000 Manifest this update: Sat 04 Apr 2026 22:29:26 +0000 Manifest next update: Sat 11 Apr 2026 22:29:26 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: 16iJDL936zMuTL72rlilaHKFfWlzDkJMZZzdzehLrn4=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 9Bz+Cab50iI4Zf4Xz+8IzaIlXk+ZVZDvrpvWEDr7xpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Apr 4 22:29:26 2026 GMT Not After : Apr 11 22:29:26 2026 GMT Subject: CN=69d190c7-92c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:cd:1f:de:c6:bb:f5:46:73:16:33:53:2e: 6f:82:73:ac:47:3b:33:23:cb:a3:7d:21:2b:31:c0: 3b:31:46:2c:87:bf:3a:1f:6f:d9:56:4f:76:c9:da: bb:0c:a2:2e:e3:38:9e:7f:d5:9e:e3:52:fe:3f:40: 19:6d:b1:42:f5:bf:3e:35:29:86:be:4a:7e:13:2d: c3:47:7d:0c:b7:87:ca:29:1e:f0:62:87:dd:9e:f0: 89:3c:41:88:95:e5:6e:f7:c2:8b:ab:0f:27:ba:ab: 2b:e5:27:d9:e9:21:8a:15:f0:b4:ac:30:18:6e:27: 48:9b:28:b2:b7:11:1a:64:9e:25:4a:b0:06:94:98: dd:ef:9f:65:77:89:42:7f:28:9b:42:3b:b1:60:c9: 3c:20:5c:f8:dc:69:2e:4b:c0:7f:7b:60:d3:aa:8c: ed:ee:b2:b6:1b:3d:bb:eb:db:5b:cb:5b:6f:37:ec: 9a:60:48:88:01:ff:53:c8:bf:26:25:57:b0:8e:82: bc:9e:72:71:f5:65:d8:9c:e3:53:b7:68:70:b0:a3: 2e:85:d0:64:e9:34:8d:77:40:ee:63:b6:96:d2:dc: dc:4a:8c:e8:0a:c3:95:fd:80:f6:53:c7:56:2d:51: 5d:73:9d:ca:c5:c2:5f:0c:86:d8:75:d0:f1:38:02: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:F2:57:E1:64:6D:0E:7D:29:9F:5C:E5:E2:00:5B:67:40:46:7B X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7b:2d:04:ef:03:0c:dd:d3:c3:d0:21:4d:47:d0:e9:d4:13: 7c:3d:e9:99:de:03:59:e8:e0:96:a1:b2:c4:4f:6e:f8:85:e7: b4:ea:43:97:bb:ad:d9:e5:13:22:ad:cb:25:c1:2b:cf:d7:47: 12:b7:75:61:26:f1:6b:07:2c:ce:3f:d9:25:8d:ba:2e:75:c4: 8c:27:6e:ae:e9:f5:85:7a:6e:e6:00:9c:63:59:b5:78:6d:37: 86:8b:30:11:36:2c:f3:9c:5f:09:c7:2a:64:dd:2c:c1:1f:da: 83:fd:a3:a5:fe:d9:27:c4:a0:b4:ca:6a:5c:d6:0b:4f:b7:86: 41:c3:70:a9:62:48:27:4e:34:3d:91:16:3e:1b:54:4f:b7:be: 52:ec:24:d0:52:be:e4:59:9d:f0:97:3f:d5:21:85:4d:ee:4d: 7b:72:c7:d8:8f:af:db:49:2f:e9:3d:cc:c8:1c:0e:b4:f8:2b: 07:53:9c:75:e4:53:dd:7e:5c:bc:d3:e3:8a:b1:16:99:b4:12: 82:b7:b0:24:33:7e:7d:f0:91:b2:f9:49:b8:61:61:f4:dd:42: e0:85:36:82:77:4d:90:54:92:4b:4d:07:4a:a5:5c:39:43:47: c4:e6:97:61:d5:cc:bd:b5:a0:58:53:e8:36:29:21:07:e5:13: ce:fe:00:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjYwNDA0MjIyOTI2WhcNMjYwNDExMjIyOTI2WjAYMRYwFAYD VQQDEw02OWQxOTBjNy05MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu47NH97Gu/VGcxYzUy5vgnOsRzszI8ujfSErMcA7MUYsh786H2/ZVk92ydq7 DKIu4zief9We41L+P0AZbbFC9b8+NSmGvkp+Ey3DR30Mt4fKKR7wYofdnvCJPEGI leVu98KLqw8nuqsr5SfZ6SGKFfC0rDAYbidImyiytxEaZJ4lSrAGlJjd759ld4lC fyibQjuxYMk8IFz43GkuS8B/e2DTqozt7rK2Gz2769tby1tvN+yaYEiIAf9TyL8m JVewjoK8nnJx9WXYnONTt2hwsKMuhdBk6TSNd0DuY7aW0tzcSozoCsOV/YD2U8dW LVFdc53KxcJfDIbYddDxOAJZWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0b8lfh ZG0OfSmfXOXiAFtnQEZ7MB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI3stBO8DDN3Tw9AhTUfQ6dQTfD3pmd4DWejglqGyxE9u+IXntOpDl7ut2eUT Iq3LJcErz9dHErd1YSbxawcszj/ZJY26LnXEjCdurun1hXpu5gCcY1m1eG03hosw ETYs85xfCccqZN0swR/ag/2jpf7ZJ8SgtMpqXNYLT7eGQcNwqWJIJ040PZEWPhtU T7e+Uuwk0FK+5Fmd8Jc/1SGFTe5Ne3LH2I+v20kv6T3MyBwOtPgrB1OcdeRT3X5c vNPjirEWmbQSgrewJDN+ffCRsvlJuGFh9N1C4IU2gndNkFSSS00HSqVcOUNHxOaX YdXMvbWgWFPoNikhB+UTzv4AGw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:53 2026 by rpki-client