$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: /uJy64DJKf0TL+stZbrhNoxD+C36guWNfFpXHGg1OwU= Subject key identifier: D0:0A:38:6E:BA:B0:75:78:52:88:13:68:8D:83:32:04:F5:DB:8A:96 Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0C53 Signing time: Sat 04 Apr 2026 18:34:05 +0000 Manifest this update: Sat 04 Apr 2026 18:34:04 +0000 Manifest next update: Sat 11 Apr 2026 18:34:04 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: lscfi3VxHIrmOxU+FyWMNxlwHfufDm2xASL2+N/qUgc=) 2: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) 3: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Apr 4 18:34:04 2026 GMT Not After : Apr 11 18:34:04 2026 GMT Subject: CN=69d1599d-0b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:f6:6e:0a:76:f4:90:ea:d5:1b:5a:02:b1: 0d:d9:2f:67:bd:3b:20:b2:2b:79:39:b1:d5:63:a9: d7:e9:3c:e0:d4:26:bc:e1:24:bd:ef:8f:b1:53:39: 9b:03:6c:e5:e8:9e:43:21:b7:c4:9e:9d:fe:00:3e: 11:f2:ac:ec:81:a4:2a:f5:7a:0e:43:d1:ff:22:28: 9c:f7:79:68:9d:f8:fa:e0:13:67:c0:6b:b9:2c:ff: c8:71:87:9e:de:d6:38:ff:48:c0:70:9d:0b:e6:03: ba:e9:6c:17:87:55:2a:b8:f0:e9:d2:a2:92:bf:20: 2d:ff:f3:49:95:14:f1:41:b2:cd:a5:df:e9:72:72: d8:d6:07:5d:fc:cc:c2:5e:a8:b6:bf:98:89:ab:f1: 32:91:f9:27:a6:7a:79:ed:4a:9f:e1:27:0c:85:90: a5:c1:81:1d:de:3a:21:94:76:98:4c:a8:3a:b3:63: ff:b4:10:b7:b1:1b:d8:e7:5e:d1:a8:ae:72:95:b4: 41:db:fc:54:78:ac:38:8b:6b:d5:b2:49:9b:7e:f8: bc:e1:c0:f8:b1:8a:97:d2:46:43:55:1a:92:a5:bf: 9b:0f:58:74:87:b5:b2:97:4f:0d:50:a2:83:e3:3e: ad:aa:2a:d4:ce:af:69:b5:5f:50:68:dc:a6:9a:8a: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0A:38:6E:BA:B0:75:78:52:88:13:68:8D:83:32:04:F5:DB:8A:96 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4b:8f:60:6d:b6:e9:4d:4f:dd:01:78:8b:c4:4e:ba:5c:f4: 6d:d1:6a:4b:09:c0:fc:98:e1:84:3c:ce:f5:65:58:21:fd:99: c6:ed:23:07:7b:d2:d6:a8:72:43:98:84:53:8f:50:61:bb:0f: de:3b:8a:d8:20:d1:09:a7:6d:e8:5a:4f:bf:26:27:45:38:d6: c3:29:6d:ca:68:40:cc:20:c0:98:75:ac:6f:5c:9f:51:47:24: fb:b6:5f:73:e5:58:fb:84:af:ab:a4:98:11:b6:82:8a:ec:4f: b2:9e:b0:fd:d9:5f:34:7b:b6:75:64:b9:e6:c1:e5:02:59:45: cd:23:9e:9f:2e:5b:3e:35:cb:21:74:10:8e:ba:c9:e6:81:05: 7b:27:91:2b:0f:03:cb:d8:30:1c:e0:fa:f4:2e:0e:ea:f3:1a: 84:a7:15:c1:b9:18:8f:97:be:d6:df:ae:e2:04:c6:5e:09:8e: f6:f0:26:5f:8d:a1:cd:6c:4f:27:36:ac:42:c9:47:ae:52:7d: bf:b2:65:d0:69:ae:0d:ba:9e:a3:93:d6:e5:f3:67:fe:08:1a: 18:cb:3a:c8:2e:b5:76:f3:39:64:36:3b:20:88:33:40:59:01: 6f:89:50:00:fd:a6:2b:fc:e2:fe:96:ea:48:74:5e:76:17:a3: d4:4d:66:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwNDA0MTgzNDA0WhcNMjYwNDExMTgzNDA0WjAYMRYwFAYD VQQDEw02OWQxNTk5ZC0wYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV/2bgp29JDq1RtaArEN2S9nvTsgsit5ObHVY6nX6Tzg1Ca84SS974+xUzmb A2zl6J5DIbfEnp3+AD4R8qzsgaQq9XoOQ9H/Iiic93lonfj64BNnwGu5LP/IcYee 3tY4/0jAcJ0L5gO66WwXh1UquPDp0qKSvyAt//NJlRTxQbLNpd/pcnLY1gdd/MzC Xqi2v5iJq/Eykfknpnp57Uqf4ScMhZClwYEd3johlHaYTKg6s2P/tBC3sRvY517R qK5ylbRB2/xUeKw4i2vVskmbfvi84cD4sYqX0kZDVRqSpb+bD1h0h7Wyl08NUKKD 4z6tqirUzq9ptV9QaNymmoq54QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAKOG66 sHV4UogTaI2DMgT124qWMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtEuPYG226U1P3QF4i8ROulz0bdFqSwnA/JjhhDzO9WVYIf2Zxu0jB3vS1qhy Q5iEU49QYbsP3juK2CDRCadt6FpPvyYnRTjWwyltymhAzCDAmHWsb1yfUUck+7Zf c+VY+4Svq6SYEbaCiuxPsp6w/dlfNHu2dWS55sHlAllFzSOeny5bPjXLIXQQjrrJ 5oEFeyeRKw8Dy9gwHOD69C4O6vMahKcVwbkYj5e+1t+u4gTGXgmO9vAmX42hzWxP JzasQslHrlJ9v7Jl0GmuDbqeo5PW5fNn/ggaGMs6yC61dvM5ZDY7IIgzQFkBb4lQ AP2mK/zi/pbqSHRedhej1E1mqQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:03 2026 by rpki-client