$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: fqXwXPh6Y20/kMumdQSEDg4ZAon3e2M/lC7b36R1j1I= Subject key identifier: DA:61:B5:73:A0:9D:6A:FC:0E:57:A9:FD:DC:57:07:31:1A:A0:65:44 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 070A Signing time: Sat 04 Apr 2026 21:53:11 +0000 Manifest this update: Sat 04 Apr 2026 21:53:11 +0000 Manifest next update: Sat 11 Apr 2026 21:53:11 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: 1tjy9Gq5lm1dW5wCsaDwWLo3ViHkA8njIWOhdhPPTWU=) 2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: yYTtvE7CXHf8fnX9NjEKKec9Ps0u8GPKEPqTfsvne5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Apr 4 21:53:11 2026 GMT Not After : Apr 11 21:53:11 2026 GMT Subject: CN=69d18847-fc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:dd:1d:da:7a:3c:e0:a5:eb:33:ae:bd:38: a5:28:c8:c5:76:25:fd:f8:3b:ea:27:01:a8:4b:76: 95:ca:ec:f9:81:38:c1:38:f1:1e:fe:44:b6:18:fd: a7:d3:08:18:5c:11:bd:b4:60:b7:d9:eb:3f:83:c3: f6:0e:d0:02:c6:7f:92:37:f6:98:47:c0:24:23:2a: dc:74:68:70:7b:28:93:c1:c9:f8:be:9f:37:25:fc: 44:4e:c4:89:30:ea:64:41:ac:4f:41:a4:44:c7:6f: 4f:f2:be:f9:47:43:61:91:54:24:d0:7d:0f:e8:11: c0:d7:e1:dc:28:cb:7c:12:81:bc:46:09:3c:01:3b: 50:d5:1d:5a:09:4b:df:ca:9a:96:fb:3b:66:7e:af: e5:24:fb:21:82:f5:0d:bc:b1:4b:07:98:dc:d4:ae: 13:fc:92:d3:9a:bb:7b:9e:a6:59:7e:8e:83:c0:12: 73:31:dd:dd:e0:d8:37:7b:11:28:f9:94:00:ca:94: 78:d5:96:db:18:d6:8f:5f:08:49:1d:1f:8b:0f:30: 08:32:1c:f4:e7:cf:bd:48:74:69:2d:e0:d2:25:17: fc:27:fd:aa:f8:4f:95:c1:30:32:6d:a9:af:47:f6: 9c:24:dd:fb:36:6f:58:0e:3a:aa:95:0f:e2:32:e4: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:B5:73:A0:9D:6A:FC:0E:57:A9:FD:DC:57:07:31:1A:A0:65:44 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e2:38:93:39:7d:de:e8:f3:ae:92:24:83:81:3a:97:e1:ff: ef:54:57:01:3c:91:4f:5f:45:47:7b:f8:94:4c:36:b7:41:38: 16:e1:69:8f:9c:b7:c6:3e:db:33:76:de:d1:aa:f3:41:9f:3c: 12:b0:7f:99:2b:0c:6b:80:d8:c7:63:24:b2:8a:70:ad:35:61: ec:de:a5:e2:ac:38:b7:7d:a7:9f:12:80:86:a4:b0:b1:fa:7a: 54:75:0c:de:1f:ef:94:b7:0f:e1:e6:e7:7c:c9:8f:13:a9:0a: 89:4d:84:31:dc:5d:0f:bc:9a:7f:24:06:f4:59:13:8c:a7:f3: 60:05:29:87:dd:dd:dc:cd:f7:9f:61:22:c6:27:93:46:26:d9: 08:b5:6b:dd:9e:a0:58:67:fa:b5:b0:83:b0:d7:2a:b3:bc:70: 10:02:13:23:cc:04:83:38:6c:e3:a6:45:80:7c:02:7f:96:46: 78:96:a5:b0:57:f3:7c:07:a0:1d:41:05:a1:3d:d9:03:11:4f: 84:dc:4e:19:a2:63:46:9c:4c:9f:bd:ee:8e:9e:a9:59:24:dd: 81:93:d2:81:08:f3:a7:6b:38:04:85:26:17:2e:6d:05:00:a4: fa:fd:3a:0d:83:44:66:52:0b:58:cb:5e:08:ee:a0:b6:84:89: 2b:c8:4b:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjYwNDA0MjE1MzExWhcNMjYwNDExMjE1MzExWjAYMRYwFAYD VQQDEw02OWQxODg0Ny1mYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLPdHdp6POCl6zOuvTilKMjFdiX9+DvqJwGoS3aVyuz5gTjBOPEe/kS2GP2n 0wgYXBG9tGC32es/g8P2DtACxn+SN/aYR8AkIyrcdGhweyiTwcn4vp83JfxETsSJ MOpkQaxPQaREx29P8r75R0NhkVQk0H0P6BHA1+HcKMt8EoG8Rgk8ATtQ1R1aCUvf ypqW+ztmfq/lJPshgvUNvLFLB5jc1K4T/JLTmrt7nqZZfo6DwBJzMd3d4Ng3exEo +ZQAypR41ZbbGNaPXwhJHR+LDzAIMhz058+9SHRpLeDSJRf8J/2q+E+VwTAybamv R/acJN37Nm9YDjqqlQ/iMuTvGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNphtXOg nWr8Dlep/dxXBzEaoGVEMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfOI4kzl93ujzrpIkg4E6l+H/71RXATyRT19FR3v4lEw2t0E4FuFpj5y3xj7b M3be0arzQZ88ErB/mSsMa4DYx2MksopwrTVh7N6l4qw4t32nnxKAhqSwsfp6VHUM 3h/vlLcP4ebnfMmPE6kKiU2EMdxdD7yafyQG9FkTjKfzYAUph93d3M33n2EixieT RibZCLVr3Z6gWGf6tbCDsNcqs7xwEAITI8wEgzhs46ZFgHwCf5ZGeJalsFfzfAeg HUEFoT3ZAxFPhNxOGaJjRpxMn73ujp6pWSTdgZPSgQjzp2s4BIUmFy5tBQCk+v06 DYNEZlILWMteCO6gtoSJK8hLww== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:39 2026 by rpki-client