$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: dDr7RIKKd3IfsRxxfQWDGUzNcuZacdwoehx0GuqGSLM= Subject key identifier: 47:51:9C:2F:C3:1F:E3:E8:0C:5E:75:16:D8:73:53:60:C6:3A:8E:9F Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 0552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 054C Signing time: Sat 04 Apr 2026 23:13:25 +0000 Manifest this update: Sat 04 Apr 2026 23:13:25 +0000 Manifest next update: Sat 11 Apr 2026 23:13:25 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: O4CAiLa3noPSvu/geFQJlzOkMqR43/7LPxIbVvbUjSc=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: NWJk9U1zJ6g6SQr9JT1EUFlzv/4D0aiZyw7C2alM700=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Apr 4 23:13:25 2026 GMT Not After : Apr 11 23:13:25 2026 GMT Subject: CN=69d19b15-6ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:4e:30:c8:91:33:77:a7:d2:52:5d:dc:eb: a8:80:27:e6:d9:16:8f:80:59:8a:1b:34:d0:d6:9a: 46:9c:9f:d4:e6:4c:a0:bc:92:4c:39:44:bb:01:e5: 9c:22:85:d3:42:57:bc:cd:68:d2:b3:4b:70:17:83: f5:a5:3c:51:17:8b:b1:d9:90:e8:ef:24:1a:88:d0: 7c:b7:8c:b2:47:d6:7f:3f:37:2b:cf:aa:6e:d4:47: 72:55:90:55:32:14:ba:3d:86:13:75:c8:2d:b2:7d: 0d:72:ec:06:bc:cc:24:5f:19:86:68:e8:09:f7:97: 45:ca:ad:02:b6:82:d8:aa:a4:c0:bc:6b:ee:a9:92: 18:50:82:8a:6e:d8:4b:a6:94:a6:51:82:f1:7e:0e: 8f:58:2d:dd:5a:f6:51:a5:fb:aa:72:f2:ab:ac:84: 7d:8c:e9:29:ef:db:6b:fd:c5:28:4b:e5:0a:2d:f2: ae:0f:ff:cd:bb:d0:79:d3:e8:52:66:db:06:ff:aa: 8b:da:82:86:da:97:d0:26:f3:b3:30:25:f4:97:19: 85:a7:5c:d7:1b:53:3a:71:e9:2d:e1:49:31:8d:6e: a4:d9:12:5e:99:2e:ae:2b:e1:07:8e:68:1c:89:bc: 1d:e9:4d:bd:2a:c1:f4:40:61:68:d8:1e:e8:10:da: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:51:9C:2F:C3:1F:E3:E8:0C:5E:75:16:D8:73:53:60:C6:3A:8E:9F X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:98:38:8d:93:3d:ee:98:3e:fc:3b:48:cb:93:85:d1:d6:38: 87:0a:93:1b:35:fd:e5:88:35:46:fe:08:26:09:8f:be:e3:f3: 1b:62:19:02:40:ef:f9:7e:48:27:2d:b5:67:8a:5b:a5:88:d4: 6b:f8:bf:6e:cc:aa:fd:1c:f9:cd:72:bf:3c:d2:9d:13:40:fe: 3d:8f:fe:11:b5:b2:f8:59:82:9f:4b:38:bd:33:56:b4:01:b6: 3f:c9:4b:e6:6e:f3:5b:2d:dd:be:1e:ce:8c:fa:05:63:3a:c4: 6c:72:56:1d:02:4c:30:61:79:d4:b9:74:b5:5c:39:da:e4:a5: aa:1a:e4:a7:16:f9:30:83:14:3b:bd:d2:d5:01:c2:01:b9:d2: f4:83:23:c0:ac:21:27:74:b2:71:05:fa:0d:f4:40:8d:88:d5: 85:95:dd:b7:10:c5:b2:c9:80:38:52:78:12:84:cc:12:91:0c: 83:22:03:9d:aa:5b:1c:47:73:0b:e7:9b:fe:b7:2d:e3:d3:7a: aa:8d:2d:25:e2:ae:b3:11:e6:41:0c:28:b7:2e:1f:b5:c5:73: 25:f6:1a:fb:00:35:1f:d3:22:b2:46:28:fd:ca:a8:a1:5f:80: f9:dd:20:03:d4:d2:42:fd:b2:dd:01:a2:c4:35:4d:4b:9d:f3: 59:24:07:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjYwNDA0MjMxMzI1WhcNMjYwNDExMjMxMzI1WjAYMRYwFAYD VQQDEw02OWQxOWIxNS02YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEBOMMiRM3en0lJd3OuogCfm2RaPgFmKGzTQ1ppGnJ/U5kygvJJMOUS7AeWc IoXTQle8zWjSs0twF4P1pTxRF4ux2ZDo7yQaiNB8t4yyR9Z/Pzcrz6pu1EdyVZBV MhS6PYYTdcgtsn0NcuwGvMwkXxmGaOgJ95dFyq0CtoLYqqTAvGvuqZIYUIKKbthL ppSmUYLxfg6PWC3dWvZRpfuqcvKrrIR9jOkp79tr/cUoS+UKLfKuD//Nu9B50+hS ZtsG/6qL2oKG2pfQJvOzMCX0lxmFp1zXG1M6cekt4UkxjW6k2RJemS6uK+EHjmgc ibwd6U29KsH0QGFo2B7oENq1WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdRnC/D H+PoDF51FthzU2DGOo6fMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXpg4jZM97pg+/DtIy5OF0dY4hwqTGzX95Yg1Rv4IJgmPvuPzG2IZAkDv+X5I Jy21Z4pbpYjUa/i/bsyq/Rz5zXK/PNKdE0D+PY/+EbWy+FmCn0s4vTNWtAG2P8lL 5m7zWy3dvh7OjPoFYzrEbHJWHQJMMGF51Ll0tVw52uSlqhrkpxb5MIMUO73S1QHC AbnS9IMjwKwhJ3SycQX6DfRAjYjVhZXdtxDFssmAOFJ4EoTMEpEMgyIDnapbHEdz C+eb/rct49N6qo0tJeKusxHmQQwoty4ftcVzJfYa+wA1H9MiskYo/cqooV+A+d0g A9TSQv2y3QGixDVNS53zWSQHtQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:35:05 2026 by rpki-client