$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: eoWtHJCvPdKpjG9AdZ2A5DOR49Vj1zp5nw6iRFPlOzg= Subject key identifier: B0:D5:7B:A6:A7:12:7D:50:EE:9D:07:65:90:E7:A1:38:E6:1C:C3:40 Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 0944 Signing time: Mon 20 Apr 2026 20:05:12 +0000 Manifest this update: Mon 20 Apr 2026 20:05:11 +0000 Manifest next update: Mon 27 Apr 2026 20:05:11 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: Ncr4mnvc2n12WWkXIYm4uiQUgC7+KjODKFeI0AFBOfQ=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Apr 20 20:05:11 2026 GMT Not After : Apr 27 20:05:11 2026 GMT Subject: CN=69e686f7-09b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:5f:ea:4b:46:20:a4:93:1c:5b:37:ff:1c: e3:bb:46:e6:82:8b:d1:00:11:c8:f1:f3:1b:ec:c7: 23:51:bb:33:8d:23:e6:49:14:41:47:da:c8:b0:f2: b9:3c:39:46:ca:5b:ba:47:46:50:3b:02:3e:18:19: ac:81:cc:63:98:c7:3b:9d:68:81:b8:36:80:d2:f3: 1c:87:2e:95:58:87:c2:42:e1:ff:86:e6:3f:ed:de: 59:a0:6f:90:3a:c5:e1:76:f3:2e:c4:d7:91:9c:3d: a2:ba:1a:19:1b:de:a7:3d:c6:a8:10:0e:e9:f6:50: fb:52:37:98:31:26:75:ec:55:97:a5:d6:76:e0:a9: d4:80:8f:e8:dc:fe:35:51:5f:85:25:9e:82:a3:8f: fb:10:a9:cb:a6:a0:22:3f:5c:51:80:f1:b5:c8:e2: 4f:72:96:71:76:e9:3e:88:0b:ea:3f:80:98:96:01: 8e:30:b3:23:ed:50:aa:70:38:2d:89:c0:1d:00:ca: d2:8d:3c:33:fc:09:c6:0c:03:c6:58:e8:f6:56:c6: 81:35:64:3f:3f:b3:8a:5f:56:ea:d6:43:60:95:17: 7b:ae:cd:c7:b6:39:45:70:5e:39:2b:95:73:6f:ff: dc:b0:2b:45:c1:e3:d5:3e:34:c7:f9:1d:77:a6:97: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:7B:A6:A7:12:7D:50:EE:9D:07:65:90:E7:A1:38:E6:1C:C3:40 X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ee:76:eb:44:29:b1:da:e7:0b:34:74:bb:eb:2e:fa:4d:c5: 20:13:38:c9:94:df:cb:84:68:98:95:ab:6a:48:14:e5:cc:20: 31:01:4b:68:88:84:09:f5:48:78:f9:12:af:35:24:63:06:fc: 5c:2a:4c:22:df:2a:60:a7:7b:39:c3:13:6d:0e:4d:62:1d:de: a1:a2:fd:ff:1f:8f:7f:5e:ec:b7:9e:5a:b3:a2:ae:65:eb:8f: 4f:9e:27:47:08:98:fe:2a:3c:7c:9f:ca:2b:1a:dc:ca:4f:05: 14:58:e2:93:9e:fd:a2:e1:17:99:48:6a:4e:7c:f3:4d:26:ba: a2:8e:02:54:d4:a3:77:e0:87:19:81:1e:45:66:ec:03:f1:08: 30:56:c0:9c:87:cc:3b:d5:55:91:9d:d2:59:3e:c2:7e:1d:43: e2:76:e4:64:ad:5e:e7:dc:03:ec:02:66:d5:3c:c3:61:43:84: e5:bc:65:e9:b9:cb:b9:62:21:54:ca:7f:b8:e3:71:a2:ec:53: ac:7d:b7:8c:67:a4:58:31:2f:16:31:2e:3b:46:99:30:9f:60: f1:f5:b1:35:8d:67:26:6d:5d:1c:6a:c2:1a:69:96:66:f4:20: 7e:0f:1d:c3:8f:c3:02:4f:90:9e:69:54:fe:3e:b9:44:39:58: 81:4e:f3:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjYwNDIwMjAwNTExWhcNMjYwNDI3MjAwNTExWjAYMRYwFAYD VQQDEw02OWU2ODZmNy0wOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJxf6ktGIKSTHFs3/xzju0bmgovRABHI8fMb7McjUbszjSPmSRRBR9rIsPK5 PDlGylu6R0ZQOwI+GBmsgcxjmMc7nWiBuDaA0vMchy6VWIfCQuH/huY/7d5ZoG+Q OsXhdvMuxNeRnD2iuhoZG96nPcaoEA7p9lD7UjeYMSZ17FWXpdZ24KnUgI/o3P41 UV+FJZ6Co4/7EKnLpqAiP1xRgPG1yOJPcpZxduk+iAvqP4CYlgGOMLMj7VCqcDgt icAdAMrSjTwz/AnGDAPGWOj2VsaBNWQ/P7OKX1bq1kNglRd7rs3HtjlFcF45K5Vz b//csCtFwePVPjTH+R13ppeUUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDVe6an En1Q7p0HZZDnoTjmHMNAMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeu5260QpsdrnCzR0u+su+k3FIBM4yZTfy4RomJWrakgU5cwgMQFLaIiECfVI ePkSrzUkYwb8XCpMIt8qYKd7OcMTbQ5NYh3eoaL9/x+Pf17st55as6KuZeuPT54n RwiY/io8fJ/KKxrcyk8FFFjik579ouEXmUhqTnzzTSa6oo4CVNSjd+CHGYEeRWbs A/EIMFbAnIfMO9VVkZ3SWT7Cfh1D4nbkZK1e59wD7AJm1TzDYUOE5bxl6bnLuWIh VMp/uONxouxTrH23jGekWDEvFjEuO0aZMJ9g8fWxNY1nJm1dHGrCGmmWZvQgfg8d w4/DAk+QnmlU/j65RDlYgU7z+w== -----END CERTIFICATE-----Generated at Wed Apr 22 10:24:27 2026 by rpki-client