$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: Dax0b1slxOv0m2Sc6oTLq2AiXXlOI+MYwLCnx6kkL4E= Subject key identifier: B1:7D:48:CF:4F:96:13:C0:A3:22:18:AC:47:A8:01:94:D7:EC:B3:B4 Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 52 Signing time: Sun 05 Apr 2026 07:32:55 +0000 Manifest this update: Sun 05 Apr 2026 07:32:54 +0000 Manifest next update: Sun 12 Apr 2026 07:32:54 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: tL5bBd3iRTYnIuVHZRsjwTWbONHR2KEwjAQvuhdPMP0=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Apr 5 07:32:54 2026 GMT Not After : Apr 12 07:32:54 2026 GMT Subject: CN=69d21027-fb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:f1:7b:8c:08:eb:e0:09:e4:41:ca:a8:ef: 55:c1:73:a3:2d:f1:00:6c:97:9d:82:62:41:2e:2f: ee:59:5e:4c:b5:ff:69:b7:36:b5:80:a8:73:17:75: 78:ae:ef:09:98:7c:14:0b:18:72:c1:da:04:93:18: 2b:3d:f3:ba:5b:4b:90:eb:58:9a:6e:75:ed:9c:bc: f3:30:43:c9:2c:2a:3c:9b:48:71:13:ff:2c:0a:1d: d6:7e:5a:46:64:40:13:48:64:0e:54:c1:c5:ef:6c: 24:3d:71:3e:9c:9a:9a:7f:c1:24:30:7a:a7:b9:c5: a6:0c:08:ca:b4:08:ce:d0:83:27:07:0b:5a:7f:03: 69:4a:f7:b8:58:c6:5d:34:29:ae:7a:12:3e:42:17: 54:86:82:fa:ce:49:58:38:2f:77:0d:31:1d:03:d5: 4f:65:7c:e5:b6:4a:0e:da:39:b4:35:43:9d:67:58: 35:15:4c:1d:8f:ba:e6:7f:0b:8c:50:50:fd:8d:d5: 92:6b:e5:fe:fa:74:ab:16:18:0e:a9:1d:5c:4a:18: 09:6d:e9:a3:11:eb:83:74:da:92:ec:b8:84:40:06: 25:bd:f2:be:c1:0f:91:dc:e1:1f:ab:3e:9a:3b:21: 60:bb:e7:76:f0:9e:0a:a1:3f:89:b6:37:72:8d:22: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:48:CF:4F:96:13:C0:A3:22:18:AC:47:A8:01:94:D7:EC:B3:B4 X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ec:fd:71:e8:c8:f1:e8:53:55:2d:33:bb:9e:c6:3a:bc:ab: 08:8c:69:8b:07:76:58:d9:d4:fb:fe:7f:9b:c7:55:0a:18:ba: 73:74:4f:cd:e9:b1:f2:4f:b8:92:79:8a:f2:90:bb:cc:04:31: 10:bb:7a:04:74:82:7d:90:7c:38:82:f6:08:a5:22:91:86:80: 47:fe:a2:a1:4d:77:e8:ee:7b:55:64:06:ba:43:25:09:0f:55: a0:1f:e9:92:af:98:6d:87:4e:e0:4b:76:6d:96:05:de:35:c1: c4:e9:d8:1f:0e:86:e5:2b:cf:17:bb:30:a4:6c:3f:f3:60:04: be:41:c1:11:77:aa:80:9e:5b:a4:d3:61:f0:fa:d3:e6:de:f6: af:08:2d:01:40:93:26:1d:d6:6d:99:12:c4:c6:c7:9c:b0:ba: 21:ee:a3:6d:b8:18:2c:c7:34:f2:1e:5f:1c:ba:f2:15:38:1a: a3:dd:44:cd:ba:17:f9:55:5f:64:86:93:fc:91:91:2f:ce:61: 83:eb:3c:6e:d8:67:3f:44:df:98:9b:a0:23:dd:d2:30:ec:f4: 06:1e:e6:3a:99:c7:11:ea:c2:67:0c:4d:0c:fc:30:1e:dd:74: f4:8b:b3:9b:da:67:d3:76:8f:dd:b1:19:df:81:a9:56:00:aa: 83:6b:8c:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNjA0MDUwNzMyNTRaFw0yNjA0MTIwNzMyNTRaMBgxFjAUBgNV BAMTDTY5ZDIxMDI3LWZiNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmsfF7jAjr4AnkQcqo71XBc6Mt8QBsl52CYkEuL+5ZXky1/2m3NrWAqHMXdXiu 7wmYfBQLGHLB2gSTGCs987pbS5DrWJpude2cvPMwQ8ksKjybSHET/ywKHdZ+WkZk QBNIZA5UwcXvbCQ9cT6cmpp/wSQweqe5xaYMCMq0CM7QgycHC1p/A2lK97hYxl00 Ka56Ej5CF1SGgvrOSVg4L3cNMR0D1U9lfOW2Sg7aObQ1Q51nWDUVTB2PuuZ/C4xQ UP2N1ZJr5f76dKsWGA6pHVxKGAlt6aMR64N02pLsuIRABiW98r7BD5Hc4R+rPpo7 IWC753bwngqhP4m2N3KNIq7JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsX1Iz0+W E8CjIhisR6gBlNfss7QwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQ7P1x6Mjx6FNVLTO7nsY6vKsIjGmLB3ZY2dT7/n+bx1UKGLpzdE/N6bHyT7iS eYrykLvMBDEQu3oEdIJ9kHw4gvYIpSKRhoBH/qKhTXfo7ntVZAa6QyUJD1WgH+mS r5hth07gS3ZtlgXeNcHE6dgfDoblK88XuzCkbD/zYAS+QcERd6qAnluk02Hw+tPm 3vavCC0BQJMmHdZtmRLExsecsLoh7qNtuBgsxzTyHl8cuvIVOBqj3UTNuhf5VV9k hpP8kZEvzmGD6zxu2Gc/RN+Ym6Aj3dIw7PQGHuY6mccR6sJnDE0M/DAe3XT0i7Ob 2mfTdo/dsRnfgalWAKqDa4wf -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:15 2026 by rpki-client