$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: 904qUK5wkNpT+pGb2UqMXsB6wsB7MN75iiJyGA4a8Ro= Subject key identifier: 6E:2D:E7:7E:45:D6:A5:36:55:19:D0:48:F9:F8:06:48:2A:BD:65:BF Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C63 Signing time: Sat 04 Apr 2026 18:29:47 +0000 Manifest this update: Sat 04 Apr 2026 18:29:46 +0000 Manifest next update: Sat 11 Apr 2026 18:29:46 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 6Ul5E9Pk7XxCYfI0i8dNgt0yRFxGty8QE0egS9tvWII=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Apr 4 18:29:46 2026 GMT Not After : Apr 11 18:29:46 2026 GMT Subject: CN=69d1589b-64c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:59:85:9a:51:6c:ea:3c:6a:97:7b:8a:88: d8:50:76:a3:95:55:ac:cc:47:17:14:25:5a:d2:31: 99:fd:53:06:c4:0d:24:34:09:f8:9f:57:30:73:4a: 90:10:34:5b:22:6a:6e:30:a8:c0:6c:b5:23:88:61: fb:cb:c1:b3:b1:ad:dd:7d:76:3a:85:44:e8:27:38: e2:53:50:25:ea:75:ab:6f:10:ce:4a:26:bd:a2:ea: 86:4a:ce:e8:3f:fc:d7:eb:23:90:11:73:42:c7:0e: 1b:f8:8a:ac:1e:97:30:58:43:54:32:7e:69:89:f0: 16:8c:17:d2:e2:05:f7:d0:74:b1:c6:54:12:39:90: f0:63:c2:3b:18:24:0b:4d:4e:41:90:88:d0:21:9e: d9:33:84:10:31:01:22:3b:a1:a2:3b:68:50:bd:61: 49:17:03:bf:e8:9a:56:20:28:3b:81:2d:bb:64:7f: c6:60:a0:46:f4:81:b3:bb:21:00:32:a5:8a:1f:24: 31:c8:c9:b5:b1:8b:bd:a5:45:a1:d6:09:f6:11:d5: 59:57:99:e8:f1:8c:ed:f2:fb:3e:1c:24:d1:a1:83: ef:83:b7:f3:7f:5c:3b:0f:ee:83:23:84:6f:19:c9: 7c:54:01:3c:dc:00:31:e9:62:f4:d1:e8:ca:22:b0: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:E7:7E:45:D6:A5:36:55:19:D0:48:F9:F8:06:48:2A:BD:65:BF X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:fb:60:cc:df:67:52:f8:ee:22:e1:ac:9a:90:fd:60:0a:52: e4:cb:09:8e:15:37:d4:17:4b:13:0f:40:43:c2:eb:04:e1:20: a8:18:16:fc:f1:fb:71:27:74:af:f0:c7:f4:7c:c5:0d:37:7a: f3:b9:ff:dc:8f:d9:19:5d:91:9a:8d:1a:c4:e2:d6:5b:f1:06: 9f:f4:59:94:ac:8f:38:57:18:bd:80:63:24:57:57:b7:77:20: ab:31:ca:ed:9d:aa:bf:b9:b6:6d:38:23:8a:7d:88:79:19:b7: 41:29:76:9e:65:79:ee:e2:1d:7f:69:e2:87:8e:27:90:af:7b: f7:83:3e:17:c4:14:88:bd:27:e1:d7:77:c9:0e:ce:3d:5b:3c: f7:cb:5f:07:6c:0f:fd:8c:a5:58:50:28:0d:02:60:21:e6:9c: 82:05:87:ce:18:4c:7c:54:1e:07:1f:12:49:2b:0c:9c:28:8c: cb:c3:c8:f3:3d:7c:a3:b3:5d:a9:d0:b9:ee:dd:5b:89:03:ae: d8:4f:36:72:ed:5c:a6:56:69:79:e3:15:e4:fa:00:0c:1f:15: 25:92:8d:75:d6:9c:b3:b3:77:09:f7:39:65:29:1a:8b:9c:57: e9:76:d1:aa:d6:6c:93:8f:96:86:e3:e0:5b:0b:20:41:4a:0f: 64:00:5e:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwNDA0MTgyOTQ2WhcNMjYwNDExMTgyOTQ2WjAYMRYwFAYD VQQDEw02OWQxNTg5Yi02NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl5ZhZpRbOo8apd7iojYUHajlVWszEcXFCVa0jGZ/VMGxA0kNAn4n1cwc0qQ EDRbImpuMKjAbLUjiGH7y8Gzsa3dfXY6hUToJzjiU1Al6nWrbxDOSia9ouqGSs7o P/zX6yOQEXNCxw4b+IqsHpcwWENUMn5pifAWjBfS4gX30HSxxlQSOZDwY8I7GCQL TU5BkIjQIZ7ZM4QQMQEiO6GiO2hQvWFJFwO/6JpWICg7gS27ZH/GYKBG9IGzuyEA MqWKHyQxyMm1sYu9pUWh1gn2EdVZV5no8Yzt8vs+HCTRoYPvg7fzf1w7D+6DI4Rv Gcl8VAE83AAx6WL00ejKIrALJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4t535F 1qU2VRnQSPn4BkgqvWW/MB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0PtgzN9nUvjuIuGsmpD9YApS5MsJjhU31BdLEw9AQ8LrBOEgqBgW/PH7cSd0 r/DH9HzFDTd687n/3I/ZGV2Rmo0axOLWW/EGn/RZlKyPOFcYvYBjJFdXt3cgqzHK 7Z2qv7m2bTgjin2IeRm3QSl2nmV57uIdf2nih44nkK9794M+F8QUiL0n4dd3yQ7O PVs898tfB2wP/YylWFAoDQJgIeacggWHzhhMfFQeBx8SSSsMnCiMy8PI8z18o7Nd qdC57t1biQOu2E82cu1cplZpeeMV5PoADB8VJZKNddacs7N3Cfc5ZSkai5xX6XbR qtZsk4+WhuPgWwsgQUoPZABeYg== -----END CERTIFICATE-----Generated at Mon Apr 6 11:20:07 2026 by rpki-client