$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: lTjPQBniwsu8R/A9HjCmERvEF8Hlq54alRrf4fZAiU8= Subject key identifier: 85:D8:EE:3F:33:21:BE:DF:96:D1:4E:9F:3D:1C:E1:3F:26:54:A5:0F Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 043C Signing time: Tue 24 Mar 2026 23:56:53 +0000 Manifest this update: Tue 24 Mar 2026 23:56:53 +0000 Manifest next update: Tue 31 Mar 2026 23:56:53 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: DccEfqfW+jmv3xcVEvqvKUnm+j7P3CJDgwZro/KSlqo=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Mar 24 23:56:53 2026 GMT Not After : Mar 31 23:56:53 2026 GMT Subject: CN=69c324c5-1fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:b7:a6:60:4d:fd:4b:e6:05:36:dc:9c:95: 97:4b:2d:34:52:d3:6e:d7:6c:56:4f:ad:00:e2:d5: 84:0c:cd:37:db:da:9a:a1:7e:28:17:bc:3b:df:46: d7:d4:55:d0:f3:96:e8:37:67:2b:da:5c:dd:c2:79: 2a:8b:89:bc:b1:b6:3a:8a:26:fa:3e:e0:7a:00:39: f2:ed:0c:ad:ec:bf:33:d1:fe:a3:3d:85:35:0a:64: 50:c0:71:de:c3:d6:2d:16:ec:dc:f2:9f:bd:f6:c5: ee:0e:33:75:04:a0:95:cd:31:26:cb:e8:7b:2b:82: 91:2d:6d:11:20:c9:09:11:b4:d8:15:98:07:f8:b5: ce:b4:a8:c4:b7:33:92:01:ca:9b:a4:d1:a3:e3:40: 79:ff:c4:73:f5:bf:64:65:f2:e9:14:e4:4f:ea:3b: f6:c8:ca:4f:ab:cd:7e:31:ba:4c:ce:ab:5f:fd:2c: c0:0b:ac:71:2c:15:17:b8:4d:e7:18:6e:ca:79:a9: d2:c6:35:69:25:5e:c8:90:a8:be:2f:5e:1d:e8:10: 8c:71:0e:61:6b:93:4e:96:6f:ab:05:7d:c0:0f:23: bf:e1:98:8f:65:2f:85:4e:d8:f1:14:fc:1d:96:2c: 92:54:11:7e:1f:a6:b7:4b:0a:33:a5:e8:27:bb:77: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D8:EE:3F:33:21:BE:DF:96:D1:4E:9F:3D:1C:E1:3F:26:54:A5:0F X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:21:3d:8c:c7:8c:ce:6c:d6:75:0f:34:08:e3:ca:b5:4d:a6: 8c:d6:b8:9a:84:2e:cd:d8:97:99:8a:1b:b8:58:fc:6e:93:13: 2e:66:59:24:fe:46:99:29:c0:ec:cc:ca:48:25:29:15:4b:23: 6f:31:b0:55:be:04:f3:6b:e2:78:82:0e:7d:cc:86:fd:96:8b: c5:3c:58:bc:79:b4:94:57:81:90:cb:b8:59:4e:a5:38:41:d4: aa:b2:1a:ce:ed:21:55:4f:5b:aa:92:89:e6:da:57:e1:d6:e6: 21:bb:e5:24:75:02:ff:09:c9:4d:3a:da:e6:6d:33:79:92:d4: 33:42:f0:1c:b8:c4:61:f7:d6:88:16:30:f1:e0:45:a1:d2:29: 6e:d2:2f:5b:6d:8b:2a:c1:b0:c4:7a:35:8e:d5:8b:25:1a:b6: 9e:34:43:af:fc:6f:89:30:06:9c:12:60:27:a0:a5:e7:73:b9: 3a:37:39:23:45:06:58:b3:36:a1:ef:70:34:87:8f:60:7f:d2: 97:74:d6:af:47:73:6c:bc:5a:4a:b0:ad:eb:ed:76:4a:3e:c4: 9f:00:52:b5:73:90:1b:27:09:a3:f9:f8:d8:97:b9:6c:a7:c3: 24:27:58:90:0e:0c:71:11:1e:c5:de:9a:e6:81:da:f3:b4:c6: e4:35:ea:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjYwMzI0MjM1NjUzWhcNMjYwMzMxMjM1NjUzWjAYMRYwFAYD VQQDEw02OWMzMjRjNS0xZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0i3pmBN/UvmBTbcnJWXSy00UtNu12xWT60A4tWEDM0329qaoX4oF7w730bX 1FXQ85boN2cr2lzdwnkqi4m8sbY6iib6PuB6ADny7Qyt7L8z0f6jPYU1CmRQwHHe w9YtFuzc8p+99sXuDjN1BKCVzTEmy+h7K4KRLW0RIMkJEbTYFZgH+LXOtKjEtzOS AcqbpNGj40B5/8Rz9b9kZfLpFORP6jv2yMpPq81+MbpMzqtf/SzAC6xxLBUXuE3n GG7KeanSxjVpJV7IkKi+L14d6BCMcQ5ha5NOlm+rBX3ADyO/4ZiPZS+FTtjxFPwd liySVBF+H6a3Swozpegnu3ej9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXY7j8z Ib7fltFOnz0c4T8mVKUPMB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASSE9jMeMzmzWdQ80COPKtU2mjNa4moQuzdiXmYobuFj8bpMTLmZZJP5GmSnA 7MzKSCUpFUsjbzGwVb4E82vieIIOfcyG/ZaLxTxYvHm0lFeBkMu4WU6lOEHUqrIa zu0hVU9bqpKJ5tpX4dbmIbvlJHUC/wnJTTra5m0zeZLUM0LwHLjEYffWiBYw8eBF odIpbtIvW22LKsGwxHo1jtWLJRq2njRDr/xviTAGnBJgJ6Cl53O5Ojc5I0UGWLM2 oe9wNIePYH/Sl3TWr0dzbLxaSrCt6+12Sj7EnwBStXOQGycJo/n42Je5bKfDJCdY kA4McREexd6a5oHa87TG5DXqKQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:06 2026 by rpki-client