$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: XLViZVhq1u0zTdcdCqscmUrC2QyPfzZayIOAFIecr28= Subject key identifier: E5:78:F2:99:92:96:85:40:5E:1D:FA:85:2C:39:3E:FA:D8:97:C9:BA Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1DED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1DB8 Signing time: Thu 26 Mar 2026 16:06:08 +0000 Manifest this update: Thu 26 Mar 2026 16:06:07 +0000 Manifest next update: Thu 02 Apr 2026 16:06:07 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: Y4knn0cd+CgAidnh1veVCvyI1NL6E5orhllrWZxhdGI=) 2: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: SnQLKrTdABnlhkWQ+AVqddVj1mUuPuJmeCU6LxGP6eo=) 3: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: aM1BSZ3PF2IzE+AJHUzu7Yk2PU3p6ogZh2Ox+iMNzws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7661 (0x1ded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Mar 26 16:06:07 2026 GMT Not After : Apr 2 16:06:07 2026 GMT Subject: CN=69c5596f-775f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:8a:77:13:86:0e:b2:55:e3:c9:2a:7d:01: 0f:ba:eb:88:bf:2b:ab:30:44:b4:f4:0a:4a:73:6c: fc:64:2f:fd:7a:1c:d6:51:da:4b:66:75:87:f1:d0: 34:c1:21:62:b3:c9:88:43:b1:09:6a:0a:eb:d0:f4: ae:97:fa:d8:14:59:92:67:4e:8c:f4:5d:43:50:4d: cb:27:ce:4d:15:cf:f3:22:43:3f:e1:d5:64:a2:fa: 5b:72:a5:7a:38:34:68:8b:fe:0b:36:d1:8e:56:0a: 23:52:46:bd:96:b0:d0:65:46:fe:d4:dc:5a:cf:7e: 41:f2:a4:0a:18:ef:bb:28:52:51:3b:c2:49:b5:65: b9:7d:aa:ef:7d:01:a0:88:d2:9e:9d:c4:c0:48:8a: dc:75:25:39:ba:85:72:10:e7:67:40:53:a3:3b:f8: 29:d8:7e:0a:70:8d:4b:7d:33:9a:4b:98:d9:fc:b6: d1:99:c8:64:73:d1:5c:1d:d8:ab:3b:65:ed:67:e0: 73:83:28:1b:93:58:c8:c5:cf:ba:47:97:7a:63:46: 20:32:00:5d:1d:3e:5c:ab:d7:38:93:f8:a3:37:60: 9d:64:70:26:f2:5c:29:84:07:67:87:f1:f5:2f:97: 9b:05:bc:47:63:a0:83:ac:82:cc:4a:99:4d:80:5a: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:78:F2:99:92:96:85:40:5E:1D:FA:85:2C:39:3E:FA:D8:97:C9:BA X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:24:af:5e:e3:08:d3:47:2f:a5:11:39:05:97:1e:33:44:31: 74:13:40:9b:29:1d:89:96:49:61:da:24:1e:f9:85:bc:a0:23: 25:b8:96:2d:1a:10:9a:20:d9:8f:ff:57:db:34:5c:80:46:dc: 0c:f6:a2:7c:d9:6d:29:c7:69:8c:50:88:10:a8:3b:d2:03:6f: 16:05:a6:97:38:7a:db:2a:bb:02:39:7b:90:a9:87:1c:fc:95: 95:55:a7:61:d6:6e:4f:d0:9b:58:88:c2:90:d7:62:f0:33:da: 94:93:54:2f:20:ed:4c:0a:e8:b0:4c:c8:4f:5f:bc:31:42:43: eb:84:e5:92:a9:8b:c0:d0:6a:c4:e5:1a:2b:f2:7d:78:c2:97: bc:46:a0:85:a4:4f:65:14:d3:90:67:a8:17:bf:23:21:15:13: 9b:b4:c8:47:ea:cf:55:8d:78:bb:a7:7b:0b:1f:17:6b:d8:d9: 92:42:52:fe:69:a9:80:d8:56:a8:5a:03:37:fd:80:e5:db:ea: 8b:26:46:5e:08:22:76:53:e0:43:e9:e6:b8:3c:af:19:b0:23: 9a:cf:79:a3:00:32:d1:9e:33:d3:4d:ba:39:fd:63:c2:ce:e0: bb:ac:97:78:a0:53:82:0d:8a:0d:ac:dd:52:ea:8a:a8:41:7e: 3b:34:6e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjYwMzI2MTYwNjA3WhcNMjYwNDAyMTYwNjA3WjAYMRYwFAYD VQQDEw02OWM1NTk2Zi03NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMCKdxOGDrJV48kqfQEPuuuIvyurMES09ApKc2z8ZC/9ehzWUdpLZnWH8dA0 wSFis8mIQ7EJagrr0PSul/rYFFmSZ06M9F1DUE3LJ85NFc/zIkM/4dVkovpbcqV6 ODRoi/4LNtGOVgojUka9lrDQZUb+1Nxaz35B8qQKGO+7KFJRO8JJtWW5farvfQGg iNKencTASIrcdSU5uoVyEOdnQFOjO/gp2H4KcI1LfTOaS5jZ/LbRmchkc9FcHdir O2XtZ+Bzgygbk1jIxc+6R5d6Y0YgMgBdHT5cq9c4k/ijN2CdZHAm8lwphAdnh/H1 L5ebBbxHY6CDrILMSplNgFozowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOV48pmS loVAXh36hSw5PvrYl8m6MB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMCSvXuMI00cvpRE5BZceM0QxdBNAmykdiZZJYdokHvmFvKAjJbiWLRoQmiDZ j/9X2zRcgEbcDPaifNltKcdpjFCIEKg70gNvFgWmlzh62yq7Ajl7kKmHHPyVlVWn YdZuT9CbWIjCkNdi8DPalJNULyDtTArosEzIT1+8MUJD64TlkqmLwNBqxOUaK/J9 eMKXvEaghaRPZRTTkGeoF78jIRUTm7TIR+rPVY14u6d7Cx8Xa9jZkkJS/mmpgNhW qFoDN/2A5dvqiyZGXggidlPgQ+nmuDyvGbAjms95owAy0Z4z0026Of1jws7gu6yX eKBTgg2KDazdUuqKqEF+OzRugg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:50:54 2026 by rpki-client