$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: rC86YE2Emgz7YvV6V7cPG7jfYvaXPZUFFsyn4HTCxJc= Subject key identifier: 25:B3:86:75:F0:7A:C1:F9:58:B4:B6:B5:05:3A:46:FF:8D:8E:88:18 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 083B Signing time: Tue 24 Mar 2026 20:38:00 +0000 Manifest this update: Tue 24 Mar 2026 20:38:00 +0000 Manifest next update: Tue 31 Mar 2026 20:38:00 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: fZmDkH//EpG4IgYMdeP9feBVMTziZoIirYeK1aCIG+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Mar 24 20:38:00 2026 GMT Not After : Mar 31 20:38:00 2026 GMT Subject: CN=69c2f628-4133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:db:ab:90:39:6c:58:73:b6:95:9d:49:73: 6e:60:40:c9:41:56:91:4a:83:31:10:9c:c3:75:4b: fa:c6:07:cc:31:83:a7:97:a6:a2:49:35:98:c8:1e: 8c:8f:cc:99:0f:01:ee:dd:d7:de:96:88:d4:52:11: 68:1c:5f:c0:4c:27:65:1d:fb:da:96:a1:c3:a6:e6: ae:b9:b3:d9:67:1f:d7:81:c1:21:9e:01:73:29:8d: 30:f3:41:d2:c4:3a:7c:9d:ce:51:2d:51:c3:05:61: 6f:6c:d5:98:17:e3:40:de:29:0e:fd:f3:bc:d8:49: 3a:a0:47:61:51:c2:1d:df:64:b5:ce:12:e8:fe:b7: 65:8f:72:db:57:d6:86:3c:0d:52:76:dc:a2:f1:70: 21:e0:c7:e6:6a:f7:50:55:2a:07:9b:8f:26:f5:85: 38:ab:51:22:ad:99:37:33:b8:63:43:7d:aa:d4:ec: 36:62:10:b4:6c:b3:85:79:98:ff:b5:e0:8f:47:38: e2:b3:e7:9c:88:03:f7:32:32:ab:78:62:eb:4d:1d: 03:df:f9:a0:b8:37:40:ff:7d:9f:9a:a7:1d:f8:c3: ee:1b:2d:e6:17:c1:9d:d3:5f:5e:0b:5a:0b:8e:45: 25:4f:66:5e:40:ad:2d:ca:41:24:30:f6:1a:07:4b: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B3:86:75:F0:7A:C1:F9:58:B4:B6:B5:05:3A:46:FF:8D:8E:88:18 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:47:08:fe:f5:05:1a:15:09:70:af:1b:fa:89:e8:e3:d4:84: 9c:91:40:33:4f:0c:75:b8:0c:c2:e1:cc:5c:d0:c4:1b:e7:54: 42:87:92:c2:8d:c0:db:aa:b0:f0:21:f6:7f:86:a6:8a:74:6c: 75:b5:1c:c3:db:4d:89:a4:c6:08:27:6d:dd:06:0a:06:c6:f3: eb:31:63:d4:3c:21:17:9e:16:a7:c5:c8:4c:96:a7:62:c0:c2: 22:b1:46:8d:01:d1:c4:ee:75:fa:c6:de:a9:32:e0:81:ff:1a: 1e:1a:96:0a:ab:6d:ec:f5:ee:5f:a8:5c:1d:67:d5:d4:f9:ff: ac:ed:fd:18:f2:fb:f8:63:ef:81:44:a6:8e:29:90:5c:e0:04: 22:2c:c3:35:f8:be:3e:bf:17:a5:eb:4f:16:d9:13:fa:6b:6e: 93:bb:85:52:12:c8:7a:f1:be:0b:f6:28:92:73:d9:b7:28:f2: 15:57:68:04:22:46:79:a3:5e:0a:6d:e2:46:ac:3b:45:e0:25: e6:50:2f:bd:46:54:21:f0:68:a6:18:2d:ca:da:11:1a:8e:c5: 41:7f:f3:20:c7:28:2d:0f:b1:06:f5:7f:82:aa:c7:76:e4:f9: e1:80:3a:a1:cd:ef:a7:6d:c6:62:08:47:32:5b:d6:46:9c:f0: 2f:fa:2e:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwMzI0MjAzODAwWhcNMjYwMzMxMjAzODAwWjAYMRYwFAYD VQQDEw02OWMyZjYyOC00MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HLbq5A5bFhztpWdSXNuYEDJQVaRSoMxEJzDdUv6xgfMMYOnl6aiSTWYyB6M j8yZDwHu3dfelojUUhFoHF/ATCdlHfvalqHDpuauubPZZx/XgcEhngFzKY0w80HS xDp8nc5RLVHDBWFvbNWYF+NA3ikO/fO82Ek6oEdhUcId32S1zhLo/rdlj3LbV9aG PA1Sdtyi8XAh4MfmavdQVSoHm48m9YU4q1EirZk3M7hjQ32q1Ow2YhC0bLOFeZj/ teCPRzjis+eciAP3MjKreGLrTR0D3/mguDdA/32fmqcd+MPuGy3mF8Gd019eC1oL jkUlT2ZeQK0tykEkMPYaB0vXywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWzhnXw esH5WLS2tQU6Rv+NjogYMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFEcI/vUFGhUJcK8b+ono49SEnJFAM08MdbgMwuHMXNDEG+dUQoeSwo3A26qw 8CH2f4aminRsdbUcw9tNiaTGCCdt3QYKBsbz6zFj1DwhF54Wp8XITJanYsDCIrFG jQHRxO51+sbeqTLggf8aHhqWCqtt7PXuX6hcHWfV1Pn/rO39GPL7+GPvgUSmjimQ XOAEIizDNfi+Pr8XpetPFtkT+mtuk7uFUhLIevG+C/YoknPZtyjyFVdoBCJGeaNe Cm3iRqw7ReAl5lAvvUZUIfBophgtytoRGo7FQX/zIMcoLQ+xBvV/gqrHduT54YA6 oc3vp23GYghHMlvWRpzwL/ouAA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:32 2026 by rpki-client