$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: /9Uy42HirGC6frgcWZXJ3xCbFqx/BXbThYkRVt/CEEg= Subject key identifier: 34:06:E9:95:C0:AA:B6:57:8D:43:4E:A7:2E:4D:B4:4C:78:34:01:A2 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 40 Signing time: Wed 25 Mar 2026 07:36:36 +0000 Manifest this update: Wed 25 Mar 2026 07:36:35 +0000 Manifest next update: Wed 01 Apr 2026 07:36:35 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: 95e2tav+NafK5z1LJnHyzlfjaoHhPE0bfWcOTYFFl7Y=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Mar 25 07:36:35 2026 GMT Not After : Apr 1 07:36:35 2026 GMT Subject: CN=69c39084-dc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:c8:49:1f:1b:cb:5b:91:c2:61:41:06:e3: 3b:f7:2b:08:9c:2a:d3:e9:28:e4:00:59:1d:7f:f2: 78:05:15:46:77:0e:33:2e:f1:3f:34:ab:a0:af:f4: ef:50:b8:de:98:5e:05:69:7d:f6:4d:3c:2d:5f:03: 12:25:88:48:12:af:63:e0:0d:94:72:00:cf:55:05: c5:66:3d:bc:c6:7e:76:1b:22:aa:1d:2c:0f:91:e0: 11:99:e2:2f:54:a5:5c:42:13:7f:68:f0:f9:1d:4e: 6a:cd:88:cd:ad:bf:bc:70:53:24:66:3c:b0:b8:16: 0e:87:b0:42:d6:ba:44:78:d0:fa:77:10:fc:b4:a9: b4:3c:09:fc:7d:d4:67:5e:60:22:f5:fb:60:09:6d: 67:f7:60:26:68:b0:39:da:d9:a0:ce:be:dc:f3:8c: 9f:a7:2f:63:03:f9:82:b3:57:ef:06:43:b1:23:1b: 26:41:83:df:3c:85:ca:42:d0:8c:76:6e:90:82:4c: 58:97:22:3b:01:2f:19:b4:7a:19:5d:2c:4a:80:70: bb:ff:3c:1e:c9:f5:96:07:34:e6:8a:38:09:78:60: 64:cb:4b:b5:cd:fd:f3:ca:24:67:15:d5:2a:c5:74: 9f:ad:4f:2a:58:66:96:82:fc:f7:cf:a3:7b:63:d8: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:E9:95:C0:AA:B6:57:8D:43:4E:A7:2E:4D:B4:4C:78:34:01:A2 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6c:a1:bf:23:c5:50:24:0b:cd:1d:6b:4e:8b:b9:01:75:d4: eb:1c:c3:71:72:36:d3:49:07:7d:44:38:2a:88:2e:c2:a1:ca: b8:ba:77:70:44:0c:78:49:95:a9:5a:da:ee:34:98:26:d7:17: 05:46:e0:b6:6e:ae:2b:76:42:c5:8c:32:6c:0d:e5:df:41:ea: 11:30:b0:75:7e:05:dc:11:d5:03:ba:09:a7:ba:3c:70:1b:3e: 2a:17:b8:cf:fc:7c:db:ab:62:bb:d1:43:28:53:f0:29:fe:43: 54:8f:4d:ab:25:27:2e:b4:f2:75:2c:38:90:ad:a1:9c:1e:73: 33:31:01:db:34:56:01:b7:11:48:93:f8:d3:20:b3:24:9e:b8: fa:9b:e5:15:64:8a:b8:09:03:fa:e9:ae:87:e2:37:70:72:05: 1f:b5:a9:4b:91:88:c4:a3:88:19:d9:93:0b:8d:6f:ac:5b:b6: 19:fe:52:9d:18:c7:11:42:94:74:b1:ce:cd:4d:60:ee:21:7e: 17:39:e9:85:6c:08:38:98:cb:56:8c:09:9c:93:b7:a9:7c:c4: e5:2a:91:44:96:a7:6d:8d:78:dc:72:d3:1d:d7:35:0f:89:6c: ff:96:ea:57:e4:51:41:b5:d6:cb:06:4c:52:58:6e:3e:a9:d4: e5:a5:f1:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNjAzMjUwNzM2MzVaFw0yNjA0MDEwNzM2MzVaMBgxFjAUBgNV BAMTDTY5YzM5MDg0LWRjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFgshJHxvLW5HCYUEG4zv3KwicKtPpKOQAWR1/8ngFFUZ3DjMu8T80q6Cv9O9Q uN6YXgVpffZNPC1fAxIliEgSr2PgDZRyAM9VBcVmPbzGfnYbIqodLA+R4BGZ4i9U pVxCE39o8PkdTmrNiM2tv7xwUyRmPLC4Fg6HsELWukR40Pp3EPy0qbQ8Cfx91Gde YCL1+2AJbWf3YCZosDna2aDOvtzzjJ+nL2MD+YKzV+8GQ7EjGyZBg988hcpC0Ix2 bpCCTFiXIjsBLxm0ehldLEqAcLv/PB7J9ZYHNOaKOAl4YGTLS7XN/fPKJGcV1SrF dJ+tTypYZpaC/PfPo3tj2OetAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNAbplcCq tleNQ06nLk20THg0AaIwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBabKG/I8VQJAvNHWtOi7kBddTrHMNxcjbTSQd9RDgqiC7Cocq4undwRAx4SZWp WtruNJgm1xcFRuC2bq4rdkLFjDJsDeXfQeoRMLB1fgXcEdUDugmnujxwGz4qF7jP /Hzbq2K70UMoU/Ap/kNUj02rJScutPJ1LDiQraGcHnMzMQHbNFYBtxFIk/jTILMk nrj6m+UVZIq4CQP66a6H4jdwcgUftalLkYjEo4gZ2ZMLjW+sW7YZ/lKdGMcRQpR0 sc7NTWDuIX4XOemFbAg4mMtWjAmck7epfMTlKpFElqdtjXjcctMd1zUPiWz/lupX 5FFBtdbLBkxSWG4+qdTlpfFG -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:21 2026 by rpki-client