$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: oxLg0GziX1ycgO9cNqOzjZc/0zrN/GFvL2eIT2RtLAU= Subject key identifier: BC:4F:DC:53:52:32:A7:8C:B1:E5:04:AA:5B:21:98:4A:14:D3:A0:E9 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 04C6 Signing time: Tue 24 Mar 2026 23:34:04 +0000 Manifest this update: Tue 24 Mar 2026 23:34:04 +0000 Manifest next update: Tue 31 Mar 2026 23:34:04 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: bMzfJC6a1e+7GgAhycaRZlOGr4sFUuDb4KHjuqiEnY8=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Mar 24 23:34:04 2026 GMT Not After : Mar 31 23:34:04 2026 GMT Subject: CN=69c31f6c-f21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:28:03:b6:9c:4b:91:af:2d:3e:9c:82:77: 70:a0:c9:a5:02:ac:b8:9c:85:5b:2f:0c:da:45:a6: 24:6b:33:50:dc:c6:73:70:34:64:7a:55:07:fe:95: 1b:4b:b0:fb:47:f0:45:03:d0:4d:35:97:15:4c:63: ab:cc:2a:65:61:31:d1:20:d3:9f:6f:5a:53:e2:9d: aa:4a:2e:6b:52:cc:02:8c:36:cf:8e:fc:21:34:f8: 90:7f:b1:a0:43:e3:69:f7:b1:cb:fa:1d:75:9b:37: 61:7c:1e:0c:53:41:04:3c:1e:0b:84:0e:84:fd:9e: f6:64:1c:50:67:4f:93:a5:02:73:cf:3b:cb:1c:1b: c0:af:e5:0c:54:ba:17:01:22:ba:a4:45:fa:67:a2: 25:1b:5c:49:a8:a2:60:30:67:a1:82:b6:ce:e9:18: 30:f8:e5:d8:53:5c:72:1d:85:5b:5e:d5:8e:7f:a9: 6f:47:a4:d2:19:01:16:e9:92:90:0c:50:e4:65:29: 91:f4:e8:71:8a:d4:c0:0b:71:32:7c:b8:ca:14:b6: 85:c9:d7:c7:4e:14:4c:11:8b:9f:9d:4f:8a:62:39: c8:2c:74:45:e2:ae:b1:53:0d:a6:a1:df:32:cf:87: be:7b:94:72:da:d6:fe:f2:bf:46:39:db:30:04:40: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4F:DC:53:52:32:A7:8C:B1:E5:04:AA:5B:21:98:4A:14:D3:A0:E9 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:70:84:83:c9:12:e6:a8:26:6b:18:61:2d:e9:50:0d:76:c7: 67:8b:b6:46:c8:c7:a9:aa:f7:b0:fa:51:5a:80:75:9f:aa:46: cf:11:63:bf:5d:46:1f:4a:1e:73:9d:60:ad:c5:ff:a9:27:d6: 44:11:08:e4:c8:b7:b7:a5:c0:74:8c:68:c1:71:ea:ef:31:a0: 98:1d:d4:86:4c:6c:e7:49:d8:ee:08:be:d7:83:5b:60:7e:d7: 7e:7a:71:c2:8d:ac:79:de:d2:46:be:f3:5d:86:17:38:a7:b5: 6e:0c:b8:76:b9:31:00:39:76:10:3d:28:17:2b:cc:75:f2:55: 12:a4:55:69:a8:30:d2:70:04:38:38:86:e7:0f:e0:9b:a9:9f: aa:5b:9f:5b:5f:3e:a9:bd:52:9b:c2:0e:6c:f7:b9:a0:56:b5: 2d:86:7b:2d:f9:25:7f:34:4f:f8:8d:fd:63:a5:01:ef:60:da: 5a:14:63:b5:ac:60:6e:fc:2d:c3:e5:f8:5f:e4:4a:d3:8d:0a: 7d:e8:4f:e7:8e:3d:45:6b:cd:0c:66:45:db:52:bc:6c:41:f6: ee:df:4d:6f:c1:64:5c:2a:bf:b7:4b:64:4f:51:67:37:8f:41: b4:26:6f:16:1d:d5:af:f6:c1:fa:80:05:f3:89:d2:de:2e:ae: 2c:4e:1f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjYwMzI0MjMzNDA0WhcNMjYwMzMxMjMzNDA0WjAYMRYwFAYD VQQDEw02OWMzMWY2Yy1mMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtugoA7acS5GvLT6cgndwoMmlAqy4nIVbLwzaRaYkazNQ3MZzcDRkelUH/pUb S7D7R/BFA9BNNZcVTGOrzCplYTHRINOfb1pT4p2qSi5rUswCjDbPjvwhNPiQf7Gg Q+Np97HL+h11mzdhfB4MU0EEPB4LhA6E/Z72ZBxQZ0+TpQJzzzvLHBvAr+UMVLoX ASK6pEX6Z6IlG1xJqKJgMGehgrbO6Rgw+OXYU1xyHYVbXtWOf6lvR6TSGQEW6ZKQ DFDkZSmR9OhxitTAC3EyfLjKFLaFydfHThRMEYufnU+KYjnILHRF4q6xUw2mod8y z4e+e5Ry2tb+8r9GOdswBEDL/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxP3FNS MqeMseUEqlshmEoU06DpMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQnCEg8kS5qgmaxhhLelQDXbHZ4u2RsjHqar3sPpRWoB1n6pGzxFjv11GH0oe c51grcX/qSfWRBEI5Mi3t6XAdIxowXHq7zGgmB3Uhkxs50nY7gi+14NbYH7Xfnpx wo2sed7SRr7zXYYXOKe1bgy4drkxADl2ED0oFyvMdfJVEqRVaagw0nAEODiG5w/g m6mfqlufW18+qb1Sm8IObPe5oFa1LYZ7LfklfzRP+I39Y6UB72DaWhRjtaxgbvwt w+X4X+RK040KfehP5449RWvNDGZF21K8bEH27t9Nb8FkXCq/t0tkT1FnN49BtCZv Fh3Vr/bB+oAF84nS3i6uLE4few== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:20 2026 by rpki-client