$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: j5fGnbI8H3uBJ/MCiqagXhrxuH2IWaDzPVYmxvMP9RQ= Subject key identifier: 07:86:44:A0:CF:1E:5D:A7:92:50:17:39:23:83:D5:4C:EC:BB:F5:68 Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 0111 Signing time: Wed 25 Mar 2026 05:09:41 +0000 Manifest this update: Wed 25 Mar 2026 05:09:40 +0000 Manifest next update: Wed 01 Apr 2026 05:09:40 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: nBZZVeuL8oMM4g0tAA/SCLLSOpBsqx5+C/BEFKcEEUI=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Mar 25 05:09:40 2026 GMT Not After : Apr 1 05:09:40 2026 GMT Subject: CN=69c36e15-513b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:13:cf:45:a9:b4:19:3b:e0:e6:59:99:17: dd:31:fd:eb:17:1c:34:79:27:dc:23:1d:a9:d9:33: b1:39:22:04:3a:04:e6:3c:37:18:35:a3:cb:ee:e4: 8b:29:b6:38:2c:36:e8:3d:d1:b4:ed:8f:74:07:1d: 60:50:7c:b1:ce:69:68:98:1b:17:6e:9b:00:63:fc: 52:71:6b:fb:1a:33:86:e9:9c:ee:90:72:ff:7d:2e: 06:26:ae:3d:ed:6b:87:0f:85:ae:72:5d:c1:25:f2: 02:70:98:34:29:41:75:b1:5c:73:b2:2c:64:29:2b: fc:13:1e:83:20:e6:5a:c4:00:d8:b3:d9:7b:14:ef: b3:58:73:79:05:24:fe:e7:d3:ca:19:86:40:e0:08: 34:c3:b0:d1:1a:85:79:bb:c9:19:2f:5b:63:0f:2f: c8:d8:3b:ff:c5:d8:28:10:74:b0:90:29:4d:ce:fe: 0b:55:27:1a:d1:ac:45:b4:78:e0:0b:d7:c6:b2:b6: 7c:f5:04:04:38:a6:2a:1a:55:0b:1b:0e:f5:d0:8d: fa:e3:0b:59:ed:09:3d:c2:99:fa:94:f1:55:19:03: 81:42:a9:e4:c4:ac:c2:4d:d9:c4:98:8e:8e:ff:3d: da:e2:5e:1e:f8:a4:43:a2:24:29:b9:57:04:c9:8d: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:86:44:A0:CF:1E:5D:A7:92:50:17:39:23:83:D5:4C:EC:BB:F5:68 X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:39:c5:5e:a4:74:7a:a3:fa:11:80:ab:fa:08:17:d9:fb:82: 3a:71:96:9e:71:58:87:ac:2a:62:7f:b7:50:bb:a5:8c:6f:82: a6:01:96:41:6d:c5:57:27:7b:0e:f5:d4:6f:43:14:5d:ca:22: 82:1f:c3:18:b7:e7:f8:1b:b0:79:1b:81:1e:13:50:9f:f3:72: 41:cf:da:01:98:a8:55:56:49:3c:d7:15:74:5c:ad:3b:b4:41: 29:71:78:11:4e:38:35:4c:9e:bf:b9:07:45:88:fb:1d:26:e1: c7:13:8e:13:a8:6b:93:a6:88:de:a1:d8:81:a0:70:99:8e:f2: 4e:b2:8b:f3:54:d7:b5:e1:c9:21:80:f3:e3:2b:b1:2c:5e:58: 98:32:57:30:b4:45:dc:3a:4d:bb:fd:60:f8:35:e7:48:98:38: 72:80:51:d1:6c:a8:59:ee:c1:d8:20:a6:e5:07:6f:69:69:23: 9c:28:e3:06:2f:26:29:21:16:bb:de:68:94:fc:ca:26:94:47: 60:7b:4d:63:ae:28:6a:7a:69:ab:5d:01:b9:e5:0b:91:e6:b0: 35:a0:3d:11:eb:35:e4:b4:d3:7a:4d:22:0e:01:a6:91:e4:8c: eb:6a:b9:45:c4:ab:6f:25:9c:98:1a:53:30:ba:6e:b8:47:83: a1:49:d9:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjYwMzI1MDUwOTQwWhcNMjYwNDAxMDUwOTQwWjAYMRYwFAYD VQQDEw02OWMzNmUxNS01MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWsTz0WptBk74OZZmRfdMf3rFxw0eSfcIx2p2TOxOSIEOgTmPDcYNaPL7uSL KbY4LDboPdG07Y90Bx1gUHyxzmlomBsXbpsAY/xScWv7GjOG6ZzukHL/fS4GJq49 7WuHD4Wucl3BJfICcJg0KUF1sVxzsixkKSv8Ex6DIOZaxADYs9l7FO+zWHN5BST+ 59PKGYZA4Ag0w7DRGoV5u8kZL1tjDy/I2Dv/xdgoEHSwkClNzv4LVSca0axFtHjg C9fGsrZ89QQEOKYqGlULGw710I364wtZ7Qk9wpn6lPFVGQOBQqnkxKzCTdnEmI6O /z3a4l4e+KRDoiQpuVcEyY3s6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeGRKDP Hl2nklAXOSOD1Uzsu/VoMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbjnFXqR0eqP6EYCr+ggX2fuCOnGWnnFYh6wqYn+3ULuljG+CpgGWQW3FVyd7 DvXUb0MUXcoigh/DGLfn+BuweRuBHhNQn/NyQc/aAZioVVZJPNcVdFytO7RBKXF4 EU44NUyev7kHRYj7HSbhxxOOE6hrk6aI3qHYgaBwmY7yTrKL81TXteHJIYDz4yux LF5YmDJXMLRF3DpNu/1g+DXnSJg4coBR0WyoWe7B2CCm5QdvaWkjnCjjBi8mKSEW u95olPzKJpRHYHtNY64oanppq10BueULkeawNaA9Ees15LTTek0iDgGmkeSM62q5 RcSrbyWcmBpTMLpuuEeDoUnZIA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:21 2026 by rpki-client