$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: ZcUGGKLuQL3lcHd4hV/IsN1iG9yuJVhiu1nG3v7Wlgc= Subject key identifier: 58:DE:3B:53:63:BC:B5:6F:4A:A0:BE:B9:6B:A8:4B:A6:F9:7B:C0:C2 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 06BF Signing time: Tue 24 Mar 2026 22:00:55 +0000 Manifest this update: Tue 24 Mar 2026 22:00:55 +0000 Manifest next update: Tue 31 Mar 2026 22:00:55 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: x4tSkodgyGOkxK0OyFSymNfQF0B0uAAE1Nqx3DpqFMQ=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: dpmkPDFfKUB6qjF/TkJcrvInRqDocmXVraC9003p2B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Mar 24 22:00:55 2026 GMT Not After : Mar 31 22:00:55 2026 GMT Subject: CN=69c30997-922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:78:53:a0:74:90:8f:82:92:86:ed:b1:34: d2:75:b7:6b:41:1c:3e:10:5d:a7:e1:b0:77:71:93: 7d:0b:97:2f:9b:2b:a8:91:27:72:01:6a:b9:fc:0d: 78:bd:03:d4:58:17:f1:24:66:9c:6a:5e:ba:6f:c4: a0:20:8f:ae:38:4e:c3:ff:08:87:ab:07:19:6e:5e: 85:fe:a9:60:67:66:cb:7a:4b:e2:cb:e3:c8:c0:92: a2:40:48:80:15:82:99:6d:0a:94:42:23:79:4a:42: 2d:7c:14:3a:b9:68:bf:7a:aa:13:10:6a:52:fa:2b: 51:ae:a8:6d:70:67:22:72:68:eb:cd:cc:48:22:e2: c5:e9:38:27:d2:09:51:2c:d4:1b:0d:4e:0c:b1:5f: d7:32:76:48:c2:d7:89:b2:33:fc:b7:9e:a1:27:6a: d8:f0:14:6f:f2:73:40:d9:23:bd:30:7e:02:d1:dc: 4a:03:ef:3b:f3:06:ae:c2:2e:b6:9e:5e:02:7e:e1: 7e:7e:57:25:df:07:95:57:ee:38:6d:3e:9f:0e:56: d0:7e:31:0a:2c:89:7c:92:c2:4f:e8:85:95:3b:c9: 3c:d6:e1:07:ab:e1:84:a2:d6:28:48:8d:60:85:87: 6d:f6:6a:9b:c9:56:fe:10:6f:88:a0:06:f4:e3:fd: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DE:3B:53:63:BC:B5:6F:4A:A0:BE:B9:6B:A8:4B:A6:F9:7B:C0:C2 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:da:c3:b8:a4:6f:63:9c:27:2e:93:01:de:16:2f:fc:e9:45: e8:68:5b:01:0e:6b:02:ab:4d:ec:94:b9:b1:d8:ed:26:05:d4: 58:e5:2a:02:6d:6d:03:af:90:c1:b2:ef:1f:75:0c:47:c4:f6: 82:53:d8:ee:1c:5b:6b:ac:1e:5f:f8:b7:e8:0c:e1:9a:1c:1a: 15:54:74:f5:f4:ab:c9:15:10:bc:f6:20:da:65:04:b9:5f:b2: 0f:70:3a:76:af:e5:e3:01:0e:a1:38:57:ac:8d:e4:65:7d:ee: a9:91:03:0b:d9:24:e4:99:f1:2d:ca:cf:95:b6:e1:22:63:b1: f9:a1:f3:60:5d:8a:44:bb:04:7b:5f:39:52:7f:28:43:06:a1: e1:71:17:c0:f1:03:eb:f0:2a:30:7f:8a:d1:d6:ce:b5:16:b2: f3:dd:27:06:8c:2d:c7:d1:8f:64:fc:71:b5:53:7e:09:15:24: f8:b6:f8:ca:c4:45:fe:8f:46:4e:27:c4:c5:e9:59:f1:14:19: d5:26:0b:77:52:43:02:2a:9e:22:7f:c6:8d:b2:8c:35:28:90: 2d:7f:0b:ac:5c:54:b0:b8:0c:74:be:7a:1d:20:34:a6:36:b3: 70:3c:dd:7a:cb:e6:1e:f6:a8:34:89:d2:e2:bd:d3:b2:7b:30: 3d:a4:17:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjYwMzI0MjIwMDU1WhcNMjYwMzMxMjIwMDU1WjAYMRYwFAYD VQQDEw02OWMzMDk5Ny05MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/N4U6B0kI+CkobtsTTSdbdrQRw+EF2n4bB3cZN9C5cvmyuokSdyAWq5/A14 vQPUWBfxJGacal66b8SgII+uOE7D/wiHqwcZbl6F/qlgZ2bLekviy+PIwJKiQEiA FYKZbQqUQiN5SkItfBQ6uWi/eqoTEGpS+itRrqhtcGcicmjrzcxIIuLF6Tgn0glR LNQbDU4MsV/XMnZIwteJsjP8t56hJ2rY8BRv8nNA2SO9MH4C0dxKA+878wauwi62 nl4CfuF+flcl3weVV+44bT6fDlbQfjEKLIl8ksJP6IWVO8k81uEHq+GEotYoSI1g hYdt9mqbyVb+EG+IoAb04/0OvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjeO1Nj vLVvSqC+uWuoS6b5e8DCMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS9rDuKRvY5wnLpMB3hYv/OlF6GhbAQ5rAqtN7JS5sdjtJgXUWOUqAm1tA6+Q wbLvH3UMR8T2glPY7hxba6weX/i36AzhmhwaFVR09fSryRUQvPYg2mUEuV+yD3A6 dq/l4wEOoThXrI3kZX3uqZEDC9kk5JnxLcrPlbbhImOx+aHzYF2KRLsEe185Un8o Qwah4XEXwPED6/AqMH+K0dbOtRay890nBowtx9GPZPxxtVN+CRUk+Lb4ysRF/o9G TifExelZ8RQZ1SYLd1JDAiqeIn/GjbKMNSiQLX8LrFxUsLgMdL56HSA0pjazcDzd esvmHvaoNInS4r3TsnswPaQXuw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:09 2026 by rpki-client