$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: ajddzLrBVCLIopn06fF4pLaoVFD06C4hLc/9vSWzJGw= Subject key identifier: 34:0B:1F:1E:54:37:3A:CA:B4:CD:40:01:5E:D4:15:86:00:C8:45:06 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 54 Signing time: Wed 25 Mar 2026 07:27:00 +0000 Manifest this update: Wed 25 Mar 2026 07:26:59 +0000 Manifest next update: Wed 01 Apr 2026 07:26:59 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: 4BoaDqP2j3/0BD8SmvLtP8rAaPEIGw70mGKYY829SGI=) 2: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) 3: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Mar 25 07:26:59 2026 GMT Not After : Apr 1 07:26:59 2026 GMT Subject: CN=69c38e44-f52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:9d:ee:90:9f:b4:77:07:07:c5:fd:ae:4b: 82:87:06:1e:8e:67:1d:75:27:cb:38:1b:89:ed:cf: 12:39:0c:07:37:de:ff:6b:45:92:3c:3a:0d:2b:40: 0a:6b:d7:c3:64:b1:84:81:80:90:44:c7:6a:20:58: ad:e7:5b:13:79:c0:bc:8a:ff:e1:01:16:b7:5b:2f: 85:dc:c5:b4:9c:8c:a9:ad:1c:83:1d:00:a3:13:6b: fe:fd:af:aa:09:38:cc:1b:ca:5e:01:ca:d7:b3:31: a4:2d:35:35:06:30:60:ce:13:cb:ca:07:e4:9d:76: 6c:a7:5e:cd:a5:71:cc:47:b0:c9:aa:78:b4:d2:e0: 99:5d:25:ec:98:ee:e2:e7:b8:be:fe:f0:ba:00:93: 9f:9d:60:45:c0:2e:c0:29:b8:8c:7a:0d:e9:35:89: c1:25:4c:53:21:a8:0e:82:45:7b:eb:10:f0:b3:8e: 8d:d3:01:65:99:ef:f5:41:4d:75:3f:16:14:68:a0: b1:e1:01:ca:87:4e:7d:9f:b8:7f:01:65:90:00:94: d6:b4:46:71:94:97:de:a0:50:d2:a1:27:43:87:3d: a1:ff:b8:b4:52:82:c4:03:6a:41:69:3d:4c:1c:31: b9:89:e6:0d:ef:5d:45:7a:f6:10:a8:78:f7:2b:5c: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:1F:1E:54:37:3A:CA:B4:CD:40:01:5E:D4:15:86:00:C8:45:06 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:84:93:ee:19:a5:01:ba:ea:db:b4:27:6f:d7:be:c7:3a: 04:4f:62:79:c8:b1:57:f6:2a:45:4a:d2:a4:a0:61:6c:46:77: d9:86:6b:2c:46:af:69:e8:11:bc:38:45:df:43:7e:16:b8:ef: f1:bc:dd:bc:46:b9:b4:83:c6:9b:25:df:83:ac:d5:97:28:ab: 99:a9:c0:5d:b7:ec:d6:a2:8e:21:78:b5:a5:0a:f7:91:d7:95: e2:16:de:de:1d:2b:4e:e9:78:65:a4:ec:37:2f:9e:53:7a:44: 89:01:f6:ca:1b:00:3c:58:a6:ae:3f:11:da:5a:dc:5e:c9:e9: 75:a8:4e:72:a7:b9:e8:49:44:cc:8e:4e:90:36:2d:a1:d9:46: 9b:3b:70:29:58:96:86:c0:5b:8e:02:42:bc:16:b6:d1:a2:68: b7:59:d2:a3:c6:5a:8f:ad:14:d7:47:e6:8b:bf:dd:17:c7:be: c2:0a:b4:42:95:1b:d1:14:34:0a:dd:2d:e0:c6:6f:f7:4e:f4: ce:f2:71:2e:7e:3e:ed:c5:3f:7d:9f:19:1a:8a:ed:e7:b0:25: 13:b8:da:1f:b6:0a:2e:0f:86:30:b2:79:72:5d:64:12:5c:49: ec:9b:49:86:83:53:a8:4a:f3:7a:58:0e:ba:e2:c3:54:0c:0e: 68:5c:09:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNjAzMjUwNzI2NTlaFw0yNjA0MDEwNzI2NTlaMBgxFjAUBgNV BAMTDTY5YzM4ZTQ0LWY1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Ep3ukJ+0dwcHxf2uS4KHBh6OZx11J8s4G4ntzxI5DAc33v9rRZI8Og0rQApr 18NksYSBgJBEx2ogWK3nWxN5wLyK/+EBFrdbL4XcxbScjKmtHIMdAKMTa/79r6oJ OMwbyl4BytezMaQtNTUGMGDOE8vKB+SddmynXs2lccxHsMmqeLTS4JldJeyY7uLn uL7+8LoAk5+dYEXALsApuIx6Dek1icElTFMhqA6CRXvrEPCzjo3TAWWZ7/VBTXU/ FhRooLHhAcqHTn2fuH8BZZAAlNa0RnGUl96gUNKhJ0OHPaH/uLRSgsQDakFpPUwc MbmJ5g3vXUV69hCoePcrXIt/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNAsfHlQ3 Osq0zUABXtQVhgDIRQYwHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 OEE3L0ZBRTk2QzRBQjYyMDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1L RDhVR2ZXRkJHanRwVmxvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1MoST7hmlAbrq27Qnb9e+xzoET2J5yLFX9ipFStKkoGFsRnfZhmssRq9p6BG8 OEXfQ34WuO/xvN28Rrm0g8abJd+DrNWXKKuZqcBdt+zWoo4heLWlCveR15XiFt7e HStO6XhlpOw3L55TekSJAfbKGwA8WKauPxHaWtxeyel1qE5yp7noSUTMjk6QNi2h 2UabO3ApWJaGwFuOAkK8FrbRomi3WdKjxlqPrRTXR+aLv90Xx77CCrRClRvRFDQK 3S3gxm/3TvTO8nEufj7txT99nxkaiu3nsCUTuNoftgouD4YwsnlyXWQSXEnsm0mG g1OoSvN6WA664sNUDA5oXAn+ -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:38 2026 by rpki-client