$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: XRjaZuIIAsSRDk21yMfGl/9LV/7YOtqnt2LSZM37T34= Subject key identifier: A1:3E:AF:ED:00:8A:38:7D:F3:4C:42:2C:FD:8F:D4:A7:98:22:F8:1A Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0AE5 Signing time: Tue 24 Mar 2026 19:13:18 +0000 Manifest this update: Tue 24 Mar 2026 19:13:17 +0000 Manifest next update: Tue 31 Mar 2026 19:13:17 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: mumIH8XnugmdegbVgm8DJdkZqW/taTo8bf9NrgC0X8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Mar 24 19:13:17 2026 GMT Not After : Mar 31 19:13:17 2026 GMT Subject: CN=69c2e24e-6302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:df:4a:6b:ff:0f:e2:38:d1:16:c9:14:70: e4:d4:47:65:86:dd:e7:b1:6f:dc:b0:74:95:e5:78: 2c:e0:3f:9f:e1:fd:12:35:3a:e6:7c:62:24:3e:13: 9f:4f:18:1e:3c:be:01:e3:fa:c0:4e:a6:75:e1:f6: 4f:20:3e:f4:98:0f:b8:f2:03:f5:54:dc:a6:bb:d9: c9:36:fb:09:28:6f:f3:85:2e:70:18:aa:0b:8c:53: a7:12:d5:fb:b7:1e:6f:4c:b9:e8:aa:ff:80:5b:17: 0b:1f:f9:96:c9:06:f5:df:52:4f:d2:6f:4c:d3:e5: b2:ea:17:2e:26:0c:d2:c5:07:5f:c8:b6:62:73:b8: 83:ae:84:bf:44:3e:20:ff:7c:9f:81:ee:6a:32:6c: 35:51:b5:de:79:36:2b:92:ab:6e:f8:af:3d:fc:3d: d9:3b:7c:ef:2b:d9:bb:50:dd:c9:f1:c8:18:02:d1: fb:82:3d:00:c1:d8:a8:75:c2:28:d5:25:8e:2d:92: 28:82:36:b1:55:dc:0e:a1:88:a0:e5:4e:93:85:68: 6d:e0:15:2c:bd:a9:c4:ca:ae:3e:69:98:ad:85:a2: d0:50:27:fb:05:50:2d:eb:0b:fa:d7:d9:f3:0d:80: 98:9e:b2:d0:42:60:3f:ba:b7:04:0a:6e:f3:68:e8: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3E:AF:ED:00:8A:38:7D:F3:4C:42:2C:FD:8F:D4:A7:98:22:F8:1A X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:36:e3:e9:7d:8d:b2:52:d9:1d:b1:f5:2e:af:f8:d8:38:f2: 57:44:ce:9a:52:f9:4f:ba:a6:22:b4:7d:f8:02:ac:dc:89:47: 61:e0:21:22:60:f3:c2:50:b2:31:4f:45:5b:b7:d6:3f:6b:ee: a2:35:05:77:83:d4:c0:e1:28:5d:3b:03:43:14:67:b0:10:7d: 54:b6:44:4d:8a:d8:4f:35:0a:94:a8:54:cc:39:0c:7e:0c:e0: a3:78:58:c0:30:41:e7:31:2e:01:d5:0e:79:ba:c9:64:95:07: a1:aa:9d:7a:dc:e2:84:89:08:a6:83:90:be:08:18:88:22:5c: 1d:05:9e:4d:41:dd:bd:dd:26:b3:c2:49:9d:ae:63:8f:1f:74: 01:2d:a4:9e:25:6e:1f:56:7b:21:80:42:7d:56:5e:93:5b:a8: d0:77:e2:f5:9a:41:30:46:0d:fb:3a:01:64:88:9b:1e:e8:aa: 30:f1:17:ae:99:1f:04:5e:47:6e:c6:32:b6:a4:c9:66:a2:86: 76:ea:5c:d9:d6:d5:c9:68:32:be:a6:ce:85:ab:f4:1d:2e:ce: ef:14:13:e1:98:c8:86:27:d1:4d:43:a0:71:99:6a:00:eb:2d: bd:1e:cd:58:b2:7d:d0:e4:9c:3b:d2:f3:3f:ff:32:1b:7f:4f: fb:67:2a:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjYwMzI0MTkxMzE3WhcNMjYwMzMxMTkxMzE3WjAYMRYwFAYD VQQDEw02OWMyZTI0ZS02MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62bfSmv/D+I40RbJFHDk1Edlht3nsW/csHSV5Xgs4D+f4f0SNTrmfGIkPhOf TxgePL4B4/rATqZ14fZPID70mA+48gP1VNymu9nJNvsJKG/zhS5wGKoLjFOnEtX7 tx5vTLnoqv+AWxcLH/mWyQb131JP0m9M0+Wy6hcuJgzSxQdfyLZic7iDroS/RD4g /3yfge5qMmw1UbXeeTYrkqtu+K89/D3ZO3zvK9m7UN3J8cgYAtH7gj0AwdiodcIo 1SWOLZIogjaxVdwOoYig5U6ThWht4BUsvanEyq4+aZithaLQUCf7BVAt6wv619nz DYCYnrLQQmA/urcECm7zaOhAfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE+r+0A ijh980xCLP2P1KeYIvgaMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAITbj6X2NslLZHbH1Lq/42DjyV0TOmlL5T7qmIrR9+AKs3IlHYeAhImDzwlCy MU9FW7fWP2vuojUFd4PUwOEoXTsDQxRnsBB9VLZETYrYTzUKlKhUzDkMfgzgo3hY wDBB5zEuAdUOebrJZJUHoaqdetzihIkIpoOQvggYiCJcHQWeTUHdvd0ms8JJna5j jx90AS2kniVuH1Z7IYBCfVZek1uo0Hfi9ZpBMEYN+zoBZIibHuiqMPEXrpkfBF5H bsYytqTJZqKGdupc2dbVyWgyvqbOhav0HS7O7xQT4ZjIhifRTUOgcZlqAOstvR7N WLJ90OScO9LzP/8yG39P+2cqcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:58 2026 by rpki-client