$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: Kk3aOOMuhHkMMMS3JVh4t+bBRmuD4t/7u9r0o2thxtc= Subject key identifier: 7D:A1:E2:07:1F:42:10:88:EF:50:12:59:FA:2A:DE:F0:F0:85:E2:F8 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 0704 Signing time: Tue 24 Mar 2026 21:49:41 +0000 Manifest this update: Tue 24 Mar 2026 21:49:40 +0000 Manifest next update: Tue 31 Mar 2026 21:49:40 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: U2K/6xw86uybdm0sMVhEv6NbpoojVCV/crN2C3v69kI=) 2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: yYTtvE7CXHf8fnX9NjEKKec9Ps0u8GPKEPqTfsvne5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Mar 24 21:49:40 2026 GMT Not After : Mar 31 21:49:40 2026 GMT Subject: CN=69c306f4-73c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:34:44:1f:c0:9b:1e:b2:61:12:29:44:26: cf:fd:91:bf:8b:c3:ca:61:16:6a:a9:5e:1e:a1:f9: 70:3c:06:e9:1f:c8:52:de:33:b8:73:3b:64:cd:2b: 3b:f0:fa:6d:bd:6c:b0:d0:09:28:ed:c1:78:34:87: f4:a3:b0:24:6e:06:fb:57:aa:83:33:ca:8b:24:e2: 4e:5b:08:cc:e3:48:c8:d7:48:a9:d7:a8:9e:51:86: 30:43:14:24:6a:f4:e9:d9:fd:18:3a:cd:76:b6:58: 37:bc:d7:55:cd:7b:6a:91:ae:6b:73:06:9e:ef:d6: e4:14:ce:57:cd:8a:0f:ab:38:53:17:35:f8:e2:86: 51:17:42:ab:21:b9:4c:dc:0a:f5:ed:f3:70:03:3a: a3:80:b6:bb:b1:5f:9e:99:dd:a2:0d:f3:a3:dd:7b: 29:70:7c:d0:c9:80:57:a2:1f:1b:94:d2:65:e9:18: f9:b9:c2:85:7c:75:db:7e:0d:a2:47:00:30:e4:73: df:24:17:a7:1c:4a:64:b2:8e:b0:3d:9d:da:b9:24: 89:70:22:cc:0e:03:32:7f:b1:4b:7f:31:f3:22:f9: 62:7d:af:dd:10:b4:fd:4c:d4:91:92:db:0d:53:87: f5:ef:66:a6:8a:16:bf:53:ac:bc:ad:9f:10:09:62: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:E2:07:1F:42:10:88:EF:50:12:59:FA:2A:DE:F0:F0:85:E2:F8 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ff:2a:c1:2f:57:b0:b1:92:fc:b7:b4:b7:1c:f8:b8:76:01: 3b:b2:df:89:e8:1f:4c:f2:fe:b9:55:e8:b3:ae:64:95:72:c8: e8:53:d3:af:cf:ad:74:ce:14:86:e2:e8:de:3d:f3:6c:88:25: 89:3d:a9:22:9d:1f:1c:1f:9b:28:48:ac:6b:6c:76:cb:4c:7d: 32:12:d6:88:96:de:ee:6b:ca:80:6a:76:7e:bd:fd:22:29:4f: b6:75:bf:22:62:95:24:d4:9d:ff:58:28:1c:12:80:65:34:4b: 8e:c6:ae:76:6b:c0:83:89:07:df:ef:ce:74:4e:0d:2a:9f:c3: f6:c9:e3:fd:08:ee:79:98:76:cf:86:7a:c6:b7:d6:b8:a1:78: da:99:fc:a0:d3:bd:73:f8:b2:93:30:a7:51:ad:01:e5:57:2c: 1e:8d:7c:46:d2:01:a2:81:52:b6:99:4d:c2:69:d6:b3:6d:25: 04:97:56:c3:f2:e9:b2:31:b0:5e:5b:f1:33:5f:79:87:5f:bf: f8:06:e8:9f:bb:bd:71:9c:88:56:60:1c:f6:9e:7c:5b:76:60: 48:b2:3e:61:14:d7:97:fb:3b:5b:5f:9a:03:1b:f5:c9:b7:6c: 3c:fb:59:cb:a4:2a:0c:33:da:c6:03:36:31:39:4e:ed:d0:68: c0:c0:8d:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjYwMzI0MjE0OTQwWhcNMjYwMzMxMjE0OTQwWjAYMRYwFAYD VQQDEw02OWMzMDZmNC03M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylw0RB/Amx6yYRIpRCbP/ZG/i8PKYRZqqV4eoflwPAbpH8hS3jO4cztkzSs7 8PptvWyw0Ako7cF4NIf0o7Akbgb7V6qDM8qLJOJOWwjM40jI10ip16ieUYYwQxQk avTp2f0YOs12tlg3vNdVzXtqka5rcwae79bkFM5XzYoPqzhTFzX44oZRF0KrIblM 3Ar17fNwAzqjgLa7sV+emd2iDfOj3XspcHzQyYBXoh8blNJl6Rj5ucKFfHXbfg2i RwAw5HPfJBenHEpkso6wPZ3auSSJcCLMDgMyf7FLfzHzIvlifa/dELT9TNSRktsN U4f172amiha/U6y8rZ8QCWKlTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2h4gcf QhCI71ASWfoq3vDwheL4MB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARP8qwS9XsLGS/Le0txz4uHYBO7LfiegfTPL+uVXos65klXLI6FPTr8+tdM4U huLo3j3zbIgliT2pIp0fHB+bKEisa2x2y0x9MhLWiJbe7mvKgGp2fr39IilPtnW/ ImKVJNSd/1goHBKAZTRLjsaudmvAg4kH3+/OdE4NKp/D9snj/QjueZh2z4Z6xrfW uKF42pn8oNO9c/iykzCnUa0B5VcsHo18RtIBooFStplNwmnWs20lBJdWw/LpsjGw XlvxM195h1+/+Abon7u9cZyIVmAc9p58W3ZgSLI+YRTXl/s7W1+aAxv1ybdsPPtZ y6QqDDPaxgM2MTlO7dBowMCNVw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:18 2026 by rpki-client