$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json) Hash identifier: 7WbOObHSZ64L8HChxLmlweYcCxHcSOF0KoQhYqZv/rc= Subject key identifier: 39:06:E5:CC:69:01:8C:B3:7E:2B:90:E3:B3:8E:BD:B0:CE:C7:91:73 Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft Manifest number: 34 Signing time: Wed 25 Mar 2026 07:49:35 +0000 Manifest this update: Wed 25 Mar 2026 07:49:35 +0000 Manifest next update: Wed 01 Apr 2026 07:49:35 +0000 Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: wntQ315EI0XGP2/+rUcLkBeeuW0ir3BFIMk8Ki/PG6Q=) 2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Validity Not Before: Mar 25 07:49:35 2026 GMT Not After : Apr 1 07:49:35 2026 GMT Subject: CN=69c3938f-3efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:fe:1b:3f:ba:09:fc:eb:8e:34:b7:da:67: 9c:8b:e7:71:15:ae:ee:9d:1e:ea:34:44:ef:ed:e3: 43:9d:c1:82:3b:3d:0e:6d:f3:d4:d1:b4:12:35:0b: ee:08:27:bd:a9:71:98:09:6f:df:83:58:39:38:bf: 51:4e:8c:52:01:27:0d:a1:e1:8e:15:6a:cb:d8:6f: 1b:fb:3e:7d:5b:ce:96:b3:f9:fb:dd:f5:4b:ec:5c: aa:a6:b8:46:d4:0f:18:a7:44:90:7c:1e:f2:07:fa: e1:cc:b5:89:12:d1:a0:cc:3a:82:53:4a:3f:4a:1c: bc:bd:9e:06:15:02:46:b2:bb:75:e3:6c:83:c3:31: 91:d2:06:f6:0c:d4:7d:46:a6:14:61:ab:54:98:10: 44:e4:d4:59:c3:80:55:60:4a:0c:9e:75:e1:17:ed: 80:4e:a0:13:20:62:af:4d:e6:65:eb:1c:60:1e:c3: 81:ad:02:57:dd:78:27:10:59:1b:17:55:1c:5b:95: ed:16:4c:a6:31:44:aa:2d:5f:a7:38:a9:81:4f:bc: 5c:a5:dc:09:21:30:3f:e8:0b:97:44:91:9e:28:d2: f0:22:16:c2:40:3c:b9:0e:47:90:8a:fd:57:a4:94: 0f:e5:04:ea:8b:8c:27:d4:10:81:a4:69:6a:fb:03: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:E5:CC:69:01:8C:B3:7E:2B:90:E3:B3:8E:BD:B0:CE:C7:91:73 X509v3 Authority Key Identifier: keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:74:db:d5:48:7c:80:a1:dd:e9:34:e6:72:b0:02:c5:6e:95: fd:d0:92:bd:1c:fa:0e:e4:9d:a3:c7:c3:bc:95:79:71:84:31: c4:7e:4c:10:a2:74:fb:62:c6:f3:d1:68:19:57:fa:eb:9f:a4: d4:10:03:c4:ea:e6:c4:37:45:b8:9d:7e:01:67:84:7c:34:db: 8b:c5:93:77:4b:23:9b:8f:05:e7:6a:d0:2a:30:e6:0a:4f:94: 44:19:9a:58:bd:05:27:dd:53:57:d4:50:7e:a5:9e:7a:89:74: 14:54:ac:cd:b5:85:94:1c:5c:93:e1:8d:b0:a9:c6:0b:03:18: 32:7a:64:57:e7:80:96:e2:58:dd:89:8b:ae:ed:94:92:91:f6: bf:6d:a8:6a:c3:a1:8f:17:83:ba:6f:a9:4a:38:e5:a9:ab:8d: 8f:d7:c5:84:21:8a:4b:12:1d:6e:12:df:4e:89:ef:ee:de:e2: fb:d7:cd:9e:99:69:64:65:99:d1:5d:7b:67:36:fe:08:b9:f7: 75:cf:4a:0f:82:fa:d6:15:f3:1e:c1:ff:27:aa:22:07:d0:b7: 17:24:f7:36:01:98:ff:68:b5:ee:d8:39:a3:d0:57:48:37:f9: b1:a4:8b:8b:f5:b8:28:51:3e:ca:7f:07:2e:61:33:6e:b3:1b: 93:62:4d:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjUzQjExMC8GA1UEBRMoODY0Qjg4OUE1Mzc4NzEwOTg1MjY1NDFGMEVCOTEyNTZG REFGQTdCMTAeFw0yNjAzMjUwNzQ5MzVaFw0yNjA0MDEwNzQ5MzVaMBgxFjAUBgNV BAMTDTY5YzM5MzhmLTNlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVf4bP7oJ/OuONLfaZ5yL53EVru6dHuo0RO/t40OdwYI7PQ5t89TRtBI1C+4I J72pcZgJb9+DWDk4v1FOjFIBJw2h4Y4VasvYbxv7Pn1bzpaz+fvd9UvsXKqmuEbU DxinRJB8HvIH+uHMtYkS0aDMOoJTSj9KHLy9ngYVAkayu3XjbIPDMZHSBvYM1H1G phRhq1SYEETk1FnDgFVgSgyedeEX7YBOoBMgYq9N5mXrHGAew4GtAlfdeCcQWRsX VRxble0WTKYxRKotX6c4qYFPvFyl3AkhMD/oC5dEkZ4o0vAiFsJAPLkOR5CK/Vek lA/lBOqLjCfUEIGkaWr7Ay2jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOQblzGkB jLN+K5Djs469sM7HkXMwHwYDVR0jBBgwFoAUhkuImlN4cQmFJlQfDrkSVv2vp7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCLzAwREE5RDY4RTAx QTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1FtRkpsUWZEcmtTVnYydnA3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt1SW1sTjRjUW1GSmxRZkRya1NWdjJ2cDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCLzAwREE5RDY4RTAxQTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1Ft RkpsUWZEcmtTVnYydnA3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAdNvVSHyAod3pNOZysALFbpX90JK9HPoO5J2jx8O8lXlxhDHEfkwQonT7Ysbz 0WgZV/rrn6TUEAPE6ubEN0W4nX4BZ4R8NNuLxZN3SyObjwXnatAqMOYKT5REGZpY vQUn3VNX1FB+pZ56iXQUVKzNtYWUHFyT4Y2wqcYLAxgyemRX54CW4ljdiYuu7ZSS kfa/bahqw6GPF4O6b6lKOOWpq42P18WEIYpLEh1uEt9Oie/u3uL7182emWlkZZnR XXtnNv4Iufd1z0oPgvrWFfMewf8nqiIH0LcXJPc2AZj/aLXu2Dmj0FdIN/mxpIuL 9bgoUT7KfwcuYTNusxuTYk3P -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:25 2026 by rpki-client