$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: my3XmCCoEWVuWSmeeZb6Rq8Gqdtu5pBk/QYBCbt7wm8= Subject key identifier: B4:CF:89:D6:F2:03:7D:DA:28:60:55:CF:F8:BB:20:21:15:92:54:0D Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: 41 Signing time: Wed 25 Mar 2026 07:42:14 +0000 Manifest this update: Wed 25 Mar 2026 07:42:14 +0000 Manifest next update: Wed 01 Apr 2026 07:42:14 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: g0ZYZi2vVTHNbATL8LMYOgn+lMkaV78OHYgTbsX8bLQ=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Mar 25 07:42:14 2026 GMT Not After : Apr 1 07:42:14 2026 GMT Subject: CN=69c391d6-dcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:c9:8f:da:83:ba:cc:fa:d9:67:e0:61:6f: 89:47:9d:73:61:59:42:c2:bd:36:45:94:a9:52:cd: bc:52:f2:69:0a:20:87:1e:6a:73:23:b2:54:23:ac: 24:b5:99:ad:a1:0d:84:39:3b:b1:07:b2:c3:70:1b: 70:6f:1c:f5:32:95:33:fc:22:a1:37:eb:22:5e:9a: ad:9e:de:20:04:b5:f9:73:1c:fb:30:71:3a:e0:a9: 79:90:91:c0:30:68:59:e4:4a:08:de:1d:5a:45:d0: 07:5c:e1:bd:d9:d1:e8:ea:9d:75:08:31:15:1f:5b: 04:dc:d7:9c:bf:ce:36:d1:0a:07:62:e1:ab:ea:d3: 4d:a6:a1:1a:55:ad:8b:dd:0c:d0:a9:63:04:cc:2f: ed:0a:bb:d6:2f:f4:e0:fc:32:9f:e6:a1:c9:81:f5: 24:a0:e6:1a:bf:0a:7e:0c:89:3b:ca:d7:a9:1e:76: 4a:18:d0:76:d9:e8:21:8b:8a:da:f3:9c:00:0e:44: 1d:07:38:e3:79:d1:20:e9:7e:c9:cf:d6:0e:9d:a6: 60:13:b9:6f:56:84:76:f2:92:9a:58:32:6b:9c:b6: 99:19:20:0c:f3:43:cd:41:22:c9:7a:e1:15:9c:85: 6a:67:26:fd:df:99:47:9d:59:04:99:79:02:44:5b: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CF:89:D6:F2:03:7D:DA:28:60:55:CF:F8:BB:20:21:15:92:54:0D X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4e:0a:87:29:cb:61:7f:21:cf:81:9c:22:9e:88:3b:ef:7f: 4f:c8:1f:0e:9a:87:d1:bd:be:31:67:a3:67:46:6e:c3:34:72: 2e:a9:4e:db:af:94:eb:7b:7a:57:b5:8e:10:58:5c:90:ed:5e: b4:d4:58:92:3a:cb:ca:2a:02:03:49:7d:bf:09:3c:64:35:ec: 80:c0:fc:c3:9f:ac:ac:f6:54:34:e4:4e:ac:04:58:84:33:1b: fa:18:47:1f:b2:01:48:d4:63:ac:87:39:53:a5:90:70:50:2e: fe:bc:e6:75:e1:90:8e:28:64:96:17:e9:f8:a8:80:89:cd:d5: 50:a8:35:45:bc:6b:4b:6e:40:10:70:cd:4f:e4:44:e8:0c:d9: 79:6d:f5:73:35:b3:b7:da:6c:89:fa:5f:15:f5:c1:e0:21:19: 2e:16:e5:d1:8b:42:ed:bc:c4:b8:b9:aa:a1:d7:49:12:0d:05: 5c:27:c7:78:fe:24:bc:06:2a:e5:fa:cd:6b:ce:ad:f7:ef:74: 37:2d:8b:00:ca:f2:eb:7d:ff:65:30:29:0c:a5:e3:38:b7:ad: c7:17:a7:31:cd:98:2a:59:4e:36:81:07:b7:de:4d:e7:1d:d5: ce:cc:07:57:12:8e:c8:13:59:b8:8d:46:04:00:1d:84:f2:f9: 5e:dc:6b:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG NEYwQkJCMzAeFw0yNjAzMjUwNzQyMTRaFw0yNjA0MDEwNzQyMTRaMBgxFjAUBgNV BAMTDTY5YzM5MWQ2LWRjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJPcmP2oO6zPrZZ+Bhb4lHnXNhWULCvTZFlKlSzbxS8mkKIIceanMjslQjrCS1 ma2hDYQ5O7EHssNwG3BvHPUylTP8IqE36yJemq2e3iAEtflzHPswcTrgqXmQkcAw aFnkSgjeHVpF0Adc4b3Z0ejqnXUIMRUfWwTc15y/zjbRCgdi4avq002moRpVrYvd DNCpYwTML+0Ku9Yv9OD8Mp/mocmB9SSg5hq/Cn4MiTvK16kedkoY0HbZ6CGLitrz nAAORB0HOON50SDpfsnP1g6dpmATuW9WhHbykppYMmuctpkZIAzzQ81BIsl64RWc hWpnJv3fmUedWQSZeQJEW3cbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtM+J1vID fdooYFXP+LsgIRWSVA0wHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53 WE9NZXFESXI4ZF9Ud3U3TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgTgqHKcthfyHPgZwinog7739PyB8OmofRvb4xZ6NnRm7DNHIuqU7br5Tre3pX tY4QWFyQ7V601FiSOsvKKgIDSX2/CTxkNeyAwPzDn6ys9lQ05E6sBFiEMxv6GEcf sgFI1GOshzlTpZBwUC7+vOZ14ZCOKGSWF+n4qICJzdVQqDVFvGtLbkAQcM1P5ETo DNl5bfVzNbO32myJ+l8V9cHgIRkuFuXRi0LtvMS4uaqh10kSDQVcJ8d4/iS8Birl +s1rzq3373Q3LYsAyvLrff9lMCkMpeM4t63HF6cxzZgqWU42gQe33k3nHdXOzAdX Eo7IE1m4jUYEAB2E8vle3GtG -----END CERTIFICATE-----Generated at Thu Mar 26 11:12:04 2026 by rpki-client