$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: /Y03usOX62SrSgqeeFGFoEX8Yd97V3BUzM/t7TlL9zM= Subject key identifier: 59:5E:E3:20:9C:1D:B9:B0:81:25:32:53:7F:15:68:44:4B:3A:B0:C5 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C5D Signing time: Tue 24 Mar 2026 18:29:50 +0000 Manifest this update: Tue 24 Mar 2026 18:29:49 +0000 Manifest next update: Tue 31 Mar 2026 18:29:49 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: tSA6r9NGkrfenK9Jlx0YD/f8sFpbkW/Ckfk2x/qIWu0=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Mar 24 18:29:49 2026 GMT Not After : Mar 31 18:29:49 2026 GMT Subject: CN=69c2d81e-e52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:ef:7e:ae:57:11:5d:2a:cd:0d:97:a5:0b: da:08:be:81:11:f9:41:18:21:9b:d9:b1:af:9d:c6: 1c:cc:a3:42:6d:4d:85:e3:9b:4d:08:6b:c6:5d:f4: c3:cd:9f:de:55:e9:f3:3f:b1:6c:a9:f0:72:95:cf: b0:c2:11:6e:c1:99:2e:ce:21:f6:bd:26:bb:f9:08: ac:a8:e7:fe:d4:13:71:ff:c7:32:86:46:2e:e6:34: 2b:03:5c:f3:87:38:4e:e1:68:38:75:65:28:64:c1: 3d:c7:c8:d4:9e:cf:5e:21:96:34:2c:5a:0b:13:89: cd:44:97:92:2f:0e:c8:31:44:37:3b:fa:df:c4:bf: d7:98:40:4b:63:33:17:17:46:76:ef:85:e2:6a:87: 08:ff:a6:a1:0c:31:0e:15:11:cf:7c:80:ff:12:61: 0a:64:3d:9e:71:cf:7b:b8:fc:8f:b4:9d:5f:97:b1: 7e:26:d9:89:f1:9a:cf:93:70:c7:f0:0f:da:03:49: dc:42:11:33:68:3a:bc:5e:f9:2c:c2:c4:3c:dc:8c: 98:8d:e8:68:46:30:94:3c:7e:5f:2d:b0:d5:05:ac: a1:f0:7b:02:1f:66:83:cb:5f:c0:ab:34:7a:6d:58: 81:d5:eb:69:82:7f:42:e5:13:47:10:2f:df:2d:cb: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5E:E3:20:9C:1D:B9:B0:81:25:32:53:7F:15:68:44:4B:3A:B0:C5 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bc:10:dd:6f:0a:7b:69:3a:d0:f5:e0:9c:ac:6b:41:cd:a8: a3:ce:c6:2f:9b:6f:ea:9d:ae:3b:b8:79:cd:12:7d:15:3d:8d: 23:29:0d:c2:78:48:73:04:07:77:41:52:fc:96:b7:1a:f5:8c: 89:55:79:fb:c5:5b:de:fe:28:b8:d1:4d:ac:b2:1d:2e:5e:71: 88:83:1b:f6:16:9e:c1:20:6d:eb:31:6b:0e:6c:f4:b9:74:87: 95:0d:01:0a:af:08:0c:56:0a:d5:03:2f:4c:a0:0c:f7:83:ec: 94:44:f2:a9:ec:1f:58:62:17:32:64:1a:95:24:36:4d:8d:6e: 88:17:ce:64:7a:e2:26:39:79:26:1e:1b:8d:72:d8:7d:8e:b5: fc:bd:16:57:a6:f6:a4:55:a3:99:24:49:82:cf:cc:74:a9:90: 14:13:6c:51:6c:2a:93:55:f8:ad:fb:38:0b:d4:f5:d7:1c:a7: 2c:6d:b7:64:58:3e:4c:50:72:06:3b:30:8c:b7:92:a6:3a:f5: e1:9c:66:7e:6f:5e:f0:c8:e3:c6:bf:4f:b7:0c:0c:37:fb:f7: f3:d8:35:5f:4c:13:d9:52:12:4d:be:ae:6b:4f:21:fe:d6:a6: 3d:be:8b:aa:af:b6:47:8d:03:ed:48:78:e8:6b:06:8e:93:97: be:9c:62:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwMzI0MTgyOTQ5WhcNMjYwMzMxMTgyOTQ5WjAYMRYwFAYD VQQDEw02OWMyZDgxZS1lNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7I7vfq5XEV0qzQ2XpQvaCL6BEflBGCGb2bGvncYczKNCbU2F45tNCGvGXfTD zZ/eVenzP7FsqfBylc+wwhFuwZkuziH2vSa7+QisqOf+1BNx/8cyhkYu5jQrA1zz hzhO4Wg4dWUoZME9x8jUns9eIZY0LFoLE4nNRJeSLw7IMUQ3O/rfxL/XmEBLYzMX F0Z274XiaocI/6ahDDEOFRHPfID/EmEKZD2ecc97uPyPtJ1fl7F+JtmJ8ZrPk3DH 8A/aA0ncQhEzaDq8XvkswsQ83IyYjehoRjCUPH5fLbDVBayh8HsCH2aDy1/AqzR6 bViB1etpgn9C5RNHEC/fLcuDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFle4yCc HbmwgSUyU38VaERLOrDFMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARbwQ3W8Ke2k60PXgnKxrQc2oo87GL5tv6p2uO7h5zRJ9FT2NIykNwnhIcwQH d0FS/Ja3GvWMiVV5+8Vb3v4ouNFNrLIdLl5xiIMb9haewSBt6zFrDmz0uXSHlQ0B Cq8IDFYK1QMvTKAM94PslETyqewfWGIXMmQalSQ2TY1uiBfOZHriJjl5Jh4bjXLY fY61/L0WV6b2pFWjmSRJgs/MdKmQFBNsUWwqk1X4rfs4C9T11xynLG23ZFg+TFBy BjswjLeSpjr14Zxmfm9e8Mjjxr9PtwwMN/v389g1X0wT2VISTb6ua08h/tamPb6L qq+2R40D7Uh46GsGjpOXvpxioQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:07 2026 by rpki-client