$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: cIt7Me5w8HQFELN+dA1NQqBDGNx+l+zzR2LRwEmg6WE= Subject key identifier: 9A:58:E9:7E:90:69:71:14:82:D6:DB:A3:5A:55:96:1B:98:87:BA:F7 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 0247 Signing time: Fri 17 Apr 2026 02:10:46 +0000 Manifest this update: Fri 17 Apr 2026 02:10:45 +0000 Manifest next update: Fri 24 Apr 2026 02:10:45 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: VOPuoWgSRJ4GU6e9ghTcHzwo1onQ/rKsmd3BW2D2fKc=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Apr 17 02:10:45 2026 GMT Not After : Apr 24 02:10:45 2026 GMT Subject: CN=69e196a5-0824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:20:3c:5b:86:dd:35:c7:0d:72:88:da:5b: b1:fa:a4:d2:55:14:42:b0:95:2f:12:98:3a:f8:de: 21:c7:f2:91:4b:14:6c:13:35:59:70:85:91:dc:1c: 5d:7d:9d:09:c3:f7:92:70:53:64:c8:65:71:5d:b2: 00:19:e8:49:0e:69:8e:37:26:07:a6:d0:b5:ac:7b: 9c:dc:f3:a3:90:4e:8b:d1:f3:2e:a0:36:56:7d:34: c5:75:56:c4:ae:3e:c3:95:27:4e:5e:42:f8:be:d0: 4f:77:3d:8b:15:3b:c1:39:5a:9d:a0:99:b3:38:47: c0:2d:da:5f:c2:ff:2a:46:fe:33:51:12:e5:7d:d6: 6a:cc:ef:31:d2:a3:1a:e0:16:0b:79:a3:ca:b0:d8: 11:da:25:03:81:2a:e9:d7:0f:6f:8c:7b:43:50:23: 12:63:30:92:74:12:54:df:22:79:48:57:16:4b:ba: 33:54:37:7b:be:17:47:cc:12:9e:65:28:b4:a9:1b: 5e:cc:67:82:62:ae:2a:da:7f:c3:78:a1:69:f6:f3: e1:64:f7:be:07:25:53:aa:94:05:16:af:ad:84:59: 99:1d:29:c8:1f:2d:8a:36:ba:53:a9:a4:e1:9f:3a: 03:53:8a:44:bf:b2:7d:cf:d8:08:c1:97:98:ce:a8: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:58:E9:7E:90:69:71:14:82:D6:DB:A3:5A:55:96:1B:98:87:BA:F7 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:96:49:a5:5a:05:d0:d6:de:9e:4b:2d:29:d6:16:30:52: 55:96:a8:f7:b1:b5:e6:51:4a:d6:f0:d6:28:cc:a0:3b:aa:0a: 38:73:ba:1e:12:20:3e:11:e3:c6:43:c7:a5:82:0c:88:48:92: 38:89:1b:df:11:54:c3:26:e5:a5:fa:d9:e2:08:ef:81:36:eb: fd:ed:d4:87:2f:c9:66:71:a3:49:22:b4:c0:f9:b0:f1:0a:ca: d8:bf:a3:30:5b:5f:60:2f:90:5d:8f:2d:49:89:fb:b2:c6:be: 55:15:ee:6d:67:09:96:c5:e4:81:fa:0d:b0:65:b8:fd:e1:3d: ed:9c:85:d7:1b:2d:54:8a:88:ca:47:57:22:55:31:28:f3:1e: 29:52:d8:b1:09:87:ae:48:49:d3:be:ae:e8:ef:5c:9b:a6:05: f9:3e:4d:87:91:96:b9:06:af:38:d3:59:79:35:e0:8b:8c:b9: 64:78:0a:60:6f:ce:9d:f7:e2:4e:ed:b2:0b:fa:4f:b3:29:7b: 4b:53:66:da:c4:47:0b:c7:b2:d1:08:b1:77:19:cb:95:ef:d8: 62:ab:3b:aa:b6:dd:37:e2:51:ef:cb:6f:3d:7d:dd:cb:6b:32: 2d:3a:28:d9:35:bd:36:48:27:06:5f:62:1e:2c:c5:c8:19:a8: 09:5e:0e:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjYwNDE3MDIxMDQ1WhcNMjYwNDI0MDIxMDQ1WjAYMRYwFAYD VQQDEw02OWUxOTZhNS0wODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJMgPFuG3TXHDXKI2lux+qTSVRRCsJUvEpg6+N4hx/KRSxRsEzVZcIWR3Bxd fZ0Jw/eScFNkyGVxXbIAGehJDmmONyYHptC1rHuc3POjkE6L0fMuoDZWfTTFdVbE rj7DlSdOXkL4vtBPdz2LFTvBOVqdoJmzOEfALdpfwv8qRv4zURLlfdZqzO8x0qMa 4BYLeaPKsNgR2iUDgSrp1w9vjHtDUCMSYzCSdBJU3yJ5SFcWS7ozVDd7vhdHzBKe ZSi0qRtezGeCYq4q2n/DeKFp9vPhZPe+ByVTqpQFFq+thFmZHSnIHy2KNrpTqaTh nzoDU4pEv7J9z9gIwZeYzqjMrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpY6X6Q aXEUgtbbo1pVlhuYh7r3MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl8OWSaVaBdDW3p5LLSnWFjBSVZao97G15lFK1vDWKMygO6oKOHO6HhIgPhHj xkPHpYIMiEiSOIkb3xFUwyblpfrZ4gjvgTbr/e3Uhy/JZnGjSSK0wPmw8QrK2L+j MFtfYC+QXY8tSYn7ssa+VRXubWcJlsXkgfoNsGW4/eE97ZyF1xstVIqIykdXIlUx KPMeKVLYsQmHrkhJ076u6O9cm6YF+T5Nh5GWuQavONNZeTXgi4y5ZHgKYG/Onffi Tu2yC/pPsyl7S1Nm2sRHC8ey0QixdxnLle/YYqs7qrbdN+JR78tvPX3dy2syLToo 2TW9NkgnBl9iHizFyBmoCV4OXA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:40 2026 by rpki-client