$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: 9Tbvu5I0dRQgR5SOc+PDbECCnBkZ3JT6w/QK+6LYo2g= Subject key identifier: 13:9A:EE:66:64:1E:2A:D8:24:CF:58:1F:63:D0:6C:A5:79:45:D1:DD Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 0847 Signing time: Thu 16 Apr 2026 20:45:42 +0000 Manifest this update: Thu 16 Apr 2026 20:45:42 +0000 Manifest next update: Thu 23 Apr 2026 20:45:42 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: uDB09Caw+a+sEYLFlS79rtJxnNsRZyQ9uypzygFhUZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Apr 16 20:45:42 2026 GMT Not After : Apr 23 20:45:42 2026 GMT Subject: CN=69e14a76-c454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:4f:cb:46:43:9c:3d:30:0e:1b:d9:a4:3e: dd:dc:50:ee:1e:a6:46:20:71:a5:c8:bd:bd:a4:c3: ac:b8:4d:f1:22:4a:bc:c9:fa:dc:6d:51:e3:0e:3f: 4d:14:d9:31:31:15:e8:5b:26:d4:b5:21:a9:2d:47: 93:ec:89:95:93:79:27:1b:36:d5:a4:7f:6a:08:2f: fd:ec:23:49:e3:c7:53:cf:7a:4c:61:5f:d4:b6:36: d6:3e:48:f2:70:36:30:9b:aa:0d:dd:c2:12:78:86: b3:3c:69:99:e7:a9:28:da:20:ca:b3:ec:81:98:cf: f1:cf:60:72:a3:d5:26:f2:e8:37:f0:5b:e6:28:44: 1a:45:2d:52:87:ba:a4:31:5c:0f:07:4f:ad:32:c5: 89:bb:c5:19:0d:5b:9d:6c:4b:f1:fc:ec:45:19:42: 6d:30:0d:2c:37:b9:ff:7e:e2:7c:d2:f7:f5:1c:34: a2:a6:81:5e:3d:f7:ef:54:e9:f3:d6:bd:b6:eb:25: 77:01:45:0e:05:d4:57:9f:4b:b6:0d:d1:90:e5:88: b0:06:b1:e0:46:e6:21:ec:2a:01:68:56:cd:56:57: 43:e2:a7:c8:9e:de:a9:c5:82:13:be:4b:6a:58:02: 00:73:43:32:ee:b7:b0:34:88:e5:66:52:3e:00:97: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:EE:66:64:1E:2A:D8:24:CF:58:1F:63:D0:6C:A5:79:45:D1:DD X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d2:bb:68:e5:81:37:d9:69:c2:85:3b:aa:14:df:92:d2:ec: c4:1e:f8:1f:c6:ba:08:16:eb:0c:03:d1:95:6a:c8:c9:53:7d: c0:4b:eb:09:62:5d:d4:cd:a4:ac:55:66:0b:c1:6b:ed:16:4f: d6:9d:90:11:10:cb:ee:35:bf:da:2a:10:3f:99:fa:87:49:13: 14:dd:ef:8d:e6:c2:59:e5:ec:89:86:86:48:39:b7:f0:1a:81: d4:7f:3f:91:15:64:23:1c:15:17:39:dc:fd:29:0a:50:95:18: ad:c3:4a:0f:22:9a:19:ca:cf:07:ee:34:1b:b9:b9:8a:23:e9: 74:e8:15:7e:fb:fd:db:27:20:89:76:1f:ca:c8:29:d4:ae:42: 66:67:08:5b:b2:4f:c8:0d:56:e7:39:68:ca:75:66:fc:d2:de: d5:c2:c7:fd:ad:4e:14:ea:e5:9e:a1:8d:fa:fd:83:82:a1:46: 83:73:d0:9b:cb:45:61:07:4c:8a:88:40:c4:eb:f1:93:ec:77: 67:c7:83:f9:f8:d9:66:d8:95:64:c9:7d:ac:72:8b:98:1c:a3: 34:b2:8c:f7:46:e9:03:1d:38:43:41:f9:ce:89:dd:1b:7e:2d: 67:16:39:a5:c7:ec:ff:c7:d4:15:b7:8e:fe:ad:2a:56:57:34: 86:af:6b:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjYwNDE2MjA0NTQyWhcNMjYwNDIzMjA0NTQyWjAYMRYwFAYD VQQDEw02OWUxNGE3Ni1jNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZxPy0ZDnD0wDhvZpD7d3FDuHqZGIHGlyL29pMOsuE3xIkq8yfrcbVHjDj9N FNkxMRXoWybUtSGpLUeT7ImVk3knGzbVpH9qCC/97CNJ48dTz3pMYV/UtjbWPkjy cDYwm6oN3cISeIazPGmZ56ko2iDKs+yBmM/xz2Byo9Um8ug38FvmKEQaRS1Sh7qk MVwPB0+tMsWJu8UZDVudbEvx/OxFGUJtMA0sN7n/fuJ80vf1HDSipoFePffvVOnz 1r226yV3AUUOBdRXn0u2DdGQ5YiwBrHgRuYh7CoBaFbNVldD4qfInt6pxYITvktq WAIAc0My7rewNIjlZlI+AJd/QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOa7mZk HirYJM9YH2PQbKV5RdHdMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtK7aOWBN9lpwoU7qhTfktLsxB74H8a6CBbrDAPRlWrIyVN9wEvrCWJd1M2k rFVmC8Fr7RZP1p2QERDL7jW/2ioQP5n6h0kTFN3vjebCWeXsiYaGSDm38BqB1H8/ kRVkIxwVFznc/SkKUJUYrcNKDyKaGcrPB+40G7m5iiPpdOgVfvv92ycgiXYfysgp 1K5CZmcIW7JPyA1W5zloynVm/NLe1cLH/a1OFOrlnqGN+v2DgqFGg3PQm8tFYQdM iohAxOvxk+x3Z8eD+fjZZtiVZMl9rHKLmByjNLKM90bpAx04Q0H5zondG34tZxY5 pcfs/8fUFbeO/q0qVlc0hq9rfQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:18 2026 by rpki-client