$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: 94Kvay5QpzZCGGxL8lWXnj1LLVQEW4sbMGOeUMDc6HY= Subject key identifier: 9C:8F:D7:5B:BF:D1:A1:FA:F7:40:55:B6:6E:2F:A0:9F:2E:08:07:7A Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 352F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 352F Signing time: Thu 16 Apr 2026 15:09:53 +0000 Manifest this update: Thu 16 Apr 2026 15:09:53 +0000 Manifest next update: Thu 23 Apr 2026 15:09:53 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: GGHhS5o8G4D27+VnwoiL70/RLOi4X0FyVVbzpO/OOlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13615 (0x352f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Apr 16 15:09:53 2026 GMT Not After : Apr 23 15:09:53 2026 GMT Subject: CN=69e0fbc1-b25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:bd:9d:8c:57:fd:1e:fc:09:af:7c:7d:6d: a2:4d:4d:3c:42:88:7a:fb:7d:06:80:5e:9a:88:55: 54:f3:58:d3:a6:8e:c7:3f:1b:40:47:b6:1e:70:4e: 69:2a:df:49:49:bd:64:ef:da:66:36:4e:33:f4:2e: 5c:c2:74:25:bc:d6:0f:1b:8e:1f:d9:85:e6:49:64: ee:89:8d:41:e1:19:0d:fd:2c:0a:c7:a1:fa:13:ac: f2:e6:cc:f9:3f:bf:1c:11:11:e3:6d:3c:67:0e:da: f2:f5:b8:33:44:98:a2:de:88:c0:26:98:28:56:2a: 12:17:66:ac:ae:cd:a1:2c:4b:68:e4:2c:da:6b:36: 0e:fa:1b:06:f5:85:67:5e:08:45:2c:92:2d:af:d8: dd:ac:da:6d:7a:17:85:08:a2:ad:0b:73:3d:6b:0a: 97:f4:d7:0b:17:48:68:38:80:80:6e:1b:a8:99:37: 1b:77:cb:6d:11:51:1a:8a:38:27:c0:7d:e1:f5:2e: 37:93:55:3c:ea:4c:a4:e7:55:f9:6d:93:7c:77:78: 8b:eb:f9:66:3f:db:e0:c4:94:e8:1d:ca:93:76:c6: c9:6a:e7:07:ce:cc:8b:1b:8f:c3:67:0f:25:62:2e: 2a:d2:bd:e5:a9:84:b3:fb:44:47:81:40:fd:87:44: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8F:D7:5B:BF:D1:A1:FA:F7:40:55:B6:6E:2F:A0:9F:2E:08:07:7A X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:56:99:67:f7:72:06:d8:90:33:52:7f:58:15:1c:5d:db:bc: f5:05:d7:6d:48:b1:67:69:f4:c4:90:de:84:61:34:55:d2:9e: b3:da:e1:fd:fa:7d:d6:73:08:39:09:fc:83:c6:18:56:66:e8: cb:8c:1a:74:12:83:ee:a4:21:ba:33:ad:6c:fb:e1:c2:8a:68: 9c:38:6e:79:38:1d:4b:53:3a:1f:66:64:4c:81:82:c9:4c:78: 6a:e9:a0:96:9c:8c:01:c4:d0:1c:b6:01:24:ea:a9:e1:51:b9: af:4d:67:37:bd:8e:6c:a5:b5:41:55:39:72:e8:f0:42:98:4a: 08:c9:c2:bf:64:d1:56:46:9b:43:5a:bb:a3:22:fb:71:5e:5b: 1d:3c:7e:a8:04:54:d2:67:f1:38:e0:4f:25:19:1f:b0:bd:7b: 59:5a:db:c4:9d:42:d7:24:f3:e5:66:59:8e:07:bf:c1:9e:ec: bc:36:b1:89:22:3f:fa:67:83:44:d2:2c:85:a3:ab:92:07:78: 25:c8:ed:58:ba:4f:39:b3:ac:d8:7b:74:b3:99:e7:18:f8:8b: ea:07:e9:79:a5:d7:03:2f:ee:17:6a:80:bd:b5:1f:06:b8:f9: d5:28:f0:0f:09:52:bf:e1:f2:6c:16:48:eb:bf:90:4d:53:47: 60:f1:09:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjYwNDE2MTUwOTUzWhcNMjYwNDIzMTUwOTUzWjAYMRYwFAYD VQQDEw02OWUwZmJjMS1iMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiXu9nYxX/R78Ca98fW2iTU08Qoh6+30GgF6aiFVU81jTpo7HPxtAR7YecE5p Kt9JSb1k79pmNk4z9C5cwnQlvNYPG44f2YXmSWTuiY1B4RkN/SwKx6H6E6zy5sz5 P78cERHjbTxnDtry9bgzRJii3ojAJpgoVioSF2asrs2hLEto5CzaazYO+hsG9YVn XghFLJItr9jdrNpteheFCKKtC3M9awqX9NcLF0hoOICAbhuomTcbd8ttEVEaijgn wH3h9S43k1U86kyk51X5bZN8d3iL6/lmP9vgxJToHcqTdsbJaucHzsyLG4/DZw8l Yi4q0r3lqYSz+0RHgUD9h0RyEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyP11u/ 0aH690BVtm4voJ8uCAd6MB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt1aZZ/dyBtiQM1J/WBUcXdu89QXXbUixZ2n0xJDehGE0VdKes9rh/fp91nMI OQn8g8YYVmboy4wadBKD7qQhujOtbPvhwoponDhueTgdS1M6H2ZkTIGCyUx4aumg lpyMAcTQHLYBJOqp4VG5r01nN72ObKW1QVU5cujwQphKCMnCv2TRVkabQ1q7oyL7 cV5bHTx+qARU0mfxOOBPJRkfsL17WVrbxJ1C1yTz5WZZjge/wZ7svDaxiSI/+meD RNIshaOrkgd4JcjtWLpPObOs2Ht0s5nnGPiL6gfpeaXXAy/uF2qAvbUfBrj51Sjw DwlSv+HybBZI67+QTVNHYPEJSA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:12:47 2026 by rpki-client