$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: 2+aCfwg742zL8EBEJfoCTVv1b4k5ASlQhVxyaO0MKrs= Subject key identifier: 21:73:FA:D4:09:99:B5:8C:45:34:47:4E:2C:39:A9:56:E5:A2:82:51 Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 352C Signing time: Thu 16 Apr 2026 14:55:00 +0000 Manifest this update: Thu 16 Apr 2026 14:55:00 +0000 Manifest next update: Thu 23 Apr 2026 14:55:00 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: AW0osGHXTHgfjHVWcSvdHfujHGp10CnXekSFtZKjgWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Apr 16 14:55:00 2026 GMT Not After : Apr 23 14:55:00 2026 GMT Subject: CN=69e0f844-6f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:f5:b2:76:10:d9:77:c4:41:0a:a4:e2:88: b9:d5:16:07:ab:cc:48:b3:25:81:bc:64:d6:86:58: 58:12:c5:f6:fc:e1:64:3e:ec:92:d4:03:54:9a:1a: 65:90:e2:7b:e5:35:04:ab:31:08:7e:76:d5:a7:1b: 09:38:b4:8f:67:a4:08:ed:78:12:95:e8:cb:23:81: b2:5a:b6:60:f0:80:2c:76:52:d7:44:b5:8c:82:47: af:69:10:3d:94:93:3c:b1:20:a0:bb:87:60:af:22: 4c:fe:3c:3c:0c:c0:b8:06:5e:01:6f:14:bc:3e:ae: c6:cd:73:55:53:7a:77:88:4d:60:2e:41:63:d9:48: e9:6d:0c:7f:08:70:49:3a:11:71:e0:45:f0:ee:f8: bd:07:b7:ca:ee:64:e1:d6:87:8c:38:03:63:5e:29: 63:ff:c3:79:18:e5:1e:7e:f5:df:ec:6a:05:d1:01: 8e:24:10:f6:14:b2:97:c1:0b:d6:8d:26:ee:f7:a9: fb:24:5b:57:d9:88:d6:d9:ff:6d:03:7d:52:d8:69: 92:7f:c5:44:ad:c6:b1:9d:ba:cd:27:08:f6:76:7f: 06:39:53:19:1f:4e:e5:af:e6:91:58:2e:91:0c:34: ad:fe:f2:a5:ab:45:cb:05:d7:86:51:c8:b2:99:bf: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:73:FA:D4:09:99:B5:8C:45:34:47:4E:2C:39:A9:56:E5:A2:82:51 X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2b:c6:ca:01:bc:b6:6c:b8:ed:54:cc:bc:4c:ef:2d:7f:a1: fb:b0:6d:bd:24:ad:c1:ad:27:8a:84:53:c9:14:25:e4:6d:68: 00:02:c1:71:57:d2:3c:c5:f6:7e:0e:7e:49:5c:64:e7:99:79: c0:63:6d:3c:82:85:48:d1:05:2c:c2:8e:d8:b8:21:ef:99:48: 87:bc:73:d1:79:c4:cc:08:01:9b:5e:03:3d:a4:8a:7b:ad:c5: 60:a8:41:02:43:11:31:95:e0:ee:31:21:19:a9:68:9e:94:58: 2d:7d:44:19:1a:24:b9:b8:b9:6d:28:c3:25:58:74:a9:28:79: f2:37:e6:f4:3d:7e:61:64:c7:36:24:62:73:1f:5e:fb:1f:f2: 33:bc:7e:64:06:d7:ac:e0:20:ac:4d:aa:b4:83:eb:f4:b2:0e: 17:36:f9:27:3f:6f:44:54:73:b4:26:b2:1d:cf:49:c8:4f:87: c0:15:79:87:ee:74:91:0d:65:c2:64:ea:08:b9:69:a9:ce:64: f9:55:44:e4:d8:eb:8d:29:2d:7c:ef:53:41:d8:ba:ff:5c:49: c9:ee:36:bb:26:5e:62:da:02:ca:12:41:b2:b8:1d:59:76:8a: 51:f0:65:90:76:e4:b6:39:29:f5:39:9c:cb:e3:70:2f:83:b2: c4:f9:d8:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjYwNDE2MTQ1NTAwWhcNMjYwNDIzMTQ1NTAwWjAYMRYwFAYD VQQDEw02OWUwZjg0NC02ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdX1snYQ2XfEQQqk4oi51RYHq8xIsyWBvGTWhlhYEsX2/OFkPuyS1ANUmhpl kOJ75TUEqzEIfnbVpxsJOLSPZ6QI7XgSlejLI4GyWrZg8IAsdlLXRLWMgkevaRA9 lJM8sSCgu4dgryJM/jw8DMC4Bl4BbxS8Pq7GzXNVU3p3iE1gLkFj2UjpbQx/CHBJ OhFx4EXw7vi9B7fK7mTh1oeMOANjXilj/8N5GOUefvXf7GoF0QGOJBD2FLKXwQvW jSbu96n7JFtX2YjW2f9tA31S2GmSf8VErcaxnbrNJwj2dn8GOVMZH07lr+aRWC6R DDSt/vKlq0XLBdeGUciymb/g5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFz+tQJ mbWMRTRHTiw5qVblooJRMB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyvGygG8tmy47VTMvEzvLX+h+7BtvSStwa0nioRTyRQl5G1oAALBcVfSPMX2 fg5+SVxk55l5wGNtPIKFSNEFLMKO2Lgh75lIh7xz0XnEzAgBm14DPaSKe63FYKhB AkMRMZXg7jEhGalonpRYLX1EGRokubi5bSjDJVh0qSh58jfm9D1+YWTHNiRicx9e +x/yM7x+ZAbXrOAgrE2qtIPr9LIOFzb5Jz9vRFRztCayHc9JyE+HwBV5h+50kQ1l wmTqCLlpqc5k+VVE5NjrjSktfO9TQdi6/1xJye42uyZeYtoCyhJBsrgdWXaKUfBl kHbktjkp9Tmcy+NwL4OyxPnYdA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:15:23 2026 by rpki-client