$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: ScgQdIcEsOdy7fvx6HYh8WRNPwm6Lv6fazK33hRXo7k= Subject key identifier: B0:87:96:63:7A:54:E9:46:36:86:E7:AB:A9:67:14:D6:B2:8F:40:F3 Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 011D Signing time: Fri 17 Apr 2026 05:30:00 +0000 Manifest this update: Fri 17 Apr 2026 05:29:59 +0000 Manifest next update: Fri 24 Apr 2026 05:29:59 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: EZPiJYxmWQeJJy1zYnBPtfuR0FIdZM/xh/kOF7b37qM=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Apr 17 05:29:59 2026 GMT Not After : Apr 24 05:29:59 2026 GMT Subject: CN=69e1c558-b3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:4a:83:03:bc:7f:6f:08:98:76:3f:9f:e7: 7d:5b:58:ac:0e:16:c8:2d:fc:f4:49:08:cb:bc:a0: 7f:98:57:7a:51:d7:f5:a4:fb:b6:6f:dd:e3:ec:4b: 49:c9:ea:e1:27:35:b7:79:bc:65:d7:d7:21:70:b5: 27:da:36:15:ff:83:fc:e3:d4:4c:44:25:40:b8:c1: 71:03:1e:07:9c:44:85:d0:df:83:6a:f0:9b:5c:e4: 6c:01:07:47:ce:24:b4:58:e1:6f:17:f6:fd:e8:b0: 13:3e:33:df:29:d6:34:0b:32:68:32:0a:79:6e:16: 54:e8:e6:7f:dd:e4:2b:f8:83:52:d4:5d:4f:b3:6e: 0a:9a:b8:ab:ed:f1:74:6d:c6:51:b8:24:9f:31:7e: d1:60:e2:a4:4a:48:ee:ad:fe:15:d8:6a:b5:c7:72: fa:31:ce:62:8c:81:60:61:46:c8:dd:37:f0:14:ff: 59:e5:b2:74:bd:31:90:f8:ea:a3:3c:5d:67:3f:67: 2c:64:37:12:3a:6e:3d:3b:a2:d7:f5:b6:6d:a5:e9: 2d:a3:4d:56:32:2c:cb:0b:26:6d:1c:e8:dc:7a:40: 47:00:8d:a6:0c:33:73:de:c1:dc:b4:1e:10:db:46: b4:f3:a2:dd:b4:32:0f:41:28:b9:4d:ac:06:42:8e: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:87:96:63:7A:54:E9:46:36:86:E7:AB:A9:67:14:D6:B2:8F:40:F3 X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:35:7a:67:96:a8:e4:18:99:34:a8:a5:fa:e6:04:70:50:27: ee:b1:8a:c8:8f:93:30:56:a8:21:7b:ac:15:78:d6:51:e3:1f: ee:7f:9a:51:74:60:c7:64:2f:22:8b:d5:b8:5d:f8:91:d5:e1: 2f:c0:0c:f0:6c:b5:d1:34:54:df:53:27:88:00:d2:7b:d4:11: 0a:45:c8:43:f6:ea:c7:a1:de:ac:20:8c:ac:73:18:d8:12:14: f1:ac:3d:f5:a4:be:6c:89:d4:62:0f:82:5f:43:ee:21:1a:f0: 92:f7:9d:20:eb:a0:68:c5:4d:98:62:b0:27:bf:8b:3d:bb:e9: 00:f0:ce:d6:f8:96:b3:cb:27:ee:1d:d2:a8:65:2d:92:04:0e: a4:2a:48:1a:b5:eb:68:d0:e9:d7:13:d2:e0:29:c8:bf:99:d6: 7a:ef:c2:4a:aa:3c:00:3a:15:a7:36:c0:b4:1e:47:eb:96:e9: 3e:84:2f:1a:61:5f:5c:63:9f:0d:79:77:83:3f:08:e8:b8:56: 14:1c:1d:8a:56:e6:8e:e6:6d:8c:e1:d0:7b:47:e7:d8:4e:f8: f7:2c:ca:f4:3d:81:d0:24:c3:6d:bf:32:28:72:ce:00:77:13: bb:bb:41:8c:15:59:6b:99:80:bd:1d:25:41:c4:be:40:44:41: 55:12:a1:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjYwNDE3MDUyOTU5WhcNMjYwNDI0MDUyOTU5WjAYMRYwFAYD VQQDEw02OWUxYzU1OC1iM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6pKgwO8f28ImHY/n+d9W1isDhbILfz0SQjLvKB/mFd6Udf1pPu2b93j7EtJ yerhJzW3ebxl19chcLUn2jYV/4P849RMRCVAuMFxAx4HnESF0N+DavCbXORsAQdH ziS0WOFvF/b96LATPjPfKdY0CzJoMgp5bhZU6OZ/3eQr+INS1F1Ps24Kmrir7fF0 bcZRuCSfMX7RYOKkSkjurf4V2Gq1x3L6Mc5ijIFgYUbI3TfwFP9Z5bJ0vTGQ+Oqj PF1nP2csZDcSOm49O6LX9bZtpekto01WMizLCyZtHOjcekBHAI2mDDNz3sHctB4Q 20a086LdtDIPQSi5TawGQo6GfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCHlmN6 VOlGNobnq6lnFNayj0DzMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArTV6Z5ao5BiZNKil+uYEcFAn7rGKyI+TMFaoIXusFXjWUeMf7n+aUXRgx2Qv IovVuF34kdXhL8AM8Gy10TRU31MniADSe9QRCkXIQ/bqx6HerCCMrHMY2BIU8aw9 9aS+bInUYg+CX0PuIRrwkvedIOugaMVNmGKwJ7+LPbvpAPDO1viWs8sn7h3SqGUt kgQOpCpIGrXraNDp1xPS4CnIv5nWeu/CSqo8ADoVpzbAtB5H65bpPoQvGmFfXGOf DXl3gz8I6LhWFBwdilbmjuZtjOHQe0fn2E749yzK9D2B0CTDbb8yKHLOAHcTu7tB jBVZa5mAvR0lQcS+QERBVRKh/A== -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:45 2026 by rpki-client