$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json) Hash identifier: 2xROtHBNY/kyTCnaDGUvyA4vaKzVpcGPUw8C6xLN/Kc= Subject key identifier: 6A:A3:DD:3D:46:A5:BD:0A:E2:25:46:F8:11:5F:75:1C:47:EE:18:DF Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Certificate serial: 17E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft Manifest number: 17C1 Signing time: Thu 16 Apr 2026 16:30:47 +0000 Manifest this update: Thu 16 Apr 2026 16:30:47 +0000 Manifest next update: Thu 23 Apr 2026 16:30:47 +0000 Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: m2WYwDX83PbpE7BV/Pwmr2jQ3hSSyQ3gi5rID36H8jo=) 2: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: trynK1wLeS7SLenEVjxu6KuwoiTckqP52hJXG4iHXr0=) 3: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: cKQ+GalQu9XNt/5RvNMkJ98r6wqBmv6X34kALjzsemM=) 4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6112 (0x17e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Validity Not Before: Apr 16 16:30:47 2026 GMT Not After : Apr 23 16:30:47 2026 GMT Subject: CN=69e10eb7-ab22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:6b:e0:10:e3:dd:58:38:40:95:cd:16:53: 54:9a:fd:79:c6:1a:09:99:24:a8:fd:b4:53:6f:62: 2f:a4:cb:c1:03:4e:87:08:81:76:42:bf:ef:ed:6e: a2:71:05:72:96:cf:2e:e3:28:99:b3:05:bb:ef:15: 4d:d8:21:d5:a1:86:37:66:d9:35:44:49:2b:0c:a8: 9c:d6:1b:0c:0f:52:d8:0c:b2:45:42:12:b8:18:2f: dc:8e:a5:79:b6:82:8c:99:74:9e:18:13:2b:0b:73: 48:f4:4e:e4:dd:07:73:73:4f:89:10:22:56:61:5f: c8:ad:aa:ef:f1:b5:ee:91:2a:51:e7:3c:a6:ba:b4: b8:7b:77:a1:ce:f4:4c:d3:09:ba:e9:82:9a:e8:c3: 1f:39:20:fd:17:c3:c5:dc:9d:23:7c:59:53:91:85: 11:99:b3:6c:70:3a:cc:3a:7d:cc:0b:74:ac:02:cd: 80:74:74:fd:8c:ec:2b:83:53:07:be:e3:f8:82:61: 6e:b1:f8:86:15:ed:40:33:91:56:9e:9e:12:c6:6a: 40:e0:42:a5:58:8f:39:b1:84:df:e5:42:91:54:2f: 1a:48:a8:6b:b1:0b:a1:d3:70:f6:a1:c0:ef:04:73: 23:d5:d3:8d:00:ef:a5:f4:3d:97:a4:c7:41:28:ff: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A3:DD:3D:46:A5:BD:0A:E2:25:46:F8:11:5F:75:1C:47:EE:18:DF X509v3 Authority Key Identifier: keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:49:37:1a:f6:18:75:38:5f:5c:03:83:a4:39:79:9a:b3:c0: 0a:40:ed:16:60:b0:ba:14:62:e5:1a:c1:13:5a:4a:65:1b:d0: c9:52:c8:f2:bd:58:e6:aa:e9:d7:3d:ef:be:a3:4e:d7:f1:e0: 51:71:9a:24:3e:17:60:7d:61:d2:74:ac:f4:aa:45:7e:40:4f: 2d:3c:2b:38:35:37:51:fe:11:c3:8c:be:ca:75:b8:b8:07:a6: c5:c3:d5:b6:8c:88:5e:ea:93:ac:67:b1:62:33:3f:52:62:e6: af:6c:b3:93:21:83:2f:40:72:56:70:60:09:fb:18:e3:23:c4: ac:df:9a:ec:62:53:78:e1:39:b8:2c:4b:73:d9:5d:3d:b3:f1: 02:9b:a2:bf:e1:53:5f:cd:d8:b5:16:1d:82:cf:52:e0:73:7d: ee:ee:54:88:1f:08:f5:56:93:16:37:5e:1d:53:51:60:e3:09: f4:6b:31:8e:96:30:20:ab:c3:fd:85:7d:7a:e2:cf:78:bf:80: 35:22:58:e2:3a:3f:e7:2e:cb:74:5b:a1:83:be:46:86:8b:fb: b4:1d:05:c5:2a:d8:98:1a:fc:7b:86:e4:9f:6d:b0:16:dc:b0: b3:ae:43:89:6b:9a:c1:c2:c7:0f:b4:4b:58:04:0e:5b:d6:e4: 76:d5:04:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3OTUxMTAvBgNVBAUTKDg3MEFFNTlBNEIzOERBRkM2QTMxQUJFMzI5Q0NGODc4 RkRGNzJBOEMwHhcNMjYwNDE2MTYzMDQ3WhcNMjYwNDIzMTYzMDQ3WjAYMRYwFAYD VQQDEw02OWUxMGViNy1hYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJtr4BDj3Vg4QJXNFlNUmv15xhoJmSSo/bRTb2IvpMvBA06HCIF2Qr/v7W6i cQVyls8u4yiZswW77xVN2CHVoYY3Ztk1REkrDKic1hsMD1LYDLJFQhK4GC/cjqV5 toKMmXSeGBMrC3NI9E7k3Qdzc0+JECJWYV/Irarv8bXukSpR5zymurS4e3ehzvRM 0wm66YKa6MMfOSD9F8PF3J0jfFlTkYURmbNscDrMOn3MC3SsAs2AdHT9jOwrg1MH vuP4gmFusfiGFe1AM5FWnp4SxmpA4EKlWI85sYTf5UKRVC8aSKhrsQuh03D2ocDv BHMj1dONAO+l9D2XpMdBKP81HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqj3T1G pb0K4iVG+BFfdRxH7hjfMB8GA1UdIwQYMBaAFIcK5ZpLONr8ajGr4ynM+Hj99yqM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDc5NS85OTI5NjlGQUU2 QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2eHFNYXZqS2N6NGVQMzNL b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3cmxta3M0MnZ4cU1hdmpLY3o0ZVAzM0tvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDc5NS85OTI5NjlGQUU2QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2 eHFNYXZqS2N6NGVQMzNLb3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0k3GvYYdThfXAODpDl5mrPACkDtFmCwuhRi5RrBE1pKZRvQyVLI8r1Y5qrp 1z3vvqNO1/HgUXGaJD4XYH1h0nSs9KpFfkBPLTwrODU3Uf4Rw4y+ynW4uAemxcPV toyIXuqTrGexYjM/UmLmr2yzkyGDL0ByVnBgCfsY4yPErN+a7GJTeOE5uCxLc9ld PbPxApuiv+FTX83YtRYdgs9S4HN97u5UiB8I9VaTFjdeHVNRYOMJ9GsxjpYwIKvD /YV9euLPeL+ANSJY4jo/5y7LdFuhg75Ghov7tB0FxSrYmBr8e4bkn22wFtyws65D iWuawcLHD7RLWAQOW9bkdtUENA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:04 2026 by rpki-client