$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: GztCquP20fRllc0Esu9hjjrXuvWDzUZkl98fLLfeN68= Subject key identifier: FE:CF:07:29:AE:DC:24:D9:2A:00:A0:9C:76:48:3A:10:02:04:21:06 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 0279 Signing time: Sun 19 Apr 2026 01:44:08 +0000 Manifest this update: Sun 19 Apr 2026 01:44:08 +0000 Manifest next update: Sun 26 Apr 2026 01:44:08 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: wksYVmnNdCZWpdCEDNa0XYMZndtyX+pGSAfd7MwNXHo=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: HKqMxuCnXZUWQyUBbuwuWp132t+lLGFUZQke8Tou0tg=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: MRMfTNKXALiUr+Ks/cwLuFR+d+i53M1YUPrYan/sCwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 01:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Apr 19 01:44:08 2026 GMT Not After : Apr 26 01:44:08 2026 GMT Subject: CN=69e43368-519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:29:74:be:5a:48:76:c7:48:37:51:0f:c0: 3c:40:bd:07:75:cf:ba:8b:d9:f0:61:60:50:74:f6: cc:b8:5c:fe:90:8a:95:96:1e:43:14:e0:6d:0d:a7: 8d:15:56:e4:f9:44:5a:78:64:9e:25:8d:c4:0d:dc: 02:e7:de:3f:3b:28:b5:fc:98:22:25:6f:43:bc:80: a1:cf:a4:51:25:22:03:28:71:d6:27:45:b3:b5:eb: 8b:5f:6f:80:d4:7c:bf:34:9d:ff:78:ca:d0:6f:9e: 81:e2:36:0b:be:76:92:00:f0:a2:24:46:4b:95:ae: 90:26:5e:04:86:b6:d9:11:e2:82:36:e5:8c:09:c3: e4:32:92:a0:43:56:c2:e2:53:93:2e:f2:7b:78:28: 72:1c:cf:06:03:39:d0:00:a6:d6:b3:19:06:64:19: 48:c6:01:e5:5f:3e:18:2a:7f:22:34:2e:a4:fc:e7: e9:3f:44:18:2e:67:bb:94:b2:cc:3a:b4:bf:1a:9c: 81:03:3a:02:89:77:20:b2:6d:ed:a7:75:20:c7:6d: 4e:b8:aa:d7:cf:5b:42:38:84:8d:f0:04:14:5d:8d: d2:f2:2e:68:dd:57:97:47:99:ae:49:ab:e8:c3:f3: 57:47:a8:7c:35:0d:99:22:da:6d:3f:a7:84:b4:40: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CF:07:29:AE:DC:24:D9:2A:00:A0:9C:76:48:3A:10:02:04:21:06 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b7:99:66:35:9f:65:bc:4c:d2:e6:29:a0:c5:3c:e1:dd:7a: a5:dd:dd:21:54:48:97:ae:78:fe:78:ad:82:64:dd:72:4f:69: 0d:f3:aa:6e:17:f4:92:89:5a:fd:39:c4:ac:e4:21:46:b5:57: e2:94:ac:95:02:cb:0e:09:dd:08:9e:6d:5b:7f:e4:06:48:b8: c5:3d:d4:2d:8c:5e:6a:79:bb:f7:33:22:98:e1:e2:25:71:1b: 79:72:4a:f2:9b:a5:9a:f8:4e:00:85:65:b9:b4:e2:91:28:fd: 5b:64:a3:5f:69:54:d7:8b:82:6c:26:08:20:6e:0e:46:61:f7: 74:ed:be:5b:fb:3d:2e:02:f4:70:b3:45:ee:36:42:6e:9c:3f: dd:11:01:03:ac:aa:5b:90:9c:cb:70:e4:c7:aa:bf:f5:e7:02: f2:44:e0:dd:0b:51:91:89:00:76:91:b9:0d:9d:5b:ca:08:53: 7b:13:d2:1b:1c:d8:9a:58:e2:0d:8a:d5:be:d7:04:a0:3b:01: a4:9b:86:ef:45:d3:82:4b:fe:71:9c:e0:ac:25:cc:c4:44:bb: 56:e9:3e:51:fc:e8:9a:06:08:69:75:e7:56:fb:78:5b:11:3a: 9f:e5:fd:4e:6b:c7:8b:81:98:8c:30:21:cf:e1:99:33:4e:4d: a0:83:b0:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjYwNDE5MDE0NDA4WhcNMjYwNDI2MDE0NDA4WjAYMRYwFAYD VQQDEw02OWU0MzM2OC01MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVEpdL5aSHbHSDdRD8A8QL0Hdc+6i9nwYWBQdPbMuFz+kIqVlh5DFOBtDaeN FVbk+URaeGSeJY3EDdwC594/Oyi1/JgiJW9DvIChz6RRJSIDKHHWJ0WzteuLX2+A 1Hy/NJ3/eMrQb56B4jYLvnaSAPCiJEZLla6QJl4EhrbZEeKCNuWMCcPkMpKgQ1bC 4lOTLvJ7eChyHM8GAznQAKbWsxkGZBlIxgHlXz4YKn8iNC6k/OfpP0QYLme7lLLM OrS/GpyBAzoCiXcgsm3tp3Ugx21OuKrXz1tCOISN8AQUXY3S8i5o3VeXR5muSavo w/NXR6h8NQ2ZItptP6eEtECGJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7PBymu 3CTZKgCgnHZIOhACBCEGMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOreZZjWfZbxM0uYpoMU84d16pd3dIVRIl654/nitgmTdck9pDfOqbhf0kola /TnErOQhRrVX4pSslQLLDgndCJ5tW3/kBki4xT3ULYxeanm79zMimOHiJXEbeXJK 8pulmvhOAIVlubTikSj9W2SjX2lU14uCbCYIIG4ORmH3dO2+W/s9LgL0cLNF7jZC bpw/3REBA6yqW5Ccy3Dkx6q/9ecC8kTg3QtRkYkAdpG5DZ1byghTexPSGxzYmlji DYrVvtcEoDsBpJuG70XTgkv+cZzgrCXMxES7Vuk+UfzomgYIaXXnVvt4WxE6n+X9 TmvHi4GYjDAhz+GZM05NoIOwJQ== -----END CERTIFICATE-----Generated at Sun Apr 19 09:44:10 2026 by rpki-client