$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: +SS7Ch4Z+qaLq80Wd4kXLhoiNOR7L8S2GOxzrgkyc50= Subject key identifier: 55:B3:E3:92:28:D0:46:E1:B5:19:FF:11:C5:A2:70:E0:52:DD:57:9C Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 01C3 Signing time: Sun 19 Apr 2026 03:32:50 +0000 Manifest this update: Sun 19 Apr 2026 03:32:50 +0000 Manifest next update: Sun 26 Apr 2026 03:32:50 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: dQlPlTgipgK3fj0EKb2ZQTHWw8aqPMgdKGNkhTAbVKg=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: JehbpvK4Dpb6wXVXNKOP9H34UDru94u30nPkff7PtWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Apr 19 03:32:50 2026 GMT Not After : Apr 26 03:32:50 2026 GMT Subject: CN=69e44ce2-427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:17:c1:75:69:2d:39:f5:45:32:d8:3e:28: cc:4d:c7:7d:eb:df:67:96:6d:0e:ca:cd:8c:72:ee: 77:4e:33:f1:f1:ec:82:4d:8b:a8:98:b7:52:d4:5a: b5:f2:d6:49:7b:ad:7a:72:06:b9:d0:ea:a8:e9:bb: 3c:56:c1:61:cf:41:50:1f:ab:25:9f:39:cd:19:22: bb:32:60:ae:ff:13:b1:6d:e7:21:de:ad:cc:15:42: 11:fc:a6:a1:ce:b6:b7:bd:aa:31:47:41:18:f3:12: 4c:3a:55:32:77:15:45:3c:f7:43:04:94:4c:ae:35: 18:cc:36:fa:e6:6f:ba:83:46:13:47:69:f5:66:6f: c0:3b:f9:b7:3e:8f:96:db:72:73:c9:d8:55:96:6f: 43:1d:da:ae:0b:36:b1:4d:e3:cc:47:9e:5c:b0:7e: 16:62:9b:75:15:67:31:4c:d0:34:76:1a:87:cc:58: 72:a1:11:37:82:ac:25:1b:90:2b:32:12:f3:db:3f: 87:34:46:d8:ed:6d:f9:24:3a:7e:bc:d5:7c:c4:50: f5:54:58:d8:7c:10:27:62:46:66:27:b7:14:a4:74: 08:44:99:2c:c2:38:e5:73:58:fe:ee:ea:5b:56:2b: 0d:ec:05:0d:4c:1b:2f:ba:ed:b8:e2:6d:b3:dc:ce: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B3:E3:92:28:D0:46:E1:B5:19:FF:11:C5:A2:70:E0:52:DD:57:9C X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f2:08:a8:bf:ac:4d:c0:52:28:da:51:8d:94:36:d2:33:44: 81:a9:cf:e2:be:7f:9d:c5:4e:dc:8c:2e:b2:9b:10:68:a4:85: 00:38:31:4f:b3:3a:1f:ff:ce:63:e7:01:6b:ca:29:e4:ba:d4: 2f:25:1c:25:88:3b:5c:c7:19:81:0b:e6:59:7b:b6:fb:f7:7d: c8:25:a3:05:e9:bc:ec:57:f9:c1:65:84:d8:58:aa:9e:57:7f: 8d:5b:33:f8:d8:ad:6b:2a:92:ff:96:3c:92:9b:3d:f2:ec:c6: 48:b2:23:5b:07:39:9f:35:9f:da:88:b9:fc:8e:ca:55:30:8b: e5:bd:48:64:74:c7:fd:4c:3c:0d:84:f1:75:fa:61:7c:08:40: b9:40:0c:bd:23:92:b3:44:05:fb:85:d9:5a:15:0c:01:19:0f: 4d:1f:6a:c1:fd:44:06:74:5d:d7:41:9a:a6:54:81:bc:61:cc: 1c:ea:af:d6:3c:77:82:4c:5a:1e:f9:37:7c:10:64:de:42:27: 0c:d8:83:89:d7:60:f0:b7:9d:8b:d3:d0:33:48:7d:94:fe:7a: 8e:f8:20:e2:4b:06:0e:a9:90:87:ce:a5:e8:34:cf:99:11:45: 88:47:c9:12:4d:a6:a8:b0:30:20:4e:eb:8e:b9:7a:64:63:8d: 9c:7e:83:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjYwNDE5MDMzMjUwWhcNMjYwNDI2MDMzMjUwWjAYMRYwFAYD VQQDEw02OWU0NGNlMi00MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2wXwXVpLTn1RTLYPijMTcd9699nlm0Oys2Mcu53TjPx8eyCTYuomLdS1Fq1 8tZJe616cga50Oqo6bs8VsFhz0FQH6slnznNGSK7MmCu/xOxbech3q3MFUIR/Kah zra3vaoxR0EY8xJMOlUydxVFPPdDBJRMrjUYzDb65m+6g0YTR2n1Zm/AO/m3Po+W 23JzydhVlm9DHdquCzaxTePMR55csH4WYpt1FWcxTNA0dhqHzFhyoRE3gqwlG5Ar MhLz2z+HNEbY7W35JDp+vNV8xFD1VFjYfBAnYkZmJ7cUpHQIRJkswjjlc1j+7upb VisN7AUNTBsvuu244m2z3M6qzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWz45Io 0EbhtRn/EcWicOBS3VecMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfIIqL+sTcBSKNpRjZQ20jNEganP4r5/ncVO3IwuspsQaKSFADgxT7M6H//O Y+cBa8op5LrULyUcJYg7XMcZgQvmWXu2+/d9yCWjBem87Ff5wWWE2Fiqnld/jVsz +NitayqS/5Y8kps98uzGSLIjWwc5nzWf2oi5/I7KVTCL5b1IZHTH/Uw8DYTxdfph fAhAuUAMvSOSs0QF+4XZWhUMARkPTR9qwf1EBnRd10GaplSBvGHMHOqv1jx3gkxa Hvk3fBBk3kInDNiDiddg8Ledi9PQM0h9lP56jvgg4ksGDqmQh86l6DTPmRFFiEfJ Ek2mqLAwIE7rjrl6ZGONnH6D+A== -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:33 2026 by rpki-client