$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json) Hash identifier: JcdG7WcITlya+ti+bx9zIjFvmGkOOEs0GEnJN77jHN8= Subject key identifier: AA:43:7E:53:DE:AB:F4:6D:98:8A:3A:F5:AB:67:0F:F1:FB:7D:6E:A9 Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft Manifest number: 43 Signing time: Fri 17 Apr 2026 08:12:35 +0000 Manifest this update: Fri 17 Apr 2026 08:12:35 +0000 Manifest next update: Fri 24 Apr 2026 08:12:35 +0000 Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: e0B/SF6ybpvXIucXFCQdEp4LYux7BytVr8MHtPfR1+I=) 2: 99984580E35011F0B21921EF756F56BC.roa (hash: acgTLalltM0B7sOprD1qkiK3EfCcLMJ3xgY3XgnlWz4=) 3: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F Validity Not Before: Apr 17 08:12:35 2026 GMT Not After : Apr 24 08:12:35 2026 GMT Subject: CN=69e1eb73-3876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:be:e8:45:89:af:ae:24:42:4d:5d:73:57:f2: c5:ec:0b:64:fe:9e:b9:5f:a6:2f:57:84:90:ea:dd: 29:f4:a2:f3:f9:3f:0e:64:ab:11:e9:16:ae:e7:76: be:8d:8a:2f:52:eb:17:57:e1:09:23:c5:dc:12:76: 2b:41:fe:b4:9d:da:6e:c6:5e:0d:15:c1:74:a7:6e: d7:72:95:0b:23:a3:3c:77:cb:f7:0b:83:34:4a:f0: d1:91:31:ca:2d:88:4f:a4:bf:5f:32:29:7d:34:2e: 7f:f0:c0:5e:d6:6a:0c:d9:f0:a9:1a:2e:7c:65:4c: a0:36:c0:7a:fb:12:ff:f8:6a:e5:be:ba:07:fe:cc: e4:16:0f:60:e7:e6:b6:77:f5:4f:5e:fb:6a:5b:f4: 52:4e:22:ec:51:0e:13:fc:bc:f2:c9:7f:94:75:32: 13:b2:39:cf:e5:ef:64:a2:5c:8f:54:2c:6d:4e:ea: 7e:22:f1:6f:0e:77:4c:ed:cb:42:ed:68:36:93:dd: c5:a0:de:c8:74:6e:52:c9:c0:67:f1:83:cc:30:a6: af:ad:a2:2b:88:90:58:4a:ff:09:46:79:56:4b:8f: d0:7e:b4:76:1c:be:95:01:85:56:8f:2b:61:45:82: 73:37:48:d5:4a:30:b4:e5:dd:40:56:86:31:43:23: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:7E:53:DE:AB:F4:6D:98:8A:3A:F5:AB:67:0F:F1:FB:7D:6E:A9 X509v3 Authority Key Identifier: keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:7f:96:31:23:34:3d:3d:9d:3d:8d:ae:ec:1f:5c:72:4e: 1c:21:97:47:d5:bd:86:3e:98:f2:85:1a:b4:02:fc:56:4b:20: 2e:b1:5f:b2:8a:28:3b:c5:a8:f1:96:3b:77:4d:99:08:6c:1d: 3a:ae:39:4a:b3:72:7b:0c:0c:55:e5:6c:37:65:68:9e:49:00: 9b:91:57:ad:bc:bd:bf:5a:05:1a:05:75:25:89:39:a5:70:08: dc:5b:9e:c0:18:3e:7d:d9:fb:d1:4c:63:18:71:38:e9:ef:38: 9d:73:9a:4f:50:6f:d4:d6:96:38:eb:f7:9b:48:18:69:ee:3a: a7:56:8c:4c:96:57:6e:9a:25:cf:6d:ad:fc:0d:b0:ac:35:43: 2b:93:23:ec:5a:46:3a:21:7c:81:94:de:5d:3f:85:56:df:5b: 7b:07:94:fb:9b:af:60:d2:40:1b:e7:d7:4b:38:7c:a9:e2:e6: 32:79:1d:92:34:6a:ea:7f:f9:4a:0c:b7:5e:48:ec:16:36:3d: 7c:ab:26:cb:ce:47:f7:b3:cb:44:db:1f:6d:3b:ed:00:d9:68: 3e:f3:b5:48:93:48:58:d8:0e:39:c3:88:60:e2:76:66:f4:12: 4f:92:fc:21:69:18:12:86:3d:bd:06:c2:89:da:ff:99:12:15: ad:6a:ff:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQ2RTExMC8GA1UEBRMoMUVFQzA3OENCNkJBNTI2NjAzQzIwQzhEOTlDM0E3NDYz MUQ5QzE0RjAeFw0yNjA0MTcwODEyMzVaFw0yNjA0MjQwODEyMzVaMBgxFjAUBgNV BAMTDTY5ZTFlYjczLTM4NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDovuhFia+uJEJNXXNX8sXsC2T+nrlfpi9XhJDq3Sn0ovP5Pw5kqxHpFq7ndr6N ii9S6xdX4QkjxdwSditB/rSd2m7GXg0VwXSnbtdylQsjozx3y/cLgzRK8NGRMcot iE+kv18yKX00Ln/wwF7WagzZ8KkaLnxlTKA2wHr7Ev/4auW+ugf+zOQWD2Dn5rZ3 9U9e+2pb9FJOIuxRDhP8vPLJf5R1MhOyOc/l72SiXI9ULG1O6n4i8W8Od0zty0Lt aDaT3cWg3sh0blLJwGfxg8wwpq+toiuIkFhK/wlGeVZLj9B+tHYcvpUBhVaPK2FF gnM3SNVKMLTl3UBWhjFDIx/vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqkN+U96r 9G2Yijr1q2cP8ft9bqkwHwYDVR0jBBgwFoAUHuwHjLa6UmYDwgyNmcOnRjHZwU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0I2NTk3OTRDRTI5 MTExRjA5NkUyN0QxMTQ1NkY1NkJDL0h1d0hqTGE2VW1ZRHdneU5tY09uUmpIWndV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSHV3SGpMYTZVbVlEd2d5Tm1jT25Sakhad1U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDZFL0I2NTk3OTRDRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL0h1d0hqTGE2VW1Z RHdneU5tY09uUmpIWndVOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcGX+WMSM0PT2dPY2u7B9cck4cIZdH1b2GPpjyhRq0AvxWSyAusV+yiig7xajx ljt3TZkIbB06rjlKs3J7DAxV5Ww3ZWieSQCbkVetvL2/WgUaBXUliTmlcAjcW57A GD592fvRTGMYcTjp7zidc5pPUG/U1pY46/ebSBhp7jqnVoxMlldumiXPba38DbCs NUMrkyPsWkY6IXyBlN5dP4VW31t7B5T7m69g0kAb59dLOHyp4uYyeR2SNGrqf/lK DLdeSOwWNj18qybLzkf3s8tE2x9tO+0A2Wg+87VIk0hY2A45w4hg4nZm9BJPkvwh aRgShj29BsKJ2v+ZEhWtav8o -----END CERTIFICATE-----Generated at Sat Apr 18 03:06:46 2026 by rpki-client