$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: iCw6du5CPXq0yjEhGOhnLNWtFXe0lkMp2pxxT2iuJhU= Subject key identifier: 0C:4A:24:BC:05:02:F3:45:1C:3E:8D:A0:A5:DC:11:41:22:2E:DD:4B Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 028D Signing time: Fri 17 Apr 2026 01:43:39 +0000 Manifest this update: Fri 17 Apr 2026 01:43:38 +0000 Manifest next update: Fri 24 Apr 2026 01:43:38 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: hDyQkIsePgxBwxiqVQoX3RSzckDUNOm8r6FPrbrGl7A=) 2: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=) 3: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=) 4: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=) 5: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=) 6: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=) 7: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=) 8: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Apr 17 01:43:38 2026 GMT Not After : Apr 24 01:43:38 2026 GMT Subject: CN=69e1904b-07b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:41:9b:19:ac:4a:f8:85:57:94:d3:3e:50: e2:86:1c:f8:4f:05:6d:1c:06:fb:7b:e1:91:4a:89: 55:54:3b:41:7e:91:01:80:b0:a4:2f:50:60:bc:87: bb:23:59:f6:f9:b3:36:f3:f2:7c:b2:a8:bd:c7:33: a6:63:47:64:ef:cc:03:e4:a3:cf:00:04:51:48:b8: e3:f7:dc:a2:b8:b1:cf:e5:99:63:45:d0:6c:63:23: 0b:4f:b7:87:0b:03:20:b6:a4:1a:3a:80:00:66:2f: 54:68:2f:0a:4f:c3:eb:8a:f7:f1:41:ed:a4:65:10: be:ad:67:60:a6:2f:f0:f5:9b:c0:7d:a1:9c:b5:ea: f8:17:04:0b:4e:7a:58:3e:2b:d4:e4:ba:a1:d6:b4: 37:68:52:1c:14:c9:9d:66:3e:c3:c0:47:ed:6f:1c: af:7b:10:a9:e7:a2:73:0e:44:f1:15:1e:b2:f9:ae: 81:80:dc:3c:2d:3b:83:ce:d5:e0:43:ce:86:8b:59: 38:1e:26:3a:1c:1d:be:80:ed:3e:9f:2a:78:f8:20: b9:6b:98:73:53:ee:a0:99:d6:c4:fe:7a:56:8b:6d: f3:e9:d6:60:a9:21:5c:c8:2c:a5:08:21:c0:da:2c: e8:73:62:1a:63:32:22:43:3a:f4:48:0c:14:d9:ff: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:24:BC:05:02:F3:45:1C:3E:8D:A0:A5:DC:11:41:22:2E:DD:4B X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:16:3c:22:68:9a:06:a2:49:b6:53:70:7f:37:78:50:90:46: 58:d2:cd:2b:1c:21:2b:09:38:83:ad:5c:9e:c9:89:72:c9:02: 2a:c9:0a:9e:91:7d:b6:f0:85:fe:56:de:ad:4f:20:d5:e6:cf: bf:70:ea:c5:f0:86:65:6b:70:a8:b1:e3:f9:93:f8:76:c4:b6: 41:22:31:b0:23:b6:0b:9f:30:51:66:7f:08:07:78:ab:85:f4: 53:6e:45:2e:e9:c3:3a:a5:e3:ef:84:de:a3:de:56:dd:7c:d7: 08:11:33:2c:2c:d4:1e:47:c0:04:2e:14:be:1c:a6:14:e0:6b: 72:d1:0b:8c:ec:7e:07:ed:7a:8e:d0:6f:2c:1d:b7:81:f1:05: 8a:d7:e5:82:20:c1:88:09:4a:99:ab:75:22:a9:05:7f:6e:4b: 3b:47:4d:33:61:81:40:13:7b:3b:0e:59:85:05:c6:a7:00:cf: 43:cd:3e:93:b9:6a:ea:1e:de:69:46:fc:74:1b:50:50:16:b3: dd:94:96:33:f0:8a:57:dd:8b:64:11:78:10:80:a4:eb:9b:6c: af:62:e0:1a:6e:7e:d1:db:26:88:e7:0f:51:c1:dc:92:97:9a: 6c:d3:f1:bc:d9:e1:63:aa:3e:06:b0:ff:d4:6a:c6:6e:14:24: 90:fb:a8:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjYwNDE3MDE0MzM4WhcNMjYwNDI0MDE0MzM4WjAYMRYwFAYD VQQDEw02OWUxOTA0Yi0wN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+hBmxmsSviFV5TTPlDihhz4TwVtHAb7e+GRSolVVDtBfpEBgLCkL1BgvIe7 I1n2+bM28/J8sqi9xzOmY0dk78wD5KPPAARRSLjj99yiuLHP5ZljRdBsYyMLT7eH CwMgtqQaOoAAZi9UaC8KT8PrivfxQe2kZRC+rWdgpi/w9ZvAfaGcter4FwQLTnpY PivU5Lqh1rQ3aFIcFMmdZj7DwEftbxyvexCp56JzDkTxFR6y+a6BgNw8LTuDztXg Q86Gi1k4HiY6HB2+gO0+nyp4+CC5a5hzU+6gmdbE/npWi23z6dZgqSFcyCylCCHA 2izoc2IaYzIiQzr0SAwU2f8RuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxKJLwF AvNFHD6NoKXcEUEiLt1LMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtxY8ImiaBqJJtlNwfzd4UJBGWNLNKxwhKwk4g61cnsmJcskCKskKnpF9tvCF /lberU8g1ebPv3DqxfCGZWtwqLHj+ZP4dsS2QSIxsCO2C58wUWZ/CAd4q4X0U25F LunDOqXj74Teo95W3XzXCBEzLCzUHkfABC4UvhymFOBrctELjOx+B+16jtBvLB23 gfEFitflgiDBiAlKmat1IqkFf25LO0dNM2GBQBN7Ow5ZhQXGpwDPQ80+k7lq6h7e aUb8dBtQUBaz3ZSWM/CKV92LZBF4EICk65tsr2LgGm5+0dsmiOcPUcHckpeabNPx vNnhY6o+BrD/1GrGbhQkkPuo/g== -----END CERTIFICATE-----Generated at Fri Apr 17 09:24:13 2026 by rpki-client