$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json) Hash identifier: k/SUE34b4f6eWNXP0y4X3yGDHWcbep0y3VQIMQaTtXg= Subject key identifier: 2A:2D:DA:41:DB:56:7F:F9:F7:29:6C:CA:71:AA:EC:EF:2E:E8:D6:82 Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft Manifest number: 0182 Signing time: Fri 17 Apr 2026 04:24:33 +0000 Manifest this update: Fri 17 Apr 2026 04:24:32 +0000 Manifest next update: Fri 24 Apr 2026 04:24:32 +0000 Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: gsyYNDTGSb1HRK59gHmUjbojmLKJ+yt8xmRP9O+BW1Q=) 2: 139B8950382911F1B2EF7ADC9D833773.roa (hash: WGssqSwjxwVJVZhsGVJU0/mAd2yWoHSy0aI3gP8K5bA=) 3: 2AFB9BC6382911F1B2B588E49D833773.roa (hash: 7oPrd52StlbPHVgjeAzibMLZq71lKJ7JS9rLriloeWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Apr 17 04:24:32 2026 GMT Not After : Apr 24 04:24:32 2026 GMT Subject: CN=69e1b600-2ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:53:0d:c1:ef:ed:3c:ed:0d:a9:89:01:8d: 0d:64:c4:fe:d2:5e:8d:fc:8f:33:8d:05:cb:35:2c: 7d:a2:f8:d7:30:e8:c0:4f:6a:35:3e:87:3e:df:bb: 7c:9c:91:12:85:c3:0b:bb:95:31:a4:0f:31:59:dd: 84:66:2e:35:51:dd:a2:f2:e1:10:ef:7b:11:98:94: 1d:c7:f8:03:c3:d4:61:54:32:21:17:38:c2:d6:9d: 70:d6:df:19:69:f6:1e:9a:31:0d:8f:30:79:2c:47: 9c:99:b7:f4:21:e1:26:01:b1:a4:f1:f4:87:ad:c7: b2:a6:dd:81:bf:83:a1:9c:05:dd:04:64:fe:d1:f6: 47:31:a6:97:c1:70:37:47:20:b9:66:6d:4b:db:78: 03:b4:37:c7:16:a3:79:01:cf:0a:0b:9b:5e:29:28: 92:c7:d4:d7:d4:6e:86:31:c4:c2:e1:f0:e6:0a:a6: 53:1a:6c:23:b0:b6:6c:8d:ec:0b:41:6a:3b:57:52: bc:c3:e8:e6:05:18:9a:e1:5c:c6:6f:d0:bd:cb:70: a6:f2:6e:25:c4:e7:12:ec:a2:1b:d8:0b:b7:fa:e5: 39:81:2e:0e:54:88:d3:c4:66:f9:ce:19:7d:c1:c2: a4:53:3d:64:53:3b:a6:6b:ab:4c:c7:16:3b:d1:8c: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:DA:41:DB:56:7F:F9:F7:29:6C:CA:71:AA:EC:EF:2E:E8:D6:82 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:8f:fe:ad:3d:aa:30:6c:90:9c:29:41:d4:d9:d7:64:bd: 12:74:c1:f4:3b:f9:88:94:6b:1c:60:cd:38:fd:cc:88:72:3e: a6:fd:c7:f0:1b:32:79:d5:61:d8:be:9e:72:cc:2c:45:da:cd: fb:12:41:a1:99:03:9c:fd:a3:88:a4:0c:f5:49:59:1a:e3:c6: f2:2a:d7:8e:7e:52:5c:62:eb:0c:bb:46:6e:37:43:41:e4:ac: 5d:55:ff:4b:18:58:6d:e1:df:3c:10:51:b6:18:b8:bf:60:59: 14:c7:44:8d:43:4d:35:96:0e:75:d8:41:16:20:9c:ea:72:15: fc:14:da:86:59:90:7d:47:14:03:d3:5b:18:62:89:14:0c:c0: 73:fa:85:4f:10:0e:fe:b0:6c:e0:87:f7:99:37:10:e6:12:9e: 4b:0b:93:45:f9:26:31:f7:7b:bc:eb:79:4a:7e:67:02:b6:05: 72:80:4a:6d:e3:07:c2:32:6d:9c:87:31:9f:e3:34:b3:54:2b: 0c:b7:fb:70:d2:72:b4:10:b3:7d:3f:af:fd:ad:85:47:a5:46: cf:84:81:e6:f6:8b:c2:e7:68:b7:0f:d9:a1:e2:b5:d2:15:b9: f9:86:97:97:29:f5:d1:ca:a4:33:0a:8d:92:dc:d6:25:46:4c: 9e:7e:cf:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjYwNDE3MDQyNDMyWhcNMjYwNDI0MDQyNDMyWjAYMRYwFAYD VQQDEw02OWUxYjYwMC0yZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TpTDcHv7TztDamJAY0NZMT+0l6N/I8zjQXLNSx9ovjXMOjAT2o1Poc+37t8 nJEShcMLu5UxpA8xWd2EZi41Ud2i8uEQ73sRmJQdx/gDw9RhVDIhFzjC1p1w1t8Z afYemjENjzB5LEecmbf0IeEmAbGk8fSHrceypt2Bv4OhnAXdBGT+0fZHMaaXwXA3 RyC5Zm1L23gDtDfHFqN5Ac8KC5teKSiSx9TX1G6GMcTC4fDmCqZTGmwjsLZsjewL QWo7V1K8w+jmBRia4VzGb9C9y3Cm8m4lxOcS7KIb2Au3+uU5gS4OVIjTxGb5zhl9 wcKkUz1kUzuma6tMxxY70Yy8fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCot2kHb Vn/59ylsynGq7O8u6NaCMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5 RW1nSXJfZk9wUHdJNTlrcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfpCP/q09qjBskJwpQdTZ12S9EnTB9Dv5iJRrHGDNOP3MiHI+pv3H8BsyedVh 2L6ecswsRdrN+xJBoZkDnP2jiKQM9UlZGuPG8irXjn5SXGLrDLtGbjdDQeSsXVX/ SxhYbeHfPBBRthi4v2BZFMdEjUNNNZYOddhBFiCc6nIV/BTahlmQfUcUA9NbGGKJ FAzAc/qFTxAO/rBs4If3mTcQ5hKeSwuTRfkmMfd7vOt5Sn5nArYFcoBKbeMHwjJt nIcxn+M0s1QrDLf7cNJytBCzfT+v/a2FR6VGz4SB5vaLwudotw/ZoeK10hW5+YaX lyn10cqkMwqNktzWJUZMnn7PgA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:56:34 2026 by rpki-client