$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: pm0jw8GsXGFkiOeV3rKuxUEy72bnhxqSaJkAZTI/ndk= Subject key identifier: 62:ED:A2:8E:61:F7:71:CB:17:E9:82:0B:85:08:BA:8B:75:40:12:CB Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 35D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 3597 Signing time: Thu 16 Apr 2026 14:23:22 +0000 Manifest this update: Thu 16 Apr 2026 14:23:22 +0000 Manifest next update: Thu 23 Apr 2026 14:23:22 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: xczfHvjfsRztkEj6IaxVOBK7lBJhHx0PCQif+s9JWOQ=) 2: 8E3D04582E6111F1B6525AEF9C833773.roa (hash: UuyW5e6lF7Z+0+gU9cXnpJU5ej6QoOjDHx2berLU93s=) 3: 2BB9C0962D3511F1BEC8C490BD833773.roa (hash: 33HMp8f6ehTShGsEU4ibJ3ZspwcyPnSdW34LlV2dS3M=) 4: 1BC70FAEDBF011F092B3F5D0536F56BC.roa (hash: Cb0WTT8AKl4UE3/5l6qXIuWV17KOgvKYJVQ6UOAz2fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13779 (0x35d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Apr 16 14:23:22 2026 GMT Not After : Apr 23 14:23:22 2026 GMT Subject: CN=69e0f0da-fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:5a:0a:89:72:2a:03:48:7a:18:c9:74:8b: 08:03:5a:e0:86:ee:0b:ac:44:70:df:17:6e:aa:27: b8:93:a0:d3:b6:d1:c5:ea:ef:81:38:e4:9f:84:e2: c3:45:03:52:05:28:bf:a9:fb:f8:2d:29:b1:6a:4d: e6:4f:ee:d5:ee:55:25:49:11:20:c6:78:15:91:70: f7:59:e8:58:e2:46:f5:d3:5e:04:e9:e9:ed:18:13: dc:3b:01:e7:36:9a:ab:4c:de:be:1e:74:d4:d1:a2: 20:99:c3:84:a1:05:bf:32:08:51:26:1e:58:c5:33: 3c:56:eb:d9:97:e0:38:00:ee:56:9d:5c:51:ab:d5: 43:b9:a6:ba:07:69:27:d2:e8:a6:8f:bf:00:c4:e3: 27:ad:9e:28:b8:24:f7:07:61:c7:78:19:94:4f:75: a3:e2:f2:66:57:f4:ef:61:46:95:1e:1e:6e:df:3b: 8c:23:1f:90:5d:f3:33:7e:ec:29:18:c6:2f:d2:20: c8:f7:90:3d:df:a2:01:32:7b:81:ab:93:70:1b:f2: 8e:fd:46:c6:8f:1c:6d:d5:fb:97:c0:b8:98:3d:11: 9f:16:a0:5e:41:31:81:ad:f1:1c:ae:46:35:ad:9b: d8:ff:28:5a:bf:93:29:ec:3b:69:dc:8d:1c:b6:fb: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:A2:8E:61:F7:71:CB:17:E9:82:0B:85:08:BA:8B:75:40:12:CB X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8d:05:50:fb:31:68:43:55:d9:bc:70:ef:74:c4:cf:86:88: 90:e5:3a:ac:70:ed:b2:9e:18:b4:2f:a1:0a:2f:33:cd:41:3d: eb:54:24:c2:2f:7e:2a:88:f2:ef:e7:eb:86:5b:63:1f:bc:6e: ae:a8:e9:6c:02:00:3c:3c:9e:f9:84:b7:d3:ea:f1:16:98:39: 40:11:35:96:bb:ab:03:65:73:a8:89:09:58:2d:f1:53:97:d6: 17:f6:02:d1:45:02:32:55:8e:e9:73:e6:92:1f:8e:5e:03:49: 80:a3:5d:ae:8e:ca:c6:e0:29:e2:b2:2a:98:31:ce:6d:8e:f7: 72:00:cd:68:a5:27:63:37:09:23:13:b3:25:50:cb:eb:c5:f3: 96:42:0c:e9:03:a8:e2:d0:67:f1:88:c6:42:c5:e2:a0:3d:04: bc:4a:00:88:c2:8f:ff:bc:9d:d2:65:f0:42:a7:f1:ee:9d:f3: fb:3d:e1:f9:6a:fe:43:b3:9f:ff:e1:bc:69:15:29:31:51:4d: 03:db:34:87:95:16:44:68:fc:53:ec:45:f6:fc:7e:64:09:b1: 76:32:fa:bd:d6:3d:9a:4f:ae:ad:ca:d5:98:cb:e8:52:d2:15: 2f:d0:d0:8a:dc:76:bd:9a:46:dc:15:67:2b:7e:e0:94:9b:ff: 2d:25:87:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjYwNDE2MTQyMzIyWhcNMjYwNDIzMTQyMzIyWjAYMRYwFAYD VQQDEw02OWUwZjBkYS1mZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0FaColyKgNIehjJdIsIA1rghu4LrERw3xduqie4k6DTttHF6u+BOOSfhOLD RQNSBSi/qfv4LSmxak3mT+7V7lUlSREgxngVkXD3WehY4kb1014E6entGBPcOwHn NpqrTN6+HnTU0aIgmcOEoQW/MghRJh5YxTM8VuvZl+A4AO5WnVxRq9VDuaa6B2kn 0uimj78AxOMnrZ4ouCT3B2HHeBmUT3Wj4vJmV/TvYUaVHh5u3zuMIx+QXfMzfuwp GMYv0iDI95A936IBMnuBq5NwG/KO/UbGjxxt1fuXwLiYPRGfFqBeQTGBrfEcrkY1 rZvY/yhav5Mp7Dtp3I0ctvvtYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLtoo5h 93HLF+mCC4UIuot1QBLLMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKY0FUPsxaENV2bxw73TEz4aIkOU6rHDtsp4YtC+hCi8zzUE961Qkwi9+Kojy 7+frhltjH7xurqjpbAIAPDye+YS30+rxFpg5QBE1lrurA2VzqIkJWC3xU5fWF/YC 0UUCMlWO6XPmkh+OXgNJgKNdro7KxuAp4rIqmDHObY73cgDNaKUnYzcJIxOzJVDL 68XzlkIM6QOo4tBn8YjGQsXioD0EvEoAiMKP/7yd0mXwQqfx7p3z+z3h+Wr+Q7Of /+G8aRUpMVFNA9s0h5UWRGj8U+xF9vx+ZAmxdjL6vdY9mk+urcrVmMvoUtIVL9DQ itx2vZpG3BVnK37glJv/LSWHJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:19:46 2026 by rpki-client