$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: mNDt6llJ9N3NGFFKe6wmEY3ZvWhOlqa7LW6JrkfPb7s= Subject key identifier: 96:36:A0:4F:BB:67:9F:21:FC:51:EE:50:3F:69:8B:66:00:F6:79:8A Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 0132 Signing time: Fri 17 Apr 2026 05:18:29 +0000 Manifest this update: Fri 17 Apr 2026 05:18:29 +0000 Manifest next update: Fri 24 Apr 2026 05:18:29 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: PiYK2xza2VpQunpsYE3ITb9gHWN/CsJiXfSAyEI8usY=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: 6wieboldL+svyfaS92rGNVhaWY2jMOAdUQcLZF1T9Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Apr 17 05:18:29 2026 GMT Not After : Apr 24 05:18:29 2026 GMT Subject: CN=69e1c2a5-3a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:fa:53:36:83:e1:21:4c:13:3a:c5:21:01: 1d:46:95:e6:39:bc:2f:81:27:f4:3e:a4:76:ca:e6: ae:24:69:06:0f:13:ab:97:76:b7:dd:f2:d9:ed:a6: 9f:d9:e6:3c:b1:04:42:4d:63:58:4d:57:bc:a2:e4: 62:0c:c5:24:bb:ba:10:7b:0a:3c:7a:c6:34:05:01: 58:20:31:03:f0:43:6b:61:ca:59:65:19:87:7c:98: a4:c0:7c:a6:8f:d4:10:8a:a3:53:38:11:63:d5:a3: 3e:af:a9:97:f6:01:7c:4c:f2:49:b0:91:37:cf:b8: 38:15:9c:f8:b2:fe:d6:1d:c7:03:eb:b2:d4:ae:7e: 5f:fb:c5:f9:ed:51:a2:d9:d5:0e:55:86:5f:b6:38: 8d:2f:5b:9e:24:f1:06:e4:1c:4b:48:4c:f2:3a:00: e2:6a:33:f8:de:86:7d:cc:6f:6e:06:6d:07:bd:0e: 28:5a:80:8e:ae:5f:d1:7c:a5:93:75:6a:f9:13:36: 2e:12:86:7f:80:38:32:8f:11:c4:19:3a:ba:eb:ad: fd:e3:4e:b1:87:2a:be:de:c9:85:61:cf:08:be:3c: 20:3e:64:f2:7d:6b:77:13:81:a7:31:86:74:3f:b4: 09:69:11:ba:ca:cd:7b:97:ba:d9:8a:87:84:24:a6: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:36:A0:4F:BB:67:9F:21:FC:51:EE:50:3F:69:8B:66:00:F6:79:8A X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:76:b1:b8:b6:93:e2:84:c3:dc:8e:b3:fb:bf:c5:ab:c5:da: 30:95:d5:d9:fa:32:24:c9:e6:58:ab:69:c4:e4:47:29:b2:97: f2:16:a5:46:bf:6d:20:46:86:78:6b:c8:b3:2e:23:a9:ec:60: ea:2c:46:a3:63:4e:85:83:e5:c2:51:ef:4f:46:40:96:88:e8: 1c:20:98:c0:cf:05:7b:b7:a5:53:69:cf:55:c1:dc:ae:ac:5a: 4e:74:1a:a2:0a:c6:2c:87:64:5a:bb:53:0e:60:61:3c:ac:93: 10:b8:00:77:5f:36:e5:e4:cd:46:ed:00:64:0f:72:07:10:31: e5:89:0d:8c:9e:ff:fd:0a:07:27:aa:8a:66:0d:5a:2b:23:55: b1:d3:65:92:13:8f:e7:53:f1:a3:07:b9:d6:0b:18:d4:15:91: a6:2c:82:b5:44:be:3d:24:b2:c8:7e:d5:18:20:6d:3d:c1:58: 36:76:e1:cf:44:6f:15:fa:ac:32:1f:47:ff:c5:84:92:34:22: 66:f9:8a:47:e8:37:51:fc:32:c2:9e:95:c5:18:58:b6:f0:0d: 68:24:46:89:ff:0d:c7:c1:5a:34:a8:f2:56:36:0a:30:1f:4f: a9:0e:ea:b9:72:85:6d:a6:ed:4d:ef:ac:33:a3:c4:9a:e4:fc: d1:ef:3c:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjYwNDE3MDUxODI5WhcNMjYwNDI0MDUxODI5WjAYMRYwFAYD VQQDEw02OWUxYzJhNS0zYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhH6UzaD4SFMEzrFIQEdRpXmObwvgSf0PqR2yuauJGkGDxOrl3a33fLZ7aaf 2eY8sQRCTWNYTVe8ouRiDMUku7oQewo8esY0BQFYIDED8ENrYcpZZRmHfJikwHym j9QQiqNTOBFj1aM+r6mX9gF8TPJJsJE3z7g4FZz4sv7WHccD67LUrn5f+8X57VGi 2dUOVYZftjiNL1ueJPEG5BxLSEzyOgDiajP43oZ9zG9uBm0HvQ4oWoCOrl/RfKWT dWr5EzYuEoZ/gDgyjxHEGTq66639406xhyq+3smFYc8IvjwgPmTyfWt3E4GnMYZ0 P7QJaRG6ys17l7rZioeEJKY8lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJY2oE+7 Z58h/FHuUD9pi2YA9nmKMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWXaxuLaT4oTD3I6z+7/Fq8XaMJXV2foyJMnmWKtpxORHKbKX8halRr9tIEaG eGvIsy4jqexg6ixGo2NOhYPlwlHvT0ZAlojoHCCYwM8Fe7elU2nPVcHcrqxaTnQa ogrGLIdkWrtTDmBhPKyTELgAd1825eTNRu0AZA9yBxAx5YkNjJ7//QoHJ6qKZg1a KyNVsdNlkhOP51Pxowe51gsY1BWRpiyCtUS+PSSyyH7VGCBtPcFYNnbhz0RvFfqs Mh9H/8WEkjQiZvmKR+g3Ufwywp6VxRhYtvANaCRGif8Nx8FaNKjyVjYKMB9PqQ7q uXKFbabtTe+sM6PEmuT80e88hA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:49:57 2026 by rpki-client