$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: 5QHtt1VqM52/Nf4GMChBExR7VI7VvdKb+CTfaMB+qxM= Subject key identifier: A0:C4:3C:4F:C9:AC:A8:AF:C1:97:9B:A3:53:10:90:CF:05:B0:19:ED Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 0711 Signing time: Thu 16 Apr 2026 21:52:15 +0000 Manifest this update: Thu 16 Apr 2026 21:52:15 +0000 Manifest next update: Thu 23 Apr 2026 21:52:15 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: 9WrwwgNiDDiM9QXsXE/9sOgAHI3KQCw6gkM5WRlSwu4=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Apr 16 21:52:15 2026 GMT Not After : Apr 23 21:52:15 2026 GMT Subject: CN=69e15a0f-e9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:5d:24:d9:63:ec:18:77:6d:9b:09:fd:0a: 01:29:4a:37:e1:7d:2f:15:5a:95:cb:a0:5f:9c:b4: f9:43:1b:a6:ed:e7:a1:a0:54:6a:b6:f9:09:66:ec: 80:3b:05:cf:ae:ad:34:15:0c:02:14:18:50:f1:dd: 32:6a:a7:e4:37:c5:ef:20:81:fe:df:be:cd:9f:11: 3a:8d:77:c5:12:67:69:e8:0a:43:a8:25:7e:dd:e4: 35:fd:f2:c1:14:95:4b:e1:33:4d:dd:c5:86:42:de: 68:7c:b7:8a:f4:89:5f:3f:dc:44:9e:e8:19:28:03: e7:60:b1:3f:95:de:97:2f:14:15:61:c7:78:f9:fc: a3:30:66:86:86:15:98:52:bf:86:a8:c9:3c:5e:e4: 03:bf:5e:b8:f8:6f:17:35:9a:b2:f7:52:20:c2:5a: b9:21:f8:51:4b:b8:03:36:e2:2c:06:bd:27:65:ba: 2f:2d:b2:bd:37:19:47:1a:fc:16:9f:b5:d0:b6:5c: de:2c:90:cf:0e:68:20:23:30:7e:df:55:97:28:24: dd:f9:7a:be:b6:f5:f8:65:8c:b3:c2:53:a4:00:88: 89:20:6b:88:c0:da:4a:7e:d0:70:55:e8:81:5c:23: 31:66:42:7f:d0:da:bd:e0:0b:91:ef:9e:f2:fb:0d: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:3C:4F:C9:AC:A8:AF:C1:97:9B:A3:53:10:90:CF:05:B0:19:ED X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:25:94:ed:c3:53:36:d6:ae:04:18:c1:a0:19:29:6a:86:9b: 99:e4:85:ce:f0:29:5b:0f:7b:5a:ed:e4:5b:49:4c:27:45:04: 38:b2:f5:e3:ee:3e:aa:cd:1b:b2:56:ad:70:66:48:eb:a0:62: 4e:b9:75:b9:71:db:6e:fc:8e:b1:55:10:4c:fc:e0:65:cf:3b: 4f:09:f1:be:13:88:50:ba:4c:67:ae:57:c1:1b:23:e3:e2:cf: 24:7b:83:a4:05:cf:54:5f:44:dc:59:d6:2b:17:e6:8f:f3:49: 8d:ba:8d:9f:ac:0a:b0:df:89:8d:7a:cb:43:94:f9:0a:a0:a4: 62:39:e0:2b:78:f2:16:92:b9:5e:12:ba:d8:0c:bd:a2:b5:c5: 6e:e2:58:b1:1c:0e:b6:49:b8:90:dd:e5:f1:1c:07:43:1a:08: da:9a:51:89:00:56:13:b5:87:23:ad:e2:3e:02:cd:0c:b5:1e: 77:48:03:21:97:94:73:6e:74:b3:67:30:65:04:1c:e1:4a:33: 96:bf:ca:4a:2f:ba:7c:46:7d:d9:cd:ab:34:7f:63:10:d0:cc: e5:48:73:83:6d:1c:ea:32:2e:9d:8f:be:7f:a0:e9:62:e7:e3: 96:ba:a9:26:4c:31:29:4f:0e:53:4c:ca:45:fa:1f:d7:dd:b1: 97:53:0a:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjYwNDE2MjE1MjE1WhcNMjYwNDIzMjE1MjE1WjAYMRYwFAYD VQQDEw02OWUxNWEwZi1lOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH5dJNlj7Bh3bZsJ/QoBKUo34X0vFVqVy6BfnLT5Qxum7eehoFRqtvkJZuyA OwXPrq00FQwCFBhQ8d0yaqfkN8XvIIH+377NnxE6jXfFEmdp6ApDqCV+3eQ1/fLB FJVL4TNN3cWGQt5ofLeK9IlfP9xEnugZKAPnYLE/ld6XLxQVYcd4+fyjMGaGhhWY Ur+GqMk8XuQDv164+G8XNZqy91Igwlq5IfhRS7gDNuIsBr0nZbovLbK9NxlHGvwW n7XQtlzeLJDPDmggIzB+31WXKCTd+Xq+tvX4ZYyzwlOkAIiJIGuIwNpKftBwVeiB XCMxZkJ/0Nq94AuR757y+w3qtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDEPE/J rKivwZebo1MQkM8FsBntMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSWU7cNTNtauBBjBoBkpaoabmeSFzvApWw97Wu3kW0lMJ0UEOLL14+4+qs0b slatcGZI66BiTrl1uXHbbvyOsVUQTPzgZc87TwnxvhOIULpMZ65XwRsj4+LPJHuD pAXPVF9E3FnWKxfmj/NJjbqNn6wKsN+JjXrLQ5T5CqCkYjngK3jyFpK5XhK62Ay9 orXFbuJYsRwOtkm4kN3l8RwHQxoI2ppRiQBWE7WHI63iPgLNDLUed0gDIZeUc250 s2cwZQQc4Uozlr/KSi+6fEZ92c2rNH9jENDM5Uhzg20c6jIunY++f6DpYufjlrqp JkwxKU8OU0zKRfof192xl1MK2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:13 2026 by rpki-client