$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: 2EoR4T8+ooZtXcgwgtHa8pw2ppunmQ3JsMzujkpNMqo= Subject key identifier: D2:2F:82:F9:30:AE:19:A7:7D:15:D4:54:D4:62:4A:FB:87:4B:0D:4D Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 3531 Signing time: Thu 16 Apr 2026 15:06:36 +0000 Manifest this update: Thu 16 Apr 2026 15:06:36 +0000 Manifest next update: Thu 23 Apr 2026 15:06:36 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: IVEZvFiNJyl497E9ME6+KlFLH+7hPMt4tMeDeUmUKGo=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: B4XkvDFGFvCBprc68a89D+sBKVil4nMYyWnc/DYPRx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Apr 16 15:06:36 2026 GMT Not After : Apr 23 15:06:36 2026 GMT Subject: CN=69e0fafc-83be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:04:53:da:86:df:72:78:e5:21:98:3a:cf: 23:09:82:04:dc:10:fe:45:f8:0a:59:ae:86:d0:97: dd:f6:27:e3:ea:00:7e:84:dc:9c:5d:97:c4:b0:14: 74:9e:cd:49:a7:82:27:8e:34:9e:1e:cb:df:69:59: ad:fd:75:bc:91:ec:16:8e:e0:14:e3:0a:95:98:da: 9a:5e:f1:48:49:f6:ef:68:25:78:59:f9:e3:df:17: c2:fa:f1:97:81:8b:3c:56:92:57:36:4f:ef:b0:77: 30:da:cc:8c:bd:26:bb:a9:b3:dd:cc:78:69:66:54: 6b:74:f6:c0:86:22:00:bf:9c:1c:93:31:ca:68:45: 5e:4d:87:b2:44:59:74:fb:d0:3c:18:5c:aa:b3:26: c2:92:2f:e3:72:e0:c5:b6:52:57:5f:be:ff:e3:05: 24:28:1b:92:f9:ed:43:8a:87:47:cd:b8:fb:41:68: 04:73:17:20:e8:1f:f5:dd:8b:9e:f1:99:55:bf:5d: f7:25:15:dc:b4:f8:c0:b3:c8:01:5b:e9:53:c1:79: 62:30:89:51:2d:46:46:bd:ff:19:11:01:33:94:42: b2:55:b1:b4:5c:25:32:2f:b5:9f:1c:d9:2f:d1:67: bd:e5:f1:88:5f:60:f0:34:bc:07:06:32:f1:12:dd: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:82:F9:30:AE:19:A7:7D:15:D4:54:D4:62:4A:FB:87:4B:0D:4D X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:f2:4d:0f:cb:24:78:6f:b9:8f:cc:c8:f6:9c:e4:c3:a6: cb:65:29:d7:60:73:db:17:6f:3a:cb:f3:63:d5:57:c8:19:d5: 21:a8:99:96:a9:65:67:ed:d9:e1:48:61:2a:4b:5f:be:8d:97: 56:ce:ca:a2:9e:bd:fd:17:37:56:95:e8:13:f8:00:a4:8e:77: 80:6f:e0:96:d9:3b:64:e7:b2:6e:9a:e0:9b:2a:6b:da:01:ea: 06:f3:a1:66:e4:c3:4c:44:c7:10:1a:03:34:d4:98:6a:a5:de: a7:59:44:f3:95:c1:9e:82:2e:1f:a8:68:fd:37:f6:af:85:67: 9a:c7:b6:74:4f:eb:46:ab:b4:cf:a3:36:41:40:2b:fa:80:23: 63:0c:80:49:59:98:aa:67:1e:dc:97:c5:3b:8b:f0:ad:e0:80: 8e:7c:2e:44:ab:0e:4e:c0:c0:87:97:ed:a8:64:e8:48:23:91: 01:c1:a7:1c:ab:0f:d9:bf:d9:96:5f:02:2c:89:ad:1f:9d:f4: 59:1c:c1:3c:a1:52:73:40:eb:78:2d:18:4a:00:7f:a7:40:2a: 3e:ee:59:85:9e:fd:31:4b:d4:4f:55:0a:32:57:97:4c:36:3c: 84:de:47:08:e1:a2:0b:93:cc:9f:dd:30:0d:49:63:da:4e:43: 86:86:96:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjYwNDE2MTUwNjM2WhcNMjYwNDIzMTUwNjM2WjAYMRYwFAYD VQQDEw02OWUwZmFmYy04M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz8EU9qG33J45SGYOs8jCYIE3BD+RfgKWa6G0Jfd9ifj6gB+hNycXZfEsBR0 ns1Jp4InjjSeHsvfaVmt/XW8kewWjuAU4wqVmNqaXvFISfbvaCV4Wfnj3xfC+vGX gYs8VpJXNk/vsHcw2syMvSa7qbPdzHhpZlRrdPbAhiIAv5wckzHKaEVeTYeyRFl0 +9A8GFyqsybCki/jcuDFtlJXX77/4wUkKBuS+e1DiodHzbj7QWgEcxcg6B/13Yue 8ZlVv133JRXctPjAs8gBW+lTwXliMIlRLUZGvf8ZEQEzlEKyVbG0XCUyL7WfHNkv 0We95fGIX2DwNLwHBjLxEt0fJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIvgvkw rhmnfRXUVNRiSvuHSw1NMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmgryTQ/LJHhvuY/MyPac5MOmy2Up12Bz2xdvOsvzY9VXyBnVIaiZlqllZ+3Z 4UhhKktfvo2XVs7Kop69/Rc3VpXoE/gApI53gG/gltk7ZOeybprgmypr2gHqBvOh ZuTDTETHEBoDNNSYaqXep1lE85XBnoIuH6ho/Tf2r4Vnmse2dE/rRqu0z6M2QUAr +oAjYwyASVmYqmce3JfFO4vwreCAjnwuRKsOTsDAh5ftqGToSCORAcGnHKsP2b/Z ll8CLImtH530WRzBPKFSc0DreC0YSgB/p0AqPu5ZhZ79MUvUT1UKMleXTDY8hN5H COGiC5PMn90wDUlj2k5DhoaWPg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:49 2026 by rpki-client