$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: XsOfx0fGnkhVpun8m4v3POaL3ZcDV8O0brtCcdIpS+4= Subject key identifier: 2A:D2:00:2F:53:28:83:16:40:3E:0F:9D:A2:A8:C4:B8:43:95:E6:15 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0431 Signing time: Sun 19 Apr 2026 00:16:14 +0000 Manifest this update: Sun 19 Apr 2026 00:16:13 +0000 Manifest next update: Sun 26 Apr 2026 00:16:13 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 7EbQYPMmBLuyyW7aAJnDn5xiySpj2d1w8XW/4Z45sNU=) 2: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=) 4: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Apr 19 00:16:13 2026 GMT Not After : Apr 26 00:16:13 2026 GMT Subject: CN=69e41ece-cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:da:f1:e8:1e:5f:d6:40:65:7c:b3:f1:a2: 1f:2c:f2:81:30:0b:40:37:5e:5f:1d:d4:ae:a8:bd: 7c:a7:51:83:8c:9d:7d:00:07:9c:96:39:ae:99:d9: 4a:18:c0:b0:90:44:de:ea:11:ec:70:84:64:d7:c4: 94:b1:0b:c1:bf:d6:bb:72:d4:72:11:77:a5:61:9c: cd:7c:89:6c:9e:4d:cb:a3:48:5f:32:67:1b:d4:1c: e7:f8:0a:8b:c9:fa:3f:ad:f0:99:ac:a0:54:cd:8c: f4:ea:cb:30:32:32:13:cb:19:80:bd:a7:9a:be:67: 67:f3:16:2b:3a:70:27:79:d4:10:82:32:6f:e5:50: 03:24:84:ba:2a:d8:34:c8:c6:bb:ae:ab:cc:b9:c6: f8:72:62:bf:8a:83:a6:fa:dc:47:45:f3:30:da:7d: 78:b5:cb:a6:e4:14:32:27:20:06:d8:34:f6:20:07: f2:c6:31:7c:90:bd:cf:65:ba:b1:96:bc:0c:5e:6a: 0a:9f:8a:b2:ea:91:10:38:0e:08:77:d9:2a:e0:fa: 59:00:98:db:a9:ef:57:83:72:d7:eb:f6:17:12:bd: 1c:7e:a2:fe:5b:c2:b8:14:82:39:c8:6e:8f:2f:72: e9:76:36:d5:dd:b2:95:a5:fc:69:12:aa:21:6b:c4: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D2:00:2F:53:28:83:16:40:3E:0F:9D:A2:A8:C4:B8:43:95:E6:15 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:90:2d:50:e3:fa:af:5b:fd:6e:a7:df:00:09:53:51:85:e1: 63:19:42:a8:1f:33:5d:0c:fe:42:86:71:4f:5e:ef:44:5e:48: eb:cb:3a:63:ba:c3:c1:94:3a:ca:1d:5e:8f:aa:2a:55:6a:d5: 9f:72:ef:2c:be:f7:64:b4:bb:9c:aa:44:ad:28:44:4e:65:2c: c6:e4:fc:c8:c0:a6:e3:cf:7e:1d:8d:cf:73:6b:08:f2:ab:43: 64:a1:e3:56:4a:24:32:7c:52:1b:54:a6:98:cb:94:c6:13:c3: 0b:41:da:d9:0c:37:7a:0b:49:74:90:0c:ec:9a:99:21:e0:8a: 78:48:a8:5d:ef:26:83:e8:f3:5a:56:94:ae:7f:99:32:45:56: ca:40:ff:e7:7c:86:df:cd:e4:e1:8d:3a:7a:da:e0:b9:eb:98: bd:66:ff:ef:bc:7d:0c:6d:d0:b2:b0:fe:be:a3:ca:61:1e:6c: b3:d9:bb:08:db:b3:fd:f0:13:9e:68:46:61:5f:e3:cb:bb:9d: ba:55:e3:83:22:e7:02:bd:55:7c:17:ed:8d:e5:79:d9:ae:d2: 67:60:b8:7d:52:f0:a0:53:e2:1f:93:32:2d:3e:36:d2:8a:77: 53:65:f1:8a:6a:b9:55:24:eb:ca:97:fe:78:e0:24:8a:d6:9b: c8:af:e6:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYwNDE5MDAxNjEzWhcNMjYwNDI2MDAxNjEzWjAYMRYwFAYD VQQDEw02OWU0MWVjZS1jYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm3a8egeX9ZAZXyz8aIfLPKBMAtAN15fHdSuqL18p1GDjJ19AAecljmumdlK GMCwkETe6hHscIRk18SUsQvBv9a7ctRyEXelYZzNfIlsnk3Lo0hfMmcb1Bzn+AqL yfo/rfCZrKBUzYz06sswMjITyxmAvaeavmdn8xYrOnAnedQQgjJv5VADJIS6Ktg0 yMa7rqvMucb4cmK/ioOm+txHRfMw2n14tcum5BQyJyAG2DT2IAfyxjF8kL3PZbqx lrwMXmoKn4qy6pEQOA4Id9kq4PpZAJjbqe9Xg3LX6/YXEr0cfqL+W8K4FII5yG6P L3LpdjbV3bKVpfxpEqoha8SMTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrSAC9T KIMWQD4PnaKoxLhDleYVMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpAtUOP6r1v9bqffAAlTUYXhYxlCqB8zXQz+QoZxT17vRF5I68s6Y7rDwZQ6 yh1ej6oqVWrVn3LvLL73ZLS7nKpErShETmUsxuT8yMCm489+HY3Pc2sI8qtDZKHj VkokMnxSG1SmmMuUxhPDC0Ha2Qw3egtJdJAM7JqZIeCKeEioXe8mg+jzWlaUrn+Z MkVWykD/53yG383k4Y06etrgueuYvWb/77x9DG3QsrD+vqPKYR5ss9m7CNuz/fAT nmhGYV/jy7udulXjgyLnAr1VfBftjeV52a7SZ2C4fVLwoFPiH5MyLT420op3U2Xx imq5VSTrypf+eOAkitabyK/mLw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:59:27 2026 by rpki-client