$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json) Hash identifier: MivHEAw/Ll06tll640fjOn5jqq5iwXMN6mM3sIc7eLY= Subject key identifier: 13:C4:DB:28:17:70:61:C8:61:6D:46:6C:22:DC:C2:36:FE:88:60:EA Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft Manifest number: 44 Signing time: Wed 15 Apr 2026 07:59:11 +0000 Manifest this update: Wed 15 Apr 2026 07:59:10 +0000 Manifest next update: Wed 22 Apr 2026 07:59:10 +0000 Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: +mTDq1ACxHcMjAdI2wady/WjDj+1/SdGmphvBWgc6Ow=) 2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: qzSxvuujDmL239/Gh/JLB+28QvjA0lGPnBH2BpP+kM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Validity Not Before: Apr 15 07:59:10 2026 GMT Not After : Apr 22 07:59:10 2026 GMT Subject: CN=69df454f-3230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:15:2c:5a:ea:0b:9a:a2:44:ad:21:8b:a9: b9:d3:68:2c:c7:46:13:e9:ed:61:f0:10:b6:f3:c1: 68:a4:fd:0a:15:18:da:76:a5:59:20:e9:6b:88:9c: f9:ba:7c:0f:ff:36:e7:c6:8b:e4:c3:d0:5c:71:0a: d1:cb:06:43:4a:9a:54:6f:7b:69:04:9c:db:24:cf: f0:5f:ec:6d:07:0f:2f:de:ae:5b:35:ab:69:11:ec: a8:42:2b:45:f5:10:03:d4:c8:23:73:60:23:a3:08: ea:c6:c4:76:d9:a6:16:7f:02:97:b6:13:ed:94:6d: 4e:6d:4e:fc:b2:fd:74:c0:1d:d6:08:7a:1e:07:f5: 2e:4a:42:cb:da:06:dd:e4:25:e1:68:70:b2:05:9b: 76:19:13:52:90:80:12:f4:d0:9f:9a:88:aa:41:e4: 61:38:d9:88:19:e2:83:78:a4:c3:7b:f4:48:a8:ee: a0:42:1d:3f:db:fd:c7:28:2d:da:97:a2:f0:1f:4d: e5:13:22:ce:5a:b6:31:34:92:32:3c:a3:97:4d:09: 8b:32:1c:99:99:28:e5:43:28:27:f8:e2:ae:28:e9: 30:3d:89:15:79:55:92:5c:23:b0:46:89:b8:a7:8c: d1:04:88:a9:66:27:d3:51:c7:bf:bb:34:6d:fb:68: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:DB:28:17:70:61:C8:61:6D:46:6C:22:DC:C2:36:FE:88:60:EA X509v3 Authority Key Identifier: keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:2d:eb:09:32:8d:0f:8f:4a:f4:30:7a:f2:c3:e5:56:d2: 51:0c:9c:86:af:71:3c:f0:6b:9d:88:aa:13:0a:1b:c0:50:37: 63:59:fd:3a:4f:2a:cb:8c:62:f6:09:3b:2e:24:a0:be:54:67: 13:fe:a2:5d:9c:42:22:d8:68:f3:5b:00:73:b9:2a:7f:10:dc: 5f:e1:45:10:25:57:3e:74:5d:ad:d9:e9:1c:20:6c:4c:1a:ac: bc:e9:0f:df:9a:81:60:e1:ae:65:d1:9a:3e:fb:fd:7e:a7:7a: 0c:73:69:8a:f8:dc:d2:2f:8f:aa:37:c5:1f:39:3c:a9:1c:a3: d1:49:27:b2:a1:1d:9d:74:88:37:bc:4d:f4:a8:fd:d0:1b:11: 2b:bc:ff:cc:f1:bc:58:47:94:cf:c2:d9:db:ec:78:e8:2e:47: 67:b3:5b:9c:6b:cc:1b:06:af:86:25:3b:16:a0:e6:03:6d:b4: 11:71:5b:ae:b4:27:c0:58:74:ab:3f:67:ea:93:05:72:a8:48: d2:d1:de:57:34:ec:11:5e:d7:4d:78:9a:1c:c6:ac:64:84:a9: c7:2e:72:76:72:1f:b7:d3:4a:a0:2c:b7:cc:4f:96:89:d7:e7: 8e:af:c6:1d:3a:1b:b0:5a:f8:e2:da:85:ec:62:6c:e5:2b:85: 60:62:af:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODY4MjExMC8GA1UEBRMoMjNFMUU0MjU5RkFCQ0Q0OUZENThDQ0Q0NkNGMjAwQ0Qx MjFFMkVBQzAeFw0yNjA0MTUwNzU5MTBaFw0yNjA0MjIwNzU5MTBaMBgxFjAUBgNV BAMTDTY5ZGY0NTRmLTMyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxOxUsWuoLmqJErSGLqbnTaCzHRhPp7WHwELbzwWik/QoVGNp2pVkg6WuInPm6 fA//NufGi+TD0FxxCtHLBkNKmlRve2kEnNskz/Bf7G0HDy/erls1q2kR7KhCK0X1 EAPUyCNzYCOjCOrGxHbZphZ/Ape2E+2UbU5tTvyy/XTAHdYIeh4H9S5KQsvaBt3k JeFocLIFm3YZE1KQgBL00J+aiKpB5GE42YgZ4oN4pMN79Eio7qBCHT/b/ccoLdqX ovAfTeUTIs5atjE0kjI8o5dNCYsyHJmZKOVDKCf44q4o6TA9iRV5VZJcI7BGibin jNEEiKlmJ9NRx7+7NG37aMqHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUE8TbKBdw YchhbUZsItzCNv6IYOowHwYDVR0jBBgwFoAUI+HkJZ+rzUn9WMzUbPIAzRIeLqww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NjgyLzA3MjlERDJFRDVC QTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVuOVdNelViUElBelJJZUxx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSS1Ia0paLXJ6VW45V016VWJQSUF6UkllTHF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NjgyLzA3MjlERDJFRDVCQTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVu OVdNelViUElBelJJZUxxdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBV8C3rCTKND49K9DB68sPlVtJRDJyGr3E88GudiKoTChvAUDdjWf06TyrLjGL2 CTsuJKC+VGcT/qJdnEIi2GjzWwBzuSp/ENxf4UUQJVc+dF2t2ekcIGxMGqy86Q/f moFg4a5l0Zo++/1+p3oMc2mK+NzSL4+qN8UfOTypHKPRSSeyoR2ddIg3vE30qP3Q GxErvP/M8bxYR5TPwtnb7HjoLkdns1uca8wbBq+GJTsWoOYDbbQRcVuutCfAWHSr P2fqkwVyqEjS0d5XNOwRXtdNeJocxqxkhKnHLnJ2ch+300qgLLfMT5aJ1+eOr8Yd OhuwWvji2oXsYmzlK4VgYq8q -----END CERTIFICATE-----Generated at Fri Apr 17 07:56:48 2026 by rpki-client