$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json) Hash identifier: qGDQOkId2x1fPKfXHjtf7NlJnstjw4D5kTefPJ4qqLA= Subject key identifier: 66:97:C8:89:8D:39:41:D8:66:FE:80:9C:6F:14:22:08:06:AD:FB:B8 Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft Manifest number: 01D5 Signing time: Fri 17 Apr 2026 03:44:06 +0000 Manifest this update: Fri 17 Apr 2026 03:44:05 +0000 Manifest next update: Fri 24 Apr 2026 03:44:05 +0000 Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: BQE/GSrs2CIAQwbwY6AxudgIgs3lIlyzLsJ/y/2z9wA=) 2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: MLgAaYwXB1GgAbwc1lk9vp3Ul9zku5iS1CDVPTfotbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: Apr 17 03:44:05 2026 GMT Not After : Apr 24 03:44:05 2026 GMT Subject: CN=69e1ac86-280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:3a:05:97:b1:1d:0a:34:72:00:d3:c0:5e: 99:be:a8:8b:28:15:e1:42:70:f1:1e:00:c8:c1:41: f0:80:b4:49:55:78:56:0e:4c:48:df:9f:b7:61:d4: a3:72:6d:6e:22:65:13:42:f3:f0:38:3d:ea:da:47: c0:e6:11:95:9c:06:49:f1:ad:27:55:a5:81:b4:0c: 34:e7:f2:b5:a2:eb:cc:cb:c1:47:98:41:7b:9b:11: 85:93:1d:e8:a1:71:4b:4b:31:73:e2:ff:24:50:5b: 0a:be:88:18:ef:15:81:44:d8:73:e0:ae:82:f2:5d: 21:cd:c0:af:2d:36:1b:b6:3f:0e:b1:1e:9a:74:91: da:14:7e:84:b2:83:67:51:d3:24:90:14:9e:a2:a0: 75:20:b7:ba:ae:29:1a:02:f0:24:04:79:3b:06:49: fb:fb:db:e4:99:28:b8:22:05:d7:82:68:40:66:7b: 77:b4:1e:e7:70:b4:12:8e:9c:4e:26:e0:00:b6:2d: 83:72:0e:94:92:f0:58:9f:15:ec:a7:c8:3a:db:93: 85:f5:ce:05:b0:8d:ec:54:81:69:fb:84:2e:d7:c8: b1:9e:ba:6b:6e:75:b3:dd:60:80:ae:66:43:cc:c4: bf:99:6b:5d:b8:c2:05:0c:50:52:40:41:a8:97:53: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:C8:89:8D:39:41:D8:66:FE:80:9C:6F:14:22:08:06:AD:FB:B8 X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:29:1a:88:4d:de:f1:fb:70:2a:f6:75:15:cf:c5:1a:1f:a8: a1:2e:91:23:55:1e:34:9f:ab:0a:fc:82:a1:cb:7b:ca:29:4a: 4d:ca:d6:27:40:bf:cd:d2:be:77:99:c0:94:5f:56:93:cc:70: 9e:21:2a:7e:a6:c4:38:ee:b5:c9:d4:5e:51:13:9e:cd:c7:43: 79:e3:e5:a9:5b:9f:02:f3:b1:ea:f6:ce:c9:71:b7:69:16:6f: 2b:fd:f1:08:4b:62:c8:f6:73:6c:bc:9f:de:2c:de:68:80:77: 12:05:1b:7d:16:7e:a5:25:3d:b8:5d:94:44:95:17:f0:9f:74: 97:ac:7a:1f:8e:d7:2c:f7:d7:4f:8b:d9:6b:3d:e6:6b:46:0c: a8:7e:c0:b0:f5:83:8a:9f:af:e5:d4:a2:a4:30:7f:97:eb:95: c9:cd:c9:9b:00:d9:a6:47:d8:ba:6d:f9:ba:fc:e6:a2:10:60: 64:3e:15:2e:89:a1:8c:ed:a9:99:98:83:7f:6a:08:6b:58:f4: 19:8f:2c:f0:8a:22:3f:d3:19:22:a7:35:70:81:e1:2f:2d:9b: 45:7c:00:d9:6c:10:b2:0d:ac:54:6f:65:60:b1:8d:96:18:c3: 11:34:db:5c:a3:6e:f6:00:72:81:3b:29:5e:e7:96:e6:63:05: 29:14:ac:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjYwNDE3MDM0NDA1WhcNMjYwNDI0MDM0NDA1WjAYMRYwFAYD VQQDEw02OWUxYWM4Ni0yODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jk6BZexHQo0cgDTwF6ZvqiLKBXhQnDxHgDIwUHwgLRJVXhWDkxI35+3YdSj cm1uImUTQvPwOD3q2kfA5hGVnAZJ8a0nVaWBtAw05/K1ouvMy8FHmEF7mxGFkx3o oXFLSzFz4v8kUFsKvogY7xWBRNhz4K6C8l0hzcCvLTYbtj8OsR6adJHaFH6EsoNn UdMkkBSeoqB1ILe6rikaAvAkBHk7Bkn7+9vkmSi4IgXXgmhAZnt3tB7ncLQSjpxO JuAAti2Dcg6UkvBYnxXsp8g625OF9c4FsI3sVIFp+4Qu18ixnrprbnWz3WCArmZD zMS/mWtduMIFDFBSQEGol1OnSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaXyImN OUHYZv6AnG8UIggGrfu4MB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOCkaiE3e8ftwKvZ1Fc/FGh+ooS6RI1UeNJ+rCvyCoct7yilKTcrWJ0C/zdK+ d5nAlF9Wk8xwniEqfqbEOO61ydReUROezcdDeePlqVufAvOx6vbOyXG3aRZvK/3x CEtiyPZzbLyf3izeaIB3EgUbfRZ+pSU9uF2URJUX8J90l6x6H47XLPfXT4vZaz3m a0YMqH7AsPWDip+v5dSipDB/l+uVyc3JmwDZpkfYum35uvzmohBgZD4VLomhjO2p mZiDf2oIa1j0GY8s8IoiP9MZIqc1cIHhLy2bRXwA2WwQsg2sVG9lYLGNlhjDETTb XKNu9gBygTspXueW5mMFKRSs5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:49:37 2026 by rpki-client