$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: nPTgThFWRc5/blD5FtLJNwQ3X7cCNeS97L2kT7ytokg= Subject key identifier: 1F:66:70:9B:39:1C:F6:08:57:A2:B0:0E:82:09:31:EC:EE:28:8D:61 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0219 Signing time: Fri 17 Apr 2026 02:41:35 +0000 Manifest this update: Fri 17 Apr 2026 02:41:34 +0000 Manifest next update: Fri 24 Apr 2026 02:41:34 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: uCs+fS7eaqEn4ei8bdJSLa3XthtII65cuukhRxR41Jw=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: RchEf2Cdrpo8Ue1euZo8Nm9UxeCjXvC7k8HhyvYv/zY=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 17 02:41:34 2026 GMT Not After : Apr 24 02:41:34 2026 GMT Subject: CN=69e19ddf-04e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:0a:8f:46:62:44:77:13:7d:a8:72:f5:36: 4b:a4:ce:02:36:bf:69:76:24:4d:ab:2f:8b:ec:ab: 40:b6:b9:c8:8b:1f:ca:79:fc:64:41:b6:01:f3:d4: 2d:3c:3e:eb:40:82:8f:87:a8:7e:e1:b7:48:a1:0e: 7d:75:11:2e:c7:3c:19:e0:19:d1:9c:8c:0d:70:c8: c0:d5:1b:57:74:9a:86:9e:e0:3e:7d:05:e0:9a:07: 6f:02:14:fc:fa:a4:49:e7:7d:d2:51:55:aa:e7:49: fb:2a:9b:d5:db:e6:5b:69:9d:e2:4c:f2:1f:f8:f2: 81:99:aa:20:60:14:d2:8f:40:62:d4:61:55:9c:fa: 05:f7:54:1c:9c:76:90:a8:42:cb:0a:d6:36:23:8e: 6b:ba:3a:a1:53:c6:29:c6:57:e5:54:4b:3c:e3:f0: 37:9b:06:5a:14:e8:cf:02:2a:77:6f:67:cb:5b:a3: 97:96:90:ee:b6:23:fb:b6:32:b0:c1:03:d3:a2:26: ca:51:74:72:2d:66:40:72:56:58:19:0a:f0:e7:03: 7e:e9:f0:c4:93:46:57:f8:5b:6a:ac:23:fd:fb:5b: ea:53:04:2e:9b:01:75:32:25:77:04:c1:f2:ce:5e: aa:19:14:5d:33:5b:15:2b:78:66:33:2a:f0:c1:df: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:70:9B:39:1C:F6:08:57:A2:B0:0E:82:09:31:EC:EE:28:8D:61 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:38:31:4b:a4:8a:9e:ee:d2:cc:fb:5a:98:d9:fa:39:cc: d0:00:d7:52:25:89:8b:f1:c5:48:fb:d9:a1:bc:66:3b:fd:15: 3a:15:8a:cf:c2:11:ea:70:dd:1f:1f:58:e0:0e:d3:1d:a0:e4: be:9d:d1:1d:f0:6b:f5:d0:07:ee:49:94:57:2c:ae:80:2a:77: 75:dc:f0:37:82:62:bb:75:78:1d:40:12:be:b6:31:e9:d7:5f: 40:51:84:66:ee:ae:43:41:7b:08:99:ff:6b:66:f9:c3:be:1d: f1:c3:81:a0:e8:c7:e3:0e:6b:d0:68:04:86:61:03:3f:ca:fb: af:19:00:76:e2:40:3d:85:cf:d4:75:32:78:53:39:42:59:91: 00:6f:76:46:ee:7d:da:24:e4:c8:1e:92:00:8e:a2:3e:2e:36: ec:d0:0d:30:74:6f:1a:ce:3c:2b:0b:30:0d:4b:cf:49:b3:5c: 34:b4:88:1a:3f:f6:79:b2:c2:e6:4c:f6:b2:24:1e:bc:15:64: 94:a5:00:bd:70:b2:33:35:10:b4:f9:31:c9:5b:53:b9:c1:8d: cf:a4:76:a6:9f:34:4a:2d:83:23:38:b3:ef:24:93:54:cb:06: e4:fe:69:09:cc:3f:ac:02:85:2e:00:ad:19:74:d9:d5:f2:56: ae:c8:95:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNDE3MDI0MTM0WhcNMjYwNDI0MDI0MTM0WjAYMRYwFAYD VQQDEw02OWUxOWRkZi0wNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYkKj0ZiRHcTfahy9TZLpM4CNr9pdiRNqy+L7KtAtrnIix/KefxkQbYB89Qt PD7rQIKPh6h+4bdIoQ59dREuxzwZ4BnRnIwNcMjA1RtXdJqGnuA+fQXgmgdvAhT8 +qRJ533SUVWq50n7KpvV2+ZbaZ3iTPIf+PKBmaogYBTSj0Bi1GFVnPoF91QcnHaQ qELLCtY2I45rujqhU8YpxlflVEs84/A3mwZaFOjPAip3b2fLW6OXlpDutiP7tjKw wQPToibKUXRyLWZAclZYGQrw5wN+6fDEk0ZX+FtqrCP9+1vqUwQumwF1MiV3BMHy zl6qGRRdM1sVK3hmMyrwwd80kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9mcJs5 HPYIV6KwDoIJMezuKI1hMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm/04MUukip7u0sz7WpjZ+jnM0ADXUiWJi/HFSPvZobxmO/0VOhWKz8IR6nDd Hx9Y4A7THaDkvp3RHfBr9dAH7kmUVyyugCp3ddzwN4Jiu3V4HUASvrYx6ddfQFGE Zu6uQ0F7CJn/a2b5w74d8cOBoOjH4w5r0GgEhmEDP8r7rxkAduJAPYXP1HUyeFM5 QlmRAG92Ru592iTkyB6SAI6iPi427NANMHRvGs48KwswDUvPSbNcNLSIGj/2ebLC 5kz2siQevBVklKUAvXCyMzUQtPkxyVtTucGNz6R2pp80Si2DIziz7ySTVMsG5P5p Ccw/rAKFLgCtGXTZ1fJWrsiV9w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:32:06 2026 by rpki-client