$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: C+Z5OCcTpeEgVbq4pS8+eHBs1qSW0YdHxOOQWAnorLY= Subject key identifier: D0:5D:7B:E6:A2:A2:32:18:FB:66:1E:C6:15:E3:FD:30:8B:AB:B4:BC Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: 0141 Signing time: Fri 17 Apr 2026 05:01:42 +0000 Manifest this update: Fri 17 Apr 2026 05:01:42 +0000 Manifest next update: Fri 24 Apr 2026 05:01:42 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 4jr6RV1p608XyI0nwls8E4OYo/Bg525R7h97PdxBXmw=) 2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: Ilnu4Ombw62v68xUTdb4wZObUEp/ahOobR/hUSsGRRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Apr 17 05:01:42 2026 GMT Not After : Apr 24 05:01:42 2026 GMT Subject: CN=69e1beb6-c903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:92:10:ba:fa:93:56:f4:d4:d6:3c:d1:9b: 7f:1e:70:49:09:15:2e:11:4c:3d:05:72:fb:22:8b: 74:72:9f:9d:a2:1d:c7:7e:97:dd:d7:9c:19:98:9f: b6:24:26:67:32:26:59:68:79:c5:37:9f:87:81:ff: c6:0d:b5:f7:fd:e4:e8:64:65:90:34:ac:68:92:9f: 40:a0:bb:95:31:79:7b:40:68:0f:73:a4:86:25:f6: 13:23:01:1c:1f:a7:26:f0:8b:a3:9f:bf:98:44:ac: d3:e3:7a:9e:ff:34:46:39:47:3f:bc:ab:cd:55:6b: a2:fe:75:4e:de:77:47:3e:56:a4:82:d7:52:03:c8: da:05:d4:ae:6b:d4:39:6d:de:0c:17:19:6c:3e:a0: a7:f6:93:9e:b7:03:5f:d5:39:bb:87:5d:ca:4b:2c: fe:4e:b9:9d:6c:2b:3d:c6:f3:72:ff:63:3a:5d:c9: 39:62:33:29:f7:b5:b6:a3:f9:5b:21:65:c1:b1:89: ce:33:4f:6c:eb:59:fc:d4:fc:55:28:ed:05:73:3e: c0:85:49:10:11:6d:bb:03:c0:44:ba:2e:d6:2c:26: 9c:68:55:f3:6c:0e:21:87:c0:c8:a4:45:00:4b:fb: 02:00:09:70:42:96:c8:e8:21:34:61:28:ba:16:92: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5D:7B:E6:A2:A2:32:18:FB:66:1E:C6:15:E3:FD:30:8B:AB:B4:BC X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bb:77:6d:8b:76:62:7c:fd:69:f8:a9:9f:f9:1a:1c:7b:2e: 7b:d2:7f:c6:8b:36:43:ac:11:1f:28:a5:af:fa:90:97:cd:2d: 72:4e:43:ad:1f:a7:9c:9a:85:dd:a6:ef:4f:b3:2e:17:8e:0b: e0:98:bf:d2:52:ad:f6:30:ff:69:af:93:96:c5:47:1c:9f:3f: 65:cc:c8:7a:3e:18:77:d7:e0:1f:08:89:4a:3a:a0:c5:f1:1b: 33:01:86:9a:11:3b:29:07:92:ef:f5:5d:69:4e:6a:8f:e8:9f: d1:df:c6:c9:0f:4b:14:e9:38:f9:d3:4b:d7:a7:04:42:3b:f8: eb:3e:d7:2d:e7:94:79:bc:90:a7:1b:63:f3:b8:7d:f7:d8:d2: 72:a3:2c:3d:a2:fc:24:d6:9a:4b:24:84:fc:d8:22:5a:a1:0c: 5e:4b:ec:be:6f:3f:6f:a0:c0:88:3c:16:c6:98:59:93:2b:af: ff:02:f8:9e:a5:8c:02:d6:21:01:5a:af:fe:22:33:c9:85:6b: ec:83:41:dc:d0:04:2a:c8:d3:4c:40:cb:01:ee:15:e8:a6:8c: f5:33:ad:70:72:d3:e0:18:38:34:b5:9d:1f:bc:2d:8a:c9:9f: 94:bb:47:c8:62:ee:b7:b2:44:8c:c5:17:39:40:2a:d6:06:db: a9:1a:f5:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjYwNDE3MDUwMTQyWhcNMjYwNDI0MDUwMTQyWjAYMRYwFAYD VQQDEw02OWUxYmViNi1jOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi2SELr6k1b01NY80Zt/HnBJCRUuEUw9BXL7Iot0cp+doh3Hfpfd15wZmJ+2 JCZnMiZZaHnFN5+Hgf/GDbX3/eToZGWQNKxokp9AoLuVMXl7QGgPc6SGJfYTIwEc H6cm8Iujn7+YRKzT43qe/zRGOUc/vKvNVWui/nVO3ndHPlakgtdSA8jaBdSua9Q5 bd4MFxlsPqCn9pOetwNf1Tm7h13KSyz+TrmdbCs9xvNy/2M6Xck5YjMp97W2o/lb IWXBsYnOM09s61n81PxVKO0Fcz7AhUkQEW27A8BEui7WLCacaFXzbA4hh8DIpEUA S/sCAAlwQpbI6CE0YSi6FpJx5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBde+ai ojIY+2YexhXj/TCLq7S8MB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrt3bYt2Ynz9afipn/kaHHsue9J/xos2Q6wRHyilr/qQl80tck5DrR+nnJqF 3abvT7MuF44L4Ji/0lKt9jD/aa+TlsVHHJ8/ZczIej4Yd9fgHwiJSjqgxfEbMwGG mhE7KQeS7/VdaU5qj+if0d/GyQ9LFOk4+dNL16cEQjv46z7XLeeUebyQpxtj87h9 99jScqMsPaL8JNaaSySE/NgiWqEMXkvsvm8/b6DAiDwWxphZkyuv/wL4nqWMAtYh AVqv/iIzyYVr7INB3NAEKsjTTEDLAe4V6KaM9TOtcHLT4Bg4NLWdH7wtismflLtH yGLut7JEjMUXOUAq1gbbqRr1wA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:42:25 2026 by rpki-client