$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: sWUfoY0BMjLletTQVM1lppnGEgpoSp/4tzyvsPKoE9c= Subject key identifier: 6F:35:AB:B8:8E:28:07:CB:FC:D7:8D:28:7D:03:B9:66:30:EC:A4:4D Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0C3C Signing time: Thu 16 Apr 2026 18:58:48 +0000 Manifest this update: Thu 16 Apr 2026 18:58:47 +0000 Manifest next update: Thu 23 Apr 2026 18:58:47 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: yCE+LDWF4CeCCsJgSZVYXt3M/Jp2/73+iYsVspqLCEk=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Apr 16 18:58:47 2026 GMT Not After : Apr 23 18:58:47 2026 GMT Subject: CN=69e13168-7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:1a:af:88:56:ad:2b:3a:0d:11:67:ba:f3: c2:41:f9:0e:a8:28:cd:9e:f0:80:08:15:d3:19:9f: da:79:32:a6:c9:01:8a:4a:22:86:81:20:aa:2a:06: ea:a0:3c:d6:51:24:16:bf:33:a8:33:c3:5c:c7:ff: 79:5a:d4:8a:63:b4:0c:f9:3b:af:04:e7:78:82:7e: 68:92:e5:48:dd:7e:2a:75:ca:1f:c9:c1:8c:9e:23: 17:09:d3:ce:52:96:d4:18:2d:49:66:7d:51:bd:ff: 3e:0d:80:ab:04:81:b7:12:d9:88:66:23:e9:8c:69: 2c:84:ae:d5:0a:50:41:eb:84:d2:78:e0:2d:ba:c9: 12:54:82:7e:f2:40:66:39:59:c6:af:0c:24:a3:88: 36:c9:db:55:87:4f:e2:49:78:da:cd:3c:96:c6:0b: 29:07:2b:1b:ab:b5:6d:4a:60:cb:63:ad:1e:49:a1: c0:60:f3:50:a5:64:09:ee:b0:e9:50:d8:f4:25:86: e2:76:b0:c9:08:c5:81:98:c2:af:9f:e3:63:bf:51: 56:58:0a:01:fb:72:55:d5:26:13:15:fe:90:0b:18: 31:3c:92:08:a2:05:3a:ba:07:0e:4d:18:e4:f4:da: 6f:39:c8:86:43:59:30:c3:65:a6:50:4f:31:df:8c: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:35:AB:B8:8E:28:07:CB:FC:D7:8D:28:7D:03:B9:66:30:EC:A4:4D X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:38:ee:17:cc:18:79:70:df:3c:ac:b4:ce:b9:34:42:07:95: 21:ff:0f:ab:64:e2:65:28:cb:4f:8f:da:52:e9:06:0f:6a:c5: 34:31:c8:b3:6c:a6:53:08:8b:aa:fa:1d:2f:9c:51:be:71:1b: 9f:88:af:dd:37:f1:3a:02:0d:2b:ca:bf:57:8d:de:66:9d:53: 87:e4:95:84:f2:a9:33:88:89:5e:2f:72:f7:82:23:2d:6d:f2: 2d:72:16:ad:a8:b5:28:cf:68:2d:7c:0e:61:e2:fd:32:69:cf: c4:68:ca:7a:4c:98:c7:74:51:d3:1e:f9:f1:47:b8:5d:7c:06: 42:d0:af:58:ec:7c:3c:5d:4e:57:ef:d1:4c:8b:1b:92:2d:91: 21:c2:5f:5a:3a:dc:cf:8d:54:50:2c:0e:05:88:6e:65:6e:e6: 9e:d5:ef:a2:fe:e2:86:58:8e:34:72:f4:ce:21:62:e6:bf:9d: 60:ba:93:e5:c7:13:44:a1:e0:62:0a:45:d1:21:67:0c:d0:31: 57:3d:50:fc:8f:89:33:3e:d2:8c:d0:c7:87:40:35:a7:52:72: a7:e3:48:80:a3:5f:75:b5:96:33:8e:06:83:d1:46:ed:6f:f0: 27:35:e5:91:2b:0c:87:f6:72:fe:cc:d7:62:c4:d6:95:7f:fa: dd:82:56:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDg0NEJENkQxQTk3MkNGRDJCNjBCODRERTBDQjYzRTVE NTRBRkE4Q0YwHhcNMjYwNDE2MTg1ODQ3WhcNMjYwNDIzMTg1ODQ3WjAYMRYwFAYD VQQDEw02OWUxMzE2OC03YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7Ear4hWrSs6DRFnuvPCQfkOqCjNnvCACBXTGZ/aeTKmyQGKSiKGgSCqKgbq oDzWUSQWvzOoM8Ncx/95WtSKY7QM+TuvBOd4gn5okuVI3X4qdcofycGMniMXCdPO UpbUGC1JZn1Rvf8+DYCrBIG3EtmIZiPpjGkshK7VClBB64TSeOAtuskSVIJ+8kBm OVnGrwwko4g2ydtVh0/iSXjazTyWxgspBysbq7VtSmDLY60eSaHAYPNQpWQJ7rDp UNj0JYbidrDJCMWBmMKvn+Njv1FWWAoB+3JV1SYTFf6QCxgxPJIIogU6ugcOTRjk 9NpvOciGQ1kww2WmUE8x34wWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG81q7iO KAfL/NeNKH0DuWYw7KRNMB8GA1UdIwQYMBaAFIRL1tGpcs/StguE3gy2Pl1Ur6jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5SzJDNFRlRExZLVhWU3Zx TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5 SzJDNFRlRExZLVhWU3ZxTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVjjuF8wYeXDfPKy0zrk0QgeVIf8Pq2TiZSjLT4/aUukGD2rFNDHIs2ymUwiL qvodL5xRvnEbn4iv3TfxOgINK8q/V43eZp1Th+SVhPKpM4iJXi9y94IjLW3yLXIW rai1KM9oLXwOYeL9MmnPxGjKekyYx3RR0x758Ue4XXwGQtCvWOx8PF1OV+/RTIsb ki2RIcJfWjrcz41UUCwOBYhuZW7mntXvov7ihliONHL0ziFi5r+dYLqT5ccTRKHg YgpF0SFnDNAxVz1Q/I+JMz7SjNDHh0A1p1Jyp+NIgKNfdbWWM44Gg9FG7W/wJzXl kSsMh/Zy/szXYsTWlX/63YJW2g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:35 2026 by rpki-client