$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: IkzjQi7jOW/cNovKTOie2b9+YPjP1DIlfrzlbb1dVNo= Subject key identifier: 69:57:22:5B:1C:6D:86:54:37:9D:44:72:4B:B1:3D:B5:1E:12:73:E4 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 0403 Signing time: Fri 17 Apr 2026 00:22:18 +0000 Manifest this update: Fri 17 Apr 2026 00:22:17 +0000 Manifest next update: Fri 24 Apr 2026 00:22:17 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: O8m6PKNbDzr/jVO+iZh3U/eRg27LnHv3ABwvBm3r89s=) 2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: cinLm54N0lY1X5NKGIDUKpOhjjif9NOE96ZxaxPjlHQ=) 3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: /cLK5jexlN6DgUe+xON5ereg8xX5VFWJjQmFvIgHP9A=) 4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: v2CM5f+5i6jbSqappCikApO33EDWeQOMWIWMt9/A9D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Apr 17 00:22:17 2026 GMT Not After : Apr 24 00:22:17 2026 GMT Subject: CN=69e17d3a-bc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:5e:4f:69:05:71:f2:97:a3:5e:f1:59:76: 97:b2:9d:67:c7:2e:04:a6:cc:3d:e1:41:1f:db:50: 11:b4:44:e4:23:94:18:8c:13:2a:33:70:31:79:c7: 06:b0:34:80:c4:35:d5:ad:5f:13:77:c8:bc:0d:53: 9c:94:b8:56:75:61:d2:95:6c:7c:36:ce:2c:32:ef: 43:02:64:94:73:ee:8b:fc:51:e1:fd:b0:6e:4c:31: 51:fe:cb:05:e6:7f:9f:49:e4:da:09:c1:b0:b6:92: b5:49:17:35:10:8f:4b:01:12:25:5f:41:3b:70:b9: 74:9e:f5:d3:c2:d6:f7:15:d5:bc:a0:64:4f:97:92: f7:bf:8d:80:40:35:cb:57:10:04:a9:7f:74:9e:2d: 2e:7f:24:1e:77:6e:e7:7b:a4:c6:3c:ac:2a:1b:22: 7e:68:5f:d4:72:2a:1a:bb:e4:9c:22:a4:24:d0:12: b0:e9:37:8e:90:07:4e:ef:e6:23:32:8c:76:0f:18: a3:c9:aa:e5:b0:39:bc:3b:42:2f:dc:1c:04:d2:7a: 59:f1:80:fe:7f:f9:c2:f9:ec:51:d0:9f:2b:08:50: f6:56:e8:7f:a9:7e:17:69:a0:01:c5:56:2c:c6:f8: 50:e5:2a:4b:e3:10:45:97:70:fa:c5:28:78:c5:ef: 9b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:22:5B:1C:6D:86:54:37:9D:44:72:4B:B1:3D:B5:1E:12:73:E4 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9d:51:25:83:67:55:71:d4:55:27:dd:1d:10:fc:b7:62:f6: 90:a0:5f:6c:2d:ed:b3:3a:5c:5d:1d:b4:ef:2e:1a:47:38:e5: d3:74:05:04:9e:c6:ef:1d:7f:10:52:4d:b1:2b:e5:1d:c3:2b: fd:ba:90:bd:ff:ef:94:3b:3f:ff:49:96:69:9d:7e:01:d9:0e: 8d:e1:59:44:8d:ba:82:f8:8d:20:c1:31:bb:5e:45:08:89:a7: 77:d4:d6:5d:9e:c3:02:2f:cc:ee:71:e1:3a:ec:9e:52:83:b3: 86:1b:85:e9:23:2f:51:46:77:0b:04:a4:06:ac:fb:31:ef:61: e9:15:64:67:40:92:3e:56:6d:ca:24:b7:7f:d1:04:41:1f:17: 6f:d7:17:f1:e7:1c:dc:4c:37:5d:1d:73:43:74:41:a8:30:cc: 05:2a:18:90:d0:7d:56:6e:e9:0a:04:e2:6c:8f:d0:a2:fd:d2: a4:3f:16:62:c1:95:c4:20:c8:6b:67:59:dc:56:02:11:91:14: 05:4c:f5:55:c6:3c:0a:18:da:ff:30:15:ee:52:56:8b:88:f0: ac:5d:12:2b:40:28:76:21:9a:5b:ae:03:ad:cf:95:84:4f:68: 4d:ef:75:f2:d1:f2:1d:e2:d8:c0:da:f8:6d:fa:1e:75:90:53: 66:fa:1f:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwNDE3MDAyMjE3WhcNMjYwNDI0MDAyMjE3WjAYMRYwFAYD VQQDEw02OWUxN2QzYS1iYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr9eT2kFcfKXo17xWXaXsp1nxy4Epsw94UEf21ARtETkI5QYjBMqM3AxeccG sDSAxDXVrV8Td8i8DVOclLhWdWHSlWx8Ns4sMu9DAmSUc+6L/FHh/bBuTDFR/ssF 5n+fSeTaCcGwtpK1SRc1EI9LARIlX0E7cLl0nvXTwtb3FdW8oGRPl5L3v42AQDXL VxAEqX90ni0ufyQed27ne6TGPKwqGyJ+aF/Ucioau+ScIqQk0BKw6TeOkAdO7+Yj Mox2DxijyarlsDm8O0Iv3BwE0npZ8YD+f/nC+exR0J8rCFD2Vuh/qX4XaaABxVYs xvhQ5SpL4xBFl3D6xSh4xe+b0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlXIlsc bYZUN51EckuxPbUeEnPkMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJ1RJYNnVXHUVSfdHRD8t2L2kKBfbC3tszpcXR207y4aRzjl03QFBJ7G7x1/ EFJNsSvlHcMr/bqQvf/vlDs//0mWaZ1+AdkOjeFZRI26gviNIMExu15FCImnd9TW XZ7DAi/M7nHhOuyeUoOzhhuF6SMvUUZ3CwSkBqz7Me9h6RVkZ0CSPlZtyiS3f9EE QR8Xb9cX8ecc3Ew3XR1zQ3RBqDDMBSoYkNB9Vm7pCgTibI/Qov3SpD8WYsGVxCDI a2dZ3FYCEZEUBUz1VcY8Chja/zAV7lJWi4jwrF0SK0AodiGaW64Drc+VhE9oTe91 8tHyHeLYwNr4bfoedZBTZvofmQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:12 2026 by rpki-client