$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: PgihDxi7M6waYL3AAkW2xneM2T0kps6XmZojI7Cmo/0= Subject key identifier: BE:AC:6D:69:B7:DC:A5:78:AC:29:62:DF:5A:93:43:62:54:55:B9:43 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 17FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 17FF Signing time: Thu 16 Apr 2026 16:28:45 +0000 Manifest this update: Thu 16 Apr 2026 16:28:45 +0000 Manifest next update: Thu 23 Apr 2026 16:28:45 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: IvuCVDrXXWzIcl19rjiQpW1XPiSOm2w48gJaKso2xII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6143 (0x17ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Apr 16 16:28:45 2026 GMT Not After : Apr 23 16:28:45 2026 GMT Subject: CN=69e10e3d-58ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:98:33:49:bc:11:e4:0d:ff:e4:ca:2d:eb: ab:1c:ae:88:d3:2e:72:ff:b8:e3:3e:22:8d:bf:64: c0:40:41:4c:c6:68:9e:ee:bb:82:0d:93:4b:39:df: 1a:f6:45:e8:35:8a:ff:24:3f:12:f7:bf:de:4a:2a: 28:ef:cf:b8:ec:9c:d3:e7:1c:2e:12:69:79:ff:3b: dd:e9:9f:f4:42:80:ab:32:bc:16:c6:fb:c9:77:a8: 0a:9c:d1:bb:70:00:b1:b2:41:69:e3:9e:53:08:8e: 14:26:00:7f:7d:00:85:fd:07:5d:d5:ea:61:32:25: da:00:33:b0:42:2b:8c:3b:88:02:ad:55:37:de:0d: 66:9b:92:47:07:26:b4:36:e8:dc:26:88:22:77:22: 34:21:94:7d:16:f7:ee:48:dd:70:e1:47:99:69:5c: 41:8c:ad:5f:80:94:33:99:97:9e:d9:ba:9a:67:91: e5:16:8f:cf:14:de:45:2a:9f:da:f8:94:e9:42:ff: 42:ce:f2:84:6a:57:d5:81:b6:b5:f7:f5:53:4d:07: 59:5a:6c:bc:30:a8:b0:d2:22:14:5c:02:41:03:85: c6:43:a0:03:11:08:99:2f:f0:98:4a:01:b3:12:d5: ba:50:d5:0e:33:fb:aa:af:42:ae:b1:89:b9:2a:43: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:6D:69:B7:DC:A5:78:AC:29:62:DF:5A:93:43:62:54:55:B9:43 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7e:64:58:20:9f:6f:73:f1:1c:65:52:53:76:71:25:99:eb: 31:65:f8:b3:b2:00:9f:68:ed:02:fb:66:f4:db:5f:e0:bf:ab: 96:4e:ae:06:cf:4f:16:f0:b1:d0:2f:34:30:12:66:15:da:4b: b6:df:b2:a2:ee:3e:c0:2c:b1:cb:d7:19:88:1f:21:0d:76:60: bd:93:be:3e:c3:b9:39:6a:96:d6:62:6d:f5:05:be:bc:6c:f6: 4e:c0:8c:51:8c:7f:76:d0:e4:a4:5f:e4:1a:0e:83:2c:79:42: 88:49:42:7d:ce:17:f0:f0:9e:25:f7:0f:96:a7:26:19:12:c4: 17:07:94:d0:72:70:61:62:05:11:4e:5e:d3:31:ec:52:3d:08: e2:06:4a:ce:9c:8f:2b:83:32:d2:94:7f:9e:44:e1:00:fb:1f: d7:38:8d:c5:0a:c1:6a:d1:8c:9f:20:bd:4b:5a:83:31:fd:36: 93:8f:7d:be:fc:de:0f:9c:86:cb:a0:d6:55:78:69:c7:a4:b6: 23:b3:6d:24:67:a2:42:c4:c6:3d:5d:6d:17:c8:d9:07:19:89: 38:5b:48:73:e5:34:13:15:bd:b2:f9:a3:71:bf:c5:e9:99:b6: e5:1d:10:46:1b:10:13:89:e7:1a:7d:41:eb:a3:6c:d2:5c:a9: c1:72:4f:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjYwNDE2MTYyODQ1WhcNMjYwNDIzMTYyODQ1WjAYMRYwFAYD VQQDEw02OWUxMGUzZC01OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHaYM0m8EeQN/+TKLeurHK6I0y5y/7jjPiKNv2TAQEFMxmie7ruCDZNLOd8a 9kXoNYr/JD8S97/eSioo78+47JzT5xwuEml5/zvd6Z/0QoCrMrwWxvvJd6gKnNG7 cACxskFp455TCI4UJgB/fQCF/Qdd1ephMiXaADOwQiuMO4gCrVU33g1mm5JHBya0 NujcJogidyI0IZR9FvfuSN1w4UeZaVxBjK1fgJQzmZee2bqaZ5HlFo/PFN5FKp/a +JTpQv9CzvKEalfVgba19/VTTQdZWmy8MKiw0iIUXAJBA4XGQ6ADEQiZL/CYSgGz EtW6UNUOM/uqr0KusYm5KkOXuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6sbWm3 3KV4rCli31qTQ2JUVblDMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXn5kWCCfb3PxHGVSU3ZxJZnrMWX4s7IAn2jtAvtm9Ntf4L+rlk6uBs9PFvCx 0C80MBJmFdpLtt+you4+wCyxy9cZiB8hDXZgvZO+PsO5OWqW1mJt9QW+vGz2TsCM UYx/dtDkpF/kGg6DLHlCiElCfc4X8PCeJfcPlqcmGRLEFweU0HJwYWIFEU5e0zHs Uj0I4gZKzpyPK4My0pR/nkThAPsf1ziNxQrBatGMnyC9S1qDMf02k499vvzeD5yG y6DWVXhpx6S2I7NtJGeiQsTGPV1tF8jZBxmJOFtIc+U0ExW9svmjcb/F6Zm25R0Q RhsQE4nnGn1B66Ns0lypwXJPlw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:26 2026 by rpki-client