$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: JwcHg8Awpgxjpk3Vxx4eLUKuLiBq9vkgCQXy6SkCdVo= Subject key identifier: 19:FC:15:17:E6:B1:BE:50:D8:9E:8D:56:F0:3F:35:ED:68:F6:0A:42 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 0228 Signing time: Fri 17 Apr 2026 02:30:45 +0000 Manifest this update: Fri 17 Apr 2026 02:30:45 +0000 Manifest next update: Fri 24 Apr 2026 02:30:45 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: dHa2PFHQdsGUhsTAJJykPYHveoC+U9eAg7Fb9/utaDA=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: gwP3PNE674NeJVzpcX/6dV+VmggMeTrL/+BFEHoqdPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Apr 17 02:30:45 2026 GMT Not After : Apr 24 02:30:45 2026 GMT Subject: CN=69e19b55-c7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:63:fc:eb:0a:9a:87:23:45:87:06:f5:2d: 07:8a:c9:ac:db:4c:41:9d:0a:cb:94:86:87:90:97: 47:67:4b:f9:a8:a4:47:9f:09:5f:d2:c4:78:10:70: 78:01:4e:59:15:b9:b9:61:66:ce:d4:28:0e:63:a1: 9b:c0:48:48:a6:5d:3d:f0:8b:40:23:58:c4:60:04: 09:f2:4d:31:bc:ef:f7:69:3d:45:78:3b:58:1d:c4: 26:49:73:ce:86:5a:f7:a8:60:e5:8d:42:e0:98:f2: 77:ee:7c:56:d7:6a:2c:a5:47:cf:17:ed:37:c2:f9: 0d:c8:23:55:e8:5a:b7:d6:8c:71:a1:15:4e:13:07: 22:0f:cc:ab:02:bb:55:c2:23:db:40:d5:17:1b:df: b4:d9:67:51:5b:a3:a2:93:c7:af:5d:4a:e3:52:49: 7b:b4:05:46:20:d9:b8:da:c8:9f:4e:3b:9f:e4:2c: 97:ee:4b:c1:bf:af:16:11:f1:16:ec:49:9a:fa:45: 5b:bf:8f:90:65:52:33:93:aa:c0:36:df:bd:1c:71: 66:b3:28:8b:3f:67:1b:d8:0e:9e:19:16:a8:28:08: 32:f0:04:65:b6:86:66:bc:37:fb:e6:d0:a1:72:ca: ad:93:1f:ad:1c:a2:91:5c:bb:82:3a:d9:36:1a:a4: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FC:15:17:E6:B1:BE:50:D8:9E:8D:56:F0:3F:35:ED:68:F6:0A:42 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2f:0f:9d:58:a9:c8:ca:af:09:5f:7f:7c:8f:a7:3f:7f:ec: b3:e0:71:74:4e:92:bd:6c:13:3f:16:cd:0b:f5:25:ba:11:47: 01:a7:a5:cb:76:f8:0a:05:ba:27:39:bb:55:a6:ec:30:eb:a3: 9b:14:d4:ac:d1:cf:c2:ee:fa:4b:eb:9d:e3:ab:37:f7:6f:ec: e3:5b:2f:73:29:19:4a:a5:0d:cc:00:ee:14:bd:26:a7:1e:dd: 24:87:ac:f7:09:70:76:45:2d:11:dc:2a:4d:e0:24:74:76:65: 3c:da:d4:b4:4d:14:77:74:71:92:c0:97:51:81:66:f7:f6:0c: ac:4f:4b:a7:d3:09:f3:a3:06:e4:00:62:e6:8e:0e:0a:ee:aa: ed:25:a5:9c:9a:21:c3:3b:1b:d1:97:0a:40:4a:79:02:bb:15: ec:70:71:4a:fa:67:c3:ef:3a:04:d1:ae:e9:8a:ba:12:73:e8: 51:27:29:11:ad:28:f2:53:d2:53:65:67:31:91:8c:ac:ea:d3: 4b:11:b3:c8:04:a8:d5:4d:3d:15:6c:85:9c:5c:bf:f3:29:bc: 29:2f:09:46:72:f9:eb:ef:f2:65:19:d8:45:73:db:58:02:4a: 58:76:e8:17:69:22:c1:a1:08:be:7c:bf:c8:ae:6e:af:2e:aa: b6:78:72:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwNDE3MDIzMDQ1WhcNMjYwNDI0MDIzMDQ1WjAYMRYwFAYD VQQDEw02OWUxOWI1NS1jN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15Bj/OsKmocjRYcG9S0Hisms20xBnQrLlIaHkJdHZ0v5qKRHnwlf0sR4EHB4 AU5ZFbm5YWbO1CgOY6GbwEhIpl098ItAI1jEYAQJ8k0xvO/3aT1FeDtYHcQmSXPO hlr3qGDljULgmPJ37nxW12ospUfPF+03wvkNyCNV6Fq31oxxoRVOEwciD8yrArtV wiPbQNUXG9+02WdRW6Oik8evXUrjUkl7tAVGINm42sifTjuf5CyX7kvBv68WEfEW 7Ema+kVbv4+QZVIzk6rANt+9HHFmsyiLP2cb2A6eGRaoKAgy8ARltoZmvDf75tCh csqtkx+tHKKRXLuCOtk2GqRM4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBn8FRfm sb5Q2J6NVvA/Ne1o9gpCMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAey8PnVipyMqvCV9/fI+nP3/ss+BxdE6SvWwTPxbNC/UluhFHAaely3b4CgW6 Jzm7VabsMOujmxTUrNHPwu76S+ud46s392/s41svcykZSqUNzADuFL0mpx7dJIes 9wlwdkUtEdwqTeAkdHZlPNrUtE0Ud3RxksCXUYFm9/YMrE9Lp9MJ86MG5ABi5o4O Cu6q7SWlnJohwzsb0ZcKQEp5ArsV7HBxSvpnw+86BNGu6Yq6EnPoUScpEa0o8lPS U2VnMZGMrOrTSxGzyASo1U09FWyFnFy/8ym8KS8JRnL56+/yZRnYRXPbWAJKWHbo F2kiwaEIvny/yK5ury6qtnhypw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:03 2026 by rpki-client