$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: FnDI+Q1HS3kwnbu9KVTWR0u0MGZueMdbkINNE1JXbmE= Subject key identifier: 00:5B:8A:D2:90:90:A1:0A:E8:B3:FF:D8:72:23:24:BB:09:D4:FB:E5 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 040A Signing time: Fri 17 Apr 2026 00:20:30 +0000 Manifest this update: Fri 17 Apr 2026 00:20:30 +0000 Manifest next update: Fri 24 Apr 2026 00:20:30 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: sQcdD0tDQR80v/lGbopn9SX6nIa9ePDV8iXHtML3QKM=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Apr 17 00:20:30 2026 GMT Not After : Apr 24 00:20:30 2026 GMT Subject: CN=69e17cce-bb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:b5:2e:84:ea:08:fe:30:0f:2b:07:3e:84: 2c:a9:78:bf:6d:90:30:d7:83:d4:ed:45:4c:fb:ff: 64:d3:f4:c5:eb:69:99:86:82:ef:96:bd:12:78:a2: 29:0a:a8:8e:9d:2b:89:54:b1:92:e5:00:a6:3d:7a: 40:0b:ea:9f:7d:ec:cb:dd:b3:48:14:e8:a6:79:d8: 23:bc:3d:94:27:90:01:18:f3:b9:07:17:2a:4d:00: 2e:73:77:08:35:ed:5c:ab:9f:2a:29:5f:ea:71:d5: 78:b5:92:1b:e8:7b:f9:f1:59:99:ad:fe:50:b7:6c: db:82:6d:27:30:a9:0b:9a:78:ff:bd:46:3a:b8:76: 5a:26:4b:68:d6:20:0d:99:54:c9:e2:75:63:f1:7e: 47:c6:72:46:b9:98:8c:bf:58:ce:bd:b2:0f:67:fe: bc:6d:c0:5f:46:76:f1:c0:54:94:85:b4:2e:ac:fb: eb:f1:82:ca:1e:b3:e2:12:22:8c:57:41:fc:8a:6b: ac:01:50:db:0e:f7:cd:6d:86:9f:2a:91:75:7a:13: c4:e8:1e:e0:5f:dc:a2:76:0e:c7:27:6f:fa:29:91: 90:2b:dc:f3:95:3a:f3:f1:7b:02:02:b4:51:33:e8: 8f:13:a5:84:49:14:90:78:a0:0e:f7:e8:f7:1f:25: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:8A:D2:90:90:A1:0A:E8:B3:FF:D8:72:23:24:BB:09:D4:FB:E5 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:cc:17:d4:24:cb:cd:06:b8:1d:b9:ae:7f:f1:99:88:28: 38:5b:76:f3:22:63:1c:c5:a8:13:77:da:71:51:42:5e:03:f5: c5:9c:c5:97:c2:40:0c:62:d4:9b:01:96:fc:42:77:27:fb:13: 3b:ea:49:16:02:71:95:9d:87:87:6a:77:3d:b2:c4:86:59:3b: 5a:48:30:29:90:81:a6:6a:c3:40:a9:3b:8d:d2:11:fa:b9:b0: ea:38:87:4a:03:bb:cc:09:4c:24:4d:70:21:ee:6b:4a:5e:99: c1:6d:c6:15:83:a5:a3:10:fc:f9:e0:4e:2e:8e:a5:ab:37:ba: 66:a0:72:b7:c6:44:cd:e4:38:f9:7b:37:9c:16:db:7f:0d:cd: 7d:3c:f7:c8:01:a9:8e:fb:65:f2:89:34:95:ad:ba:af:74:a2: cb:60:cb:fc:50:13:b1:a2:60:27:e1:80:e1:7f:7d:d1:06:72: f3:17:64:6d:8a:e5:9f:c2:b7:08:2b:95:56:45:b4:c7:3c:8e: 4b:df:27:a7:85:3a:42:17:a9:84:7b:27:a9:5d:67:b0:64:16: 6d:90:58:f4:48:cc:0f:0e:4d:a8:34:5e:df:f0:b9:e9:53:75: bd:dc:4a:47:e3:11:73:c0:1c:0a:f9:b0:af:2b:21:2a:a6:00: 26:c5:be:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwNDE3MDAyMDMwWhcNMjYwNDI0MDAyMDMwWjAYMRYwFAYD VQQDEw02OWUxN2NjZS1iYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5y1LoTqCP4wDysHPoQsqXi/bZAw14PU7UVM+/9k0/TF62mZhoLvlr0SeKIp CqiOnSuJVLGS5QCmPXpAC+qffezL3bNIFOimedgjvD2UJ5ABGPO5BxcqTQAuc3cI Ne1cq58qKV/qcdV4tZIb6Hv58VmZrf5Qt2zbgm0nMKkLmnj/vUY6uHZaJkto1iAN mVTJ4nVj8X5HxnJGuZiMv1jOvbIPZ/68bcBfRnbxwFSUhbQurPvr8YLKHrPiEiKM V0H8imusAVDbDvfNbYafKpF1ehPE6B7gX9yidg7HJ2/6KZGQK9zzlTrz8XsCArRR M+iPE6WESRSQeKAO9+j3HyV/UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABbitKQ kKEK6LP/2HIjJLsJ1PvlMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABtfMF9Qky80GuB25rn/xmYgoOFt28yJjHMWoE3facVFCXgP1xZzFl8JADGLU mwGW/EJ3J/sTO+pJFgJxlZ2Hh2p3PbLEhlk7WkgwKZCBpmrDQKk7jdIR+rmw6jiH SgO7zAlMJE1wIe5rSl6ZwW3GFYOloxD8+eBOLo6lqze6ZqByt8ZEzeQ4+Xs3nBbb fw3NfTz3yAGpjvtl8ok0la26r3Siy2DL/FATsaJgJ+GA4X990QZy8xdkbYrln8K3 CCuVVkW0xzyOS98np4U6QhephHsnqV1nsGQWbZBY9EjMDw5NqDRe3/C56VN1vdxK R+MRc8AcCvmwryshKqYAJsW+ug== -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:03 2026 by rpki-client