$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json) Hash identifier: 6l1Gz7XX/x3FnkKtPw64cQ7E8wAl1oQZMShkJE5Dgno= Subject key identifier: 06:02:D7:A9:34:68:B6:8B:30:D3:8C:BD:E7:03:BA:A0:1C:61:56:AD Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft Manifest number: 0E Signing time: Thu 16 Apr 2026 17:54:42 +0000 Manifest this update: Thu 16 Apr 2026 17:54:41 +0000 Manifest next update: Thu 23 Apr 2026 17:54:41 +0000 Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: vBtIr/25QNVU0B0LX0FW9KvJnC2f7ylzyjuEw20K0W8=) 2: DCF45DB827C111F19C6102CF9F833773.roa (hash: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Validity Not Before: Apr 16 17:54:41 2026 GMT Not After : Apr 23 17:54:41 2026 GMT Subject: CN=69e12262-f6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:9f:73:45:51:5b:91:2a:8b:aa:8b:c8:97: 13:e0:60:e8:8f:92:f1:0f:b2:09:1d:c3:21:a7:7e: 05:bf:d2:ad:a5:4a:cb:26:d3:17:07:ac:50:68:a8: 33:6d:00:f8:19:1c:c8:e9:61:07:54:48:7c:e1:52: 2a:00:d0:a6:7e:7b:36:bf:50:31:2e:6e:7c:2c:57: 87:1e:99:8e:f7:cc:32:05:54:c2:fe:19:48:e0:63: 76:f4:02:d5:15:88:2a:f4:88:3d:67:53:ff:cb:e8: ce:f4:b6:f6:78:db:16:4c:77:02:2b:46:e3:ea:51: e7:ae:46:b4:6c:b2:e6:3d:16:6a:31:65:f0:64:3a: 0b:8a:f1:b5:3e:a8:aa:b9:9b:1f:15:e0:df:30:6f: c2:3e:90:87:a0:b9:0e:07:b0:03:c5:17:63:03:b9: 5d:34:c9:eb:88:a7:ff:7b:f7:97:36:91:82:e2:8c: e8:00:d5:e4:d5:89:67:1e:e6:5d:93:42:90:bd:ee: d1:02:e8:55:79:df:73:6e:79:33:bc:82:85:23:7a: 18:c0:40:2c:46:67:fb:fe:76:b7:bf:eb:3b:0b:42: 50:c3:d0:ae:a4:03:50:4b:9d:d6:c2:95:b3:38:27: a6:eb:0a:52:e6:35:c5:fa:63:06:43:85:ac:0a:61: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:D7:A9:34:68:B6:8B:30:D3:8C:BD:E7:03:BA:A0:1C:61:56:AD X509v3 Authority Key Identifier: keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1e:8c:f7:56:a2:16:d4:b1:49:72:72:45:20:34:c4:d9:fa: 40:b2:a4:63:d7:35:d1:10:9c:30:25:00:9d:a0:d1:e3:07:c1: e9:9e:57:c9:c7:f3:0a:f2:36:f7:6b:60:b8:21:1e:39:f3:5f: c9:f6:42:f3:4c:45:08:e0:f5:91:97:28:d6:c7:01:c3:60:af: 70:6b:d7:84:98:f0:03:dc:03:cf:66:dc:07:80:ea:de:04:c8: 00:31:58:1a:31:87:6c:8a:a3:34:8b:de:62:9b:1d:36:d5:17: 14:0a:73:ad:15:90:f5:fd:30:f1:99:18:31:78:2e:a6:b8:4f: 0f:e1:04:32:3e:aa:dd:7b:82:bf:a8:d1:5c:02:04:65:c5:e4: a4:bc:1e:2d:de:15:03:b1:28:e3:57:63:5c:66:29:ec:8f:c5: cf:ad:c1:a2:93:2b:26:f6:c3:83:35:aa:58:85:8b:c0:d9:07: 31:67:b3:8f:34:f6:29:56:61:a7:d7:90:37:54:ba:5c:51:af: 73:a9:af:9c:83:34:c6:7f:5f:05:18:2f:d7:13:18:95:2b:11: 58:ff:c1:46:e9:13:a6:7d:60:4f:c5:1e:96:75:40:ac:30:2c: 39:a8:19:88:f3:93:c3:45:93:ae:1b:25:f6:63:e1:26:1f:33: 86:43:5a:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzM3RjExMC8GA1UEBRMoODUxOUZGMkM2ODA4MkNDNjQ3QjgyODc2MEI0QjdCMTQ5 NUVDODRDQjAeFw0yNjA0MTYxNzU0NDFaFw0yNjA0MjMxNzU0NDFaMBgxFjAUBgNV BAMTDTY5ZTEyMjYyLWY2ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Mp9zRVFbkSqLqovIlxPgYOiPkvEPsgkdwyGnfgW/0q2lSssm0xcHrFBoqDNt APgZHMjpYQdUSHzhUioA0KZ+eza/UDEubnwsV4cemY73zDIFVML+GUjgY3b0AtUV iCr0iD1nU//L6M70tvZ42xZMdwIrRuPqUeeuRrRssuY9FmoxZfBkOguK8bU+qKq5 mx8V4N8wb8I+kIeguQ4HsAPFF2MDuV00yeuIp/9795c2kYLijOgA1eTViWce5l2T QpC97tEC6FV533NueTO8goUjehjAQCxGZ/v+dre/6zsLQlDD0K6kA1BLndbClbM4 J6brClLmNcX6YwZDhawKYQ2ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBgLXqTRo tosw04y95wO6oBxhVq0wHwYDVR0jBBgwFoAUhRn/LGgILMZHuCh2C0t7FJXshMsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzdGLzFCNUJGN0ZFMjdB QTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1aSHVDaDJDMHQ3RkpYc2hN cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaFJuX0xHZ0lMTVpIdUNoMkMwdDdGSlhzaE1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MzdGLzFCNUJGN0ZFMjdBQTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1a SHVDaDJDMHQ3RkpYc2hNcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqHoz3VqIW1LFJcnJFIDTE2fpAsqRj1zXREJwwJQCdoNHjB8HpnlfJx/MK8jb3 a2C4IR4581/J9kLzTEUI4PWRlyjWxwHDYK9wa9eEmPAD3APPZtwHgOreBMgAMVga MYdsiqM0i95imx021RcUCnOtFZD1/TDxmRgxeC6muE8P4QQyPqrde4K/qNFcAgRl xeSkvB4t3hUDsSjjV2NcZinsj8XPrcGikysm9sODNapYhYvA2QcxZ7OPNPYpVmGn 15A3VLpcUa9zqa+cgzTGf18FGC/XExiVKxFY/8FG6ROmfWBPxR6WdUCsMCw5qBmI 85PDRZOuGyX2Y+EmHzOGQ1rq -----END CERTIFICATE-----Generated at Fri Apr 17 08:14:08 2026 by rpki-client