$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: 4GDARQM/huaJ+7/zcy1SSEANIvO4dcmt/tOe4jLIdq8= Subject key identifier: 71:52:90:FA:17:47:51:78:56:F9:2F:32:82:7A:CE:F3:3D:9F:1A:97 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0F63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0F38 Signing time: Thu 16 Apr 2026 17:30:36 +0000 Manifest this update: Thu 16 Apr 2026 17:30:36 +0000 Manifest next update: Thu 23 Apr 2026 17:30:36 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: ShhAfhMUXIk6g6vyXl+MlyG+8HLoFpRMlJHLhkyNonk=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=) 3: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=) 4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3939 (0xf63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Apr 16 17:30:36 2026 GMT Not After : Apr 23 17:30:36 2026 GMT Subject: CN=69e11cbc-9f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8d:e3:e9:43:b3:72:9f:b2:4d:0f:5c:1e:d4: 3d:d7:0d:94:4e:b0:a5:46:bd:45:a7:8a:ac:5f:83: c9:92:01:a0:d5:8f:c9:ac:df:a9:9d:02:1a:6c:ae: 99:38:27:8e:ef:71:88:79:cd:be:ed:80:ab:0c:f0: 5f:1c:48:7f:09:a2:47:48:13:65:99:92:c2:27:72: ab:42:8e:48:b9:20:8f:ea:7c:c5:80:a7:5c:99:40: b5:1e:fe:ef:7f:56:29:86:2e:ce:b1:37:8f:29:46: 31:1a:dd:86:d6:c3:8c:12:39:21:46:9c:dc:87:0b: a6:a9:8d:3f:ee:d8:1a:08:83:ce:4b:c1:8a:5d:cd: a2:07:e5:38:e9:40:6e:fb:a1:0e:f2:8d:4a:48:89: 39:d9:af:ae:ec:15:fa:53:6d:86:80:cd:85:ab:8c: 17:dd:f4:48:c9:3f:c7:c2:2c:93:99:11:1a:fe:f3: b2:3e:4e:78:25:6c:ea:22:e7:3e:8e:6e:6d:77:2a: 75:3c:78:9f:b8:28:ba:00:68:b4:6e:ce:ae:0c:12: b3:d9:68:63:a3:d4:4c:18:03:11:44:52:48:1a:7f: 9b:a6:5b:ea:7d:9f:36:04:bb:89:8d:71:db:81:42: 35:c5:62:a9:09:d2:14:74:d9:26:fa:60:98:ce:a3: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:52:90:FA:17:47:51:78:56:F9:2F:32:82:7A:CE:F3:3D:9F:1A:97 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:43:1c:4a:c2:32:cc:12:cd:2f:b3:09:c6:cf:85:25:dd:4d: 8d:b7:c4:26:3b:88:bd:b2:67:81:6b:65:3a:b4:49:7c:7c:70: bd:4a:35:bc:86:52:32:76:42:bb:18:1d:3e:3c:d7:56:69:c8: 08:f3:33:92:49:a2:bb:d0:25:2b:9d:93:86:f3:7f:9f:da:3c: 88:85:93:1f:29:33:96:aa:06:81:fb:55:88:07:61:74:2a:83: 9e:df:72:51:3d:ac:3b:0e:54:a6:2e:6f:da:9d:a2:58:89:01: bc:80:df:e5:ba:69:39:67:32:73:97:2b:87:a8:9c:72:f7:61: f2:bc:c8:76:7c:b1:9f:8a:bc:7f:7c:26:2b:79:e2:03:63:05: 0b:86:58:d3:bc:d6:62:24:02:02:a5:28:31:0f:84:85:97:b1: 09:c5:79:d2:06:23:53:2f:8c:de:e5:23:85:29:da:0a:f7:9b: 16:e3:e1:63:0a:c6:3e:85:7c:aa:01:84:33:1e:1d:96:60:3e: da:3f:03:6b:14:77:76:a9:ad:8a:70:c8:6a:1a:88:6c:16:0e: 2c:3a:f3:43:46:56:84:27:7d:04:35:85:38:1b:bd:f3:d2:c5: 44:cb:dc:a7:74:39:43:18:e4:9d:e7:91:f1:74:da:51:9b:0d: 60:15:ae:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjYwNDE2MTczMDM2WhcNMjYwNDIzMTczMDM2WjAYMRYwFAYD VQQDEw02OWUxMWNiYy05ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Y3j6UOzcp+yTQ9cHtQ91w2UTrClRr1Fp4qsX4PJkgGg1Y/JrN+pnQIabK6Z OCeO73GIec2+7YCrDPBfHEh/CaJHSBNlmZLCJ3KrQo5IuSCP6nzFgKdcmUC1Hv7v f1Yphi7OsTePKUYxGt2G1sOMEjkhRpzchwumqY0/7tgaCIPOS8GKXc2iB+U46UBu +6EO8o1KSIk52a+u7BX6U22GgM2Fq4wX3fRIyT/HwiyTmREa/vOyPk54JWzqIuc+ jm5tdyp1PHifuCi6AGi0bs6uDBKz2Whjo9RMGAMRRFJIGn+bplvqfZ82BLuJjXHb gUI1xWKpCdIUdNkm+mCYzqOVbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFSkPoX R1F4VvkvMoJ6zvM9nxqXMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXEMcSsIyzBLNL7MJxs+FJd1NjbfEJjuIvbJngWtlOrRJfHxwvUo1vIZSMnZC uxgdPjzXVmnICPMzkkmiu9AlK52ThvN/n9o8iIWTHykzlqoGgftViAdhdCqDnt9y UT2sOw5Upi5v2p2iWIkBvIDf5bppOWcyc5crh6iccvdh8rzIdnyxn4q8f3wmK3ni A2MFC4ZY07zWYiQCAqUoMQ+EhZexCcV50gYjUy+M3uUjhSnaCvebFuPhYwrGPoV8 qgGEMx4dlmA+2j8DaxR3dqmtinDIahqIbBYOLDrzQ0ZWhCd9BDWFOBu989LFRMvc p3Q5QxjkneeR8XTaUZsNYBWuHg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:52:59 2026 by rpki-client