$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: hzarJKXSLKsE3U/XfGul7z63e+wpk4/yBaeqKr96bI8= Subject key identifier: 8C:FA:5E:52:26:7D:62:6A:83:4D:BE:63:AB:97:D7:F6:EF:90:90:F3 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0844 Signing time: Thu 16 Apr 2026 20:49:14 +0000 Manifest this update: Thu 16 Apr 2026 20:49:14 +0000 Manifest next update: Thu 23 Apr 2026 20:49:14 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: qxXmfyXJGmsGQbkm47EC9zfgBsX85CVvEik+iUoVBic=) 2: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: qKtjyRx0lLlv/KwvG7LBwoOnxK1cXnW5MTg39ctLvtM=) 3: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Apr 16 20:49:14 2026 GMT Not After : Apr 23 20:49:14 2026 GMT Subject: CN=69e14b4a-7f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:06:80:db:33:b0:d4:e3:de:35:48:1a:30: 11:5c:cb:31:3b:b8:eb:49:e9:51:5f:34:82:4d:89: 6d:42:91:94:ff:f2:fb:7c:5b:62:67:a1:1a:4f:05: b9:a4:b2:d2:bf:3d:20:b1:f8:ce:ac:86:25:88:5d: 78:14:f4:df:ba:d2:2a:e5:00:1e:5f:4e:85:1f:23: 89:ce:e7:24:88:8e:e3:0b:0d:46:ae:d0:84:95:be: 83:4d:0f:af:37:ce:23:95:08:9c:98:e1:06:cd:58: 00:1b:08:a2:c7:00:15:ba:f8:73:b0:85:e8:bd:7c: 3d:9f:95:1e:fb:11:0d:d2:e4:f8:c5:6b:c5:d0:b1: 01:52:eb:c9:10:61:e2:99:85:34:98:63:61:e9:e1: 7d:29:1d:ed:dc:5b:9a:de:59:19:3d:2c:b5:88:49: 65:4a:44:e4:83:a9:23:d7:68:17:b5:f9:9b:c0:1f: 68:45:2f:5d:8e:c2:49:7d:fe:a4:fe:46:b3:c0:94: 2f:f4:89:7c:65:0a:72:26:9b:ef:db:3a:41:fd:2f: c0:a9:17:ea:75:b5:05:99:f0:6b:0d:19:21:dd:3f: 1d:0c:b3:ca:1e:b9:fd:7a:90:76:c4:6b:8d:86:33: 3b:56:95:df:a2:26:1f:30:48:0b:dc:14:48:f7:0d: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:5E:52:26:7D:62:6A:83:4D:BE:63:AB:97:D7:F6:EF:90:90:F3 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1a:06:ac:04:44:a8:44:47:7a:54:21:7f:f4:1b:56:de:7c: ed:62:07:1a:90:d6:2c:79:85:4d:5a:d5:34:96:f8:42:ba:a2: d1:90:51:4f:6d:6d:6a:62:bf:a8:69:1f:e3:bf:c3:63:d5:83: 73:45:8f:e1:d9:97:fa:fa:1b:a9:22:8d:84:57:d6:92:d5:7b: 1c:64:5e:35:c2:70:02:14:4f:87:14:d4:37:42:aa:76:a2:bc: a2:97:c1:39:d0:69:72:f4:22:de:21:88:5f:14:3a:c5:0f:57: f7:55:99:bb:42:42:24:81:1f:81:83:65:ed:2f:01:88:c9:e6: eb:e7:c1:ac:84:7f:32:33:9f:31:45:3d:d1:ce:76:4e:47:9f: a7:25:82:e2:55:ec:18:02:a6:c5:7f:a4:0b:c8:74:5c:d9:ed: 59:6b:50:d7:a3:83:78:cb:10:72:14:7c:f7:85:aa:a9:b4:4a: c1:5d:74:8d:b7:54:26:c0:03:f2:aa:40:e6:5d:59:15:4b:b9: 4d:11:20:6c:c6:0a:17:bf:4b:d0:51:f4:a3:ea:ef:de:9a:6f: aa:76:ce:92:7c:61:72:0e:09:71:40:47:f3:54:d1:82:77:30: ca:11:9e:f4:77:ef:be:3f:bf:32:66:68:53:1b:76:50:ba:bd: 5a:76:dc:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYwNDE2MjA0OTE0WhcNMjYwNDIzMjA0OTE0WjAYMRYwFAYD VQQDEw02OWUxNGI0YS03ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjkGgNszsNTj3jVIGjARXMsxO7jrSelRXzSCTYltQpGU//L7fFtiZ6EaTwW5 pLLSvz0gsfjOrIYliF14FPTfutIq5QAeX06FHyOJzuckiI7jCw1GrtCElb6DTQ+v N84jlQicmOEGzVgAGwiixwAVuvhzsIXovXw9n5Ue+xEN0uT4xWvF0LEBUuvJEGHi mYU0mGNh6eF9KR3t3Fua3lkZPSy1iEllSkTkg6kj12gXtfmbwB9oRS9djsJJff6k /kazwJQv9Il8ZQpyJpvv2zpB/S/AqRfqdbUFmfBrDRkh3T8dDLPKHrn9epB2xGuN hjM7VpXfoiYfMEgL3BRI9w278wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz6XlIm fWJqg02+Y6uX1/bvkJDzMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWxoGrAREqERHelQhf/QbVt587WIHGpDWLHmFTVrVNJb4Qrqi0ZBRT21tamK/ qGkf47/DY9WDc0WP4dmX+vobqSKNhFfWktV7HGReNcJwAhRPhxTUN0KqdqK8opfB OdBpcvQi3iGIXxQ6xQ9X91WZu0JCJIEfgYNl7S8BiMnm6+fBrIR/MjOfMUU90c52 TkefpyWC4lXsGAKmxX+kC8h0XNntWWtQ16ODeMsQchR894WqqbRKwV10jbdUJsAD 8qpA5l1ZFUu5TREgbMYKF79L0FH0o+rv3ppvqnbOknxhcg4JcUBH81TRgncwyhGe 9Hfvvj+/MmZoUxt2ULq9WnbcHg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:23 2026 by rpki-client