$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json) Hash identifier: yhIGj8PpFgUHFVFrQhNga2wOzmZR/QYmHx5SbGNr7mQ= Subject key identifier: 5E:B3:C8:60:46:41:DB:7A:D3:62:1D:CF:F2:D7:7D:B8:19:01:A7:35 Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft Manifest number: 0527 Signing time: Thu 16 Apr 2026 23:28:41 +0000 Manifest this update: Thu 16 Apr 2026 23:28:41 +0000 Manifest next update: Thu 23 Apr 2026 23:28:41 +0000 Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: vMD0qUr5X6iHA1aw0huZYM5SvWoHbAhEwBVXbNIV/ZU=) 2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Validity Not Before: Apr 16 23:28:41 2026 GMT Not After : Apr 23 23:28:41 2026 GMT Subject: CN=69e170a9-d73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:01:a4:7e:18:3c:48:02:23:49:b8:c8:71: ba:58:ca:a2:a3:4a:4b:77:46:af:62:08:02:45:ad: 48:f0:b8:2c:46:ab:8b:d5:a7:fe:17:11:49:8a:c0: b4:84:65:95:70:a4:0d:94:c5:05:ca:f4:29:18:e8: c9:af:35:9b:07:88:1b:05:83:51:86:b4:cd:da:9d: f5:0b:1f:0b:13:6e:ec:95:23:19:c7:cf:21:bf:b4: 54:9c:f4:72:e0:1c:18:4c:ba:b9:bc:a5:39:9d:08: 1e:09:82:b6:e4:f5:a5:12:a3:ac:6b:5d:5f:3b:3e: e3:c9:92:4a:2f:bb:1f:5a:f7:5e:df:92:e0:12:27: 0b:82:25:3e:93:38:30:32:4c:47:b0:7c:d2:60:8d: 50:46:45:36:6c:c9:75:6a:0c:9e:8b:cb:07:f1:9b: e9:b6:43:ef:02:cb:7e:de:8f:cf:ab:55:ed:d1:f7: 10:7c:90:63:2b:7b:b5:18:a3:0d:f2:0a:5c:13:f0: e3:f6:f6:9e:0b:ff:cb:dc:5d:cd:40:6d:76:aa:8b: 12:5d:29:d5:74:9e:80:8f:65:7c:66:d8:f1:20:03: 16:55:77:2d:28:fd:d2:36:d9:eb:13:5e:1b:fa:c1: bc:20:ed:16:d0:85:9d:8e:a7:dd:04:06:86:88:8a: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:C8:60:46:41:DB:7A:D3:62:1D:CF:F2:D7:7D:B8:19:01:A7:35 X509v3 Authority Key Identifier: keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e1:9e:27:1a:6c:79:79:b1:66:20:72:11:4a:a2:34:e7:9c: f8:99:0e:2e:59:bc:a6:01:7a:a1:8d:82:af:c2:78:8f:0c:9a: de:3b:a2:04:92:50:99:58:02:bc:46:d1:c4:52:72:3d:8e:c6: ca:8b:a7:dc:df:c0:a5:42:64:6d:61:ec:70:4a:ce:41:39:c9: bf:89:8c:76:11:ac:0b:a5:46:d8:b2:a5:a1:ce:56:c9:47:8c: 14:43:7d:f5:36:07:d0:8e:06:72:39:22:67:bf:2f:9a:cd:e7: 5a:54:6e:25:f9:fa:cc:8f:9c:67:cd:26:01:f1:6c:d7:e6:88: 35:f1:6e:3f:ef:cd:84:e4:b0:63:a2:11:24:bb:c1:07:89:b5: 4f:d0:b1:5c:49:39:f3:f7:0e:c2:45:7e:ff:c8:85:5b:a7:ba: f2:ed:2f:be:44:6f:6b:a8:2a:df:9d:bb:d0:ce:1d:0f:1f:40: 5f:23:d4:7c:3b:74:a2:43:ab:5e:03:33:d2:c4:1f:a1:9f:40: 2c:2b:fa:c3:77:10:8d:fd:41:68:f6:75:90:ae:6e:1d:4f:b9: 0b:08:56:82:b5:40:85:f8:2f:55:fc:8c:03:dd:05:53:1f:4c: ce:23:87:34:a7:d2:5f:c9:a7:6e:3c:18:92:78:f2:7c:18:ef: 8b:be:5b:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2 MUM0MUQ5OUEwHhcNMjYwNDE2MjMyODQxWhcNMjYwNDIzMjMyODQxWjAYMRYwFAYD VQQDEw02OWUxNzBhOS1kNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutEBpH4YPEgCI0m4yHG6WMqio0pLd0avYggCRa1I8LgsRquL1af+FxFJisC0 hGWVcKQNlMUFyvQpGOjJrzWbB4gbBYNRhrTN2p31Cx8LE27slSMZx88hv7RUnPRy 4BwYTLq5vKU5nQgeCYK25PWlEqOsa11fOz7jyZJKL7sfWvde35LgEicLgiU+kzgw MkxHsHzSYI1QRkU2bMl1agyei8sH8ZvptkPvAst+3o/Pq1Xt0fcQfJBjK3u1GKMN 8gpcE/Dj9vaeC//L3F3NQG12qosSXSnVdJ6Aj2V8ZtjxIAMWVXctKP3SNtnrE14b +sG8IO0W0IWdjqfdBAaGiIqWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6zyGBG Qdt602Idz/LXfbgZAac1MB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ M2M5TnpvUW93enRoeEIyWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAguGeJxpseXmxZiByEUqiNOec+JkOLlm8pgF6oY2Cr8J4jwya3juiBJJQmVgC vEbRxFJyPY7Gyoun3N/ApUJkbWHscErOQTnJv4mMdhGsC6VG2LKloc5WyUeMFEN9 9TYH0I4GcjkiZ78vms3nWlRuJfn6zI+cZ80mAfFs1+aINfFuP+/NhOSwY6IRJLvB B4m1T9CxXEk58/cOwkV+/8iFW6e68u0vvkRva6gq35270M4dDx9AXyPUfDt0okOr XgMz0sQfoZ9ALCv6w3cQjf1BaPZ1kK5uHU+5CwhWgrVAhfgvVfyMA90FUx9MziOH NKfSX8mnbjwYknjyfBjvi75bcA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:56 2026 by rpki-client