$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: mGQvULMZmCQzftLnzpQAlbOV42fB5dnU874Zw5RPsps= Subject key identifier: B8:0B:C3:80:96:60:8E:6D:C4:FD:4D:6C:4F:6C:DC:39:89:02:2C:6E Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 3581 Signing time: Thu 16 Apr 2026 14:39:27 +0000 Manifest this update: Thu 16 Apr 2026 14:39:26 +0000 Manifest next update: Thu 23 Apr 2026 14:39:26 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: qgBl4bCEqMn5/iPJwKiZU1LMWCaDmSyuzx7R0s/VKLk=) 2: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: 1QTKJD4vqX7bem3GLJ46R87e+RPm3/ksMd9HYKhn61A=) 3: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: C9kDwfmBiY6vCRGQDDyB4fRaHn0qARnsMTPVrfiPE3w=) 4: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: ASkZLn/NWBAwVh59cVjcukQp4AEdjyXM88LF9t8bVkY=) 5: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: KXODx+nI9I+IBelGkGtFFlSKzu6f9jybWi8Lv3W1Fu8=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: yHM3DnwjT+cPJR9y5D69EEWvn7HmBwkRwxEMyaTJ7Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13775 (0x35cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 16 14:39:26 2026 GMT Not After : Apr 23 14:39:26 2026 GMT Subject: CN=69e0f49f-c050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:49:1f:53:fe:84:10:80:47:02:74:02:4c: f0:cd:10:2f:5e:de:9e:9a:f7:7b:2c:b8:a6:ca:ca: 34:fd:7b:ee:b0:ea:a1:93:1c:76:76:7a:22:e3:7f: 39:f8:c8:37:c2:11:09:fa:c9:06:1d:1b:22:e6:11: 14:f0:15:66:27:fa:36:84:ce:e2:42:e1:7a:52:bf: 44:a3:b0:e0:ea:68:58:03:85:94:67:25:dc:2a:b7: 72:88:d0:9c:af:6f:02:fc:39:5a:f3:08:d4:ca:30: b4:c0:9a:57:12:35:65:17:1a:1a:f2:46:05:38:da: 5d:18:84:f1:5a:9c:91:ff:9f:41:dd:7a:44:e1:e1: f4:47:76:8d:74:ef:dc:21:ba:0a:30:4f:a0:dd:9c: b9:f4:b1:fd:99:16:19:61:fe:a3:d2:85:5a:25:39: 88:5c:ba:03:d0:0d:6d:a0:53:de:c2:33:44:97:68: bd:2b:72:cd:a8:f3:28:b4:35:43:7a:33:06:cd:13: 99:fc:fa:cf:d4:c1:b0:cd:1b:92:da:c9:ad:ae:93: 59:fc:41:4d:6a:a8:c3:cf:e5:3c:21:d0:5b:f8:20: 4a:c2:5f:57:90:1d:6d:e9:7a:71:69:d3:c3:96:a1: c5:71:37:84:20:54:39:f7:58:85:71:e2:25:7a:cc: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0B:C3:80:96:60:8E:6D:C4:FD:4D:6C:4F:6C:DC:39:89:02:2C:6E X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ed:cb:2d:45:af:e1:51:1a:d6:83:14:05:ef:fb:89:d0:74: 63:81:31:72:7d:2b:c3:aa:e1:db:a9:5b:63:4b:23:2b:cf:c0: 95:df:93:f4:be:46:ca:04:b8:00:2b:21:5a:cb:7c:c9:7d:6e: a2:45:70:54:b6:75:e3:9b:d0:ff:c4:73:5f:07:39:f5:4f:aa: 68:f1:3c:e6:2e:6e:4b:b0:9e:03:0c:b9:50:b8:83:5e:b4:8b: 80:57:7e:af:c5:7a:64:2e:7f:3a:d7:5d:fd:82:fa:2f:ab:85: 21:9f:41:8a:1d:eb:b5:c3:b0:84:0e:90:33:44:b2:5f:97:1b: b6:c9:5e:5f:eb:be:21:46:e6:6a:bf:c5:00:2f:db:e4:39:62: 28:9f:04:a3:65:63:4c:bf:fc:33:aa:9f:31:4d:ac:14:59:d6: 88:0f:41:bd:3e:bf:b1:e0:69:30:24:40:61:3b:52:e8:1b:9b: 22:d1:31:29:5a:d7:69:9b:2a:ee:0c:50:91:5e:33:64:53:d4: 34:fd:7e:88:bc:ac:42:bf:10:4a:92:f4:83:c7:6b:d9:f2:97: 9b:a8:50:63:d3:c4:9f:1c:ee:d6:6a:5a:38:ac:c2:59:23:2d: f6:d0:c8:7a:56:3c:4a:4c:e0:69:97:dc:7e:88:df:2a:25:73: 2f:05:f4:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNDE2MTQzOTI2WhcNMjYwNDIzMTQzOTI2WjAYMRYwFAYD VQQDEw02OWUwZjQ5Zi1jMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnBJH1P+hBCARwJ0AkzwzRAvXt6emvd7LLimyso0/XvusOqhkxx2dnoi4385 +Mg3whEJ+skGHRsi5hEU8BVmJ/o2hM7iQuF6Ur9Eo7Dg6mhYA4WUZyXcKrdyiNCc r28C/Dla8wjUyjC0wJpXEjVlFxoa8kYFONpdGITxWpyR/59B3XpE4eH0R3aNdO/c IboKME+g3Zy59LH9mRYZYf6j0oVaJTmIXLoD0A1toFPewjNEl2i9K3LNqPMotDVD ejMGzROZ/PrP1MGwzRuS2smtrpNZ/EFNaqjDz+U8IdBb+CBKwl9XkB1t6XpxadPD lqHFcTeEIFQ591iFceIlesyCtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgLw4CW YI5txP1NbE9s3DmJAixuMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAce3LLUWv4VEa1oMUBe/7idB0Y4Excn0rw6rh26lbY0sjK8/Ald+T9L5GygS4 ACshWst8yX1uokVwVLZ145vQ/8RzXwc59U+qaPE85i5uS7CeAwy5ULiDXrSLgFd+ r8V6ZC5/Otdd/YL6L6uFIZ9Bih3rtcOwhA6QM0SyX5cbtsleX+u+IUbmar/FAC/b 5DliKJ8Eo2VjTL/8M6qfMU2sFFnWiA9BvT6/seBpMCRAYTtS6BubItExKVrXaZsq 7gxQkV4zZFPUNP1+iLysQr8QSpL0g8dr2fKXm6hQY9PEnxzu1mpaOKzCWSMt9tDI elY8SkzgaZfcfojfKiVzLwX0Ig== -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:02 2026 by rpki-client