$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: 5lTkgeRgxqPx2fj6RlkGS0vSpedp3tblVSZDeuYsM/Q= Subject key identifier: E2:23:6F:93:81:00:52:A2:1C:51:2B:D6:CF:AE:CB:AF:14:3A:AB:BC Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CEF Signing time: Thu 16 Apr 2026 18:12:40 +0000 Manifest this update: Thu 16 Apr 2026 18:12:40 +0000 Manifest next update: Thu 23 Apr 2026 18:12:40 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: bvhEpkDhl0dX2XU50actN0X9g1y5pOk8ZaqEkv9N2yI=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Apr 16 18:12:40 2026 GMT Not After : Apr 23 18:12:40 2026 GMT Subject: CN=69e12698-80c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:25:f6:5b:7d:33:0e:64:1d:85:a6:93:a1: e6:5c:da:55:c7:50:35:b1:f2:78:45:6f:37:ac:69: f0:ee:90:38:3e:89:f4:9c:13:2a:7c:b4:f5:06:73: db:3a:b6:23:90:66:1a:2a:06:09:3b:0b:20:1f:2a: c4:6b:95:dc:cf:62:8f:a3:d3:b7:4a:d3:75:7c:ef: 6a:af:05:1e:7e:5c:97:ee:92:d9:7b:f3:52:c2:3d: 5a:fe:f1:6f:8e:24:cb:e9:9b:85:3f:e8:da:1f:86: 07:a8:b2:7c:51:a1:9b:de:b8:5b:83:3f:e9:03:39: 1d:53:7f:b4:a9:aa:78:65:aa:84:6a:5d:ca:9b:8e: 76:81:77:b5:90:2d:06:ec:dc:f2:d5:86:9b:17:0a: 66:0a:96:d3:06:ba:e2:f9:0b:85:62:bb:27:94:d0: 37:ff:26:42:ba:e3:ad:eb:17:5d:43:8a:a6:bc:da: ae:ce:e1:38:3b:92:b6:2a:70:8c:81:02:64:1b:3f: 58:7c:7b:b0:51:84:3a:9d:9f:29:b4:44:40:50:32: db:7f:1a:40:35:e0:2e:b5:38:a4:a6:07:7e:d8:8e: be:ba:28:23:5c:39:b1:6b:85:37:fb:6d:db:3b:3f: 46:35:78:5f:f0:44:ba:67:bc:93:94:67:80:aa:56: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:6F:93:81:00:52:A2:1C:51:2B:D6:CF:AE:CB:AF:14:3A:AB:BC X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c4:40:0d:2b:2b:c7:20:a7:a6:b2:74:54:f9:a6:97:81:27: e4:de:70:d3:59:4f:1c:e6:15:56:b2:84:39:58:25:14:6d:ec: ae:11:85:69:b5:3e:15:92:e2:70:01:7e:15:cf:8b:6f:f3:99: 8e:0f:bc:cd:81:42:a4:95:db:58:69:13:1d:16:34:35:be:00: 8c:d7:5e:ad:21:6a:a7:d2:dc:a9:28:54:7b:62:c5:f3:df:71: ae:88:2f:61:d3:87:a2:3a:3d:d7:c3:eb:af:2e:2d:c3:6d:5e: ab:1b:d1:e2:4c:83:c7:7e:92:fe:9e:8d:f7:bb:b7:f5:b9:20: 2f:93:90:88:25:a8:72:6c:d7:fe:b6:e0:0f:5c:74:be:16:86: f5:17:f7:28:dc:66:ee:98:4e:d3:a1:eb:f5:fb:1e:b5:82:6a: 57:a1:c7:64:20:74:d2:9d:93:56:98:9e:a5:f8:9f:2b:8f:bb: d8:8a:d2:69:ac:32:d2:3e:64:3f:cb:11:67:d5:b8:c4:f6:a7: cc:a3:27:81:29:9b:89:c9:ec:d0:6e:d8:e5:a5:13:ab:f3:ec: 8d:af:47:d0:9f:c2:d9:cc:37:fe:c3:e6:94:51:c6:aa:93:42: 33:43:fe:78:72:79:49:7d:4d:17:dd:ee:a1:83:10:03:93:c2: ce:81:6d:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNDE2MTgxMjQwWhcNMjYwNDIzMTgxMjQwWjAYMRYwFAYD VQQDEw02OWUxMjY5OC04MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGAl9lt9Mw5kHYWmk6HmXNpVx1A1sfJ4RW83rGnw7pA4Pon0nBMqfLT1BnPb OrYjkGYaKgYJOwsgHyrEa5Xcz2KPo9O3StN1fO9qrwUeflyX7pLZe/NSwj1a/vFv jiTL6ZuFP+jaH4YHqLJ8UaGb3rhbgz/pAzkdU3+0qap4ZaqEal3Km452gXe1kC0G 7Nzy1YabFwpmCpbTBrri+QuFYrsnlNA3/yZCuuOt6xddQ4qmvNquzuE4O5K2KnCM gQJkGz9YfHuwUYQ6nZ8ptERAUDLbfxpANeAutTikpgd+2I6+uigjXDmxa4U3+23b Oz9GNXhf8ES6Z7yTlGeAqlaLkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIjb5OB AFKiHFEr1s+uy68UOqu8MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUcRADSsrxyCnprJ0VPmml4En5N5w01lPHOYVVrKEOVglFG3srhGFabU+FZLi cAF+Fc+Lb/OZjg+8zYFCpJXbWGkTHRY0Nb4AjNderSFqp9LcqShUe2LF899xrogv YdOHojo918Prry4tw21eqxvR4kyDx36S/p6N97u39bkgL5OQiCWocmzX/rbgD1x0 vhaG9Rf3KNxm7phO06Hr9fsetYJqV6HHZCB00p2TVpiepfifK4+72IrSaawy0j5k P8sRZ9W4xPanzKMngSmbicns0G7Y5aUTq/Psja9H0J/C2cw3/sPmlFHGqpNCM0P+ eHJ5SX1NF93uoYMQA5PCzoFtcA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:12:19 2026 by rpki-client