$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft File: HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft (raw, json) Hash identifier: Ccnppi19JFZ1q6LCtZvqMa2QlZkWV+ZcQr6KXCWJWak= Subject key identifier: 1B:2E:7B:A9:80:9A:44:F5:1D:00:19:9F:FB:59:48:D1:5C:E3:71:85 Authority key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D Certificate issuer: /CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft Manifest number: 0115 Signing time: Fri 17 Apr 2026 05:35:48 +0000 Manifest this update: Fri 17 Apr 2026 05:35:47 +0000 Manifest next update: Fri 24 Apr 2026 05:35:47 +0000 Files and hashes: 1: HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl (hash: /p8pv0M5oLFw8y/ETEwgbrm/RGq+GnebMjQATET6wlQ=) 2: 4E7F3B4C955B11EFACD8F26CC4F9AE02.roa (hash: kw9fZbNGZZ3kdKJfF8SYCLZeUjioT1ZZ2tfUfZYgkvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Validity Not Before: Apr 17 05:35:47 2026 GMT Not After : Apr 24 05:35:47 2026 GMT Subject: CN=69e1c6b4-e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:08:15:6f:ec:8b:57:5d:75:87:7c:5e:5c: 68:c3:8d:74:ec:25:4c:74:82:61:aa:37:f2:cb:f3: 47:06:83:89:89:2a:28:31:10:64:0d:95:fb:74:5b: e7:30:ff:a0:0b:b7:47:2d:02:31:2a:ea:03:45:f8: 6c:de:2f:6a:47:eb:5a:98:e7:0e:3a:45:47:a6:12: 98:d5:ff:4f:e9:9e:f8:ae:2d:e1:4a:b6:87:bc:e7: 89:3e:db:f7:a0:56:e1:e3:c2:63:c5:a2:f6:f1:f7: a9:d5:4f:0d:42:96:51:3f:24:39:e6:d7:84:09:9a: e6:f4:26:44:ff:c8:56:d3:3d:1c:88:1a:2c:89:26: f0:60:9e:cc:32:bb:40:f4:45:8a:f1:58:f4:8c:3c: f8:21:85:75:2b:53:c7:0a:eb:23:dd:3a:20:99:52: 7c:21:63:de:48:7d:9f:6b:81:34:3a:96:9b:bb:f8: 4d:bc:67:d4:93:94:fa:e5:68:e3:0e:bc:44:42:1c: 8a:e4:aa:cd:81:eb:be:a9:94:47:e3:ac:ee:aa:71: bf:8a:35:0e:bf:88:b4:f5:45:5a:d5:46:23:51:53: 6a:21:d8:d1:fe:13:0c:01:92:20:d7:ee:2f:6c:28: 40:4d:48:12:0b:94:57:bf:36:cf:95:e9:8c:ee:18: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:7B:A9:80:9A:44:F5:1D:00:19:9F:FB:59:48:D1:5C:E3:71:85 X509v3 Authority Key Identifier: keyid:1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:02:e8:a6:82:dc:19:44:b6:2a:c7:9b:54:92:ad:c3:6b:1c: 03:40:81:79:f5:06:77:41:23:18:6a:15:93:9f:29:3c:1c:75: 1b:bd:69:93:95:c6:fb:6b:3c:d2:e6:29:b7:2e:66:0d:bb:2d: af:6a:48:9a:c8:7e:44:c9:59:81:5f:c1:39:db:d1:f6:7c:85: 21:a9:36:02:f1:23:9b:2f:3e:5b:48:1b:ec:d1:50:1b:7d:98: 64:1f:87:45:ed:10:f4:dc:e6:4e:2e:80:f0:d1:d0:b6:61:f7: ec:b3:22:17:7a:e9:30:c0:7c:75:5f:11:de:8b:ae:6a:50:93: ba:e3:de:a2:f8:4d:7f:b4:9a:fa:3d:bb:3b:9f:11:9b:f3:7d: 83:b9:db:bf:41:74:1d:f1:2d:09:12:dc:c0:07:24:8d:5f:6a: d3:34:a8:bd:ba:0a:40:bf:1a:ac:ed:9f:b1:d7:ce:7e:ff:36: dd:20:64:27:73:82:e1:90:d8:b7:9c:9c:fb:0c:84:60:52:e2: 0d:e1:06:33:06:2c:f0:c2:b0:6b:d9:3d:e3:4f:71:75:a6:8f: 47:49:8a:45:f1:09:e3:ba:a1:b3:ab:6c:88:4e:cb:85:1b:66: 83:fa:16:4a:0c:39:cd:39:ba:c9:20:c7:c0:84:f0:51:d6:4b: bf:24:75:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDFFNjU2RERFQzdFOThEMjRBMTg2RkZEQjZGNTk3NzEw QUFGRjJBOEQwHhcNMjYwNDE3MDUzNTQ3WhcNMjYwNDI0MDUzNTQ3WjAYMRYwFAYD VQQDEw02OWUxYzZiNC1lNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0QIFW/si1dddYd8Xlxow4107CVMdIJhqjfyy/NHBoOJiSooMRBkDZX7dFvn MP+gC7dHLQIxKuoDRfhs3i9qR+tamOcOOkVHphKY1f9P6Z74ri3hSraHvOeJPtv3 oFbh48JjxaL28fep1U8NQpZRPyQ55teECZrm9CZE/8hW0z0ciBosiSbwYJ7MMrtA 9EWK8Vj0jDz4IYV1K1PHCusj3TogmVJ8IWPeSH2fa4E0Opabu/hNvGfUk5T65Wjj DrxEQhyK5KrNgeu+qZRH46zuqnG/ijUOv4i09UVa1UYjUVNqIdjR/hMMAZIg1+4v bChATUgSC5RXvzbPlemM7hhUNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsue6mA mkT1HQAZn/tZSNFc43GFMB8GA1UdIwQYMBaAFB5lbd7H6Y0koYb/229ZdxCq/yqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8zNUM3NkM3RTk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpTU2hodl9iYjFsM0VLcl9L bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htVnQzc2ZwalNTaGh2X2JiMWwzRUtyX0tvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8zNUM3NkM3RTk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpT U2hodl9iYjFsM0VLcl9LbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxALopoLcGUS2KsebVJKtw2scA0CBefUGd0EjGGoVk58pPBx1G71pk5XG+2s8 0uYpty5mDbstr2pImsh+RMlZgV/BOdvR9nyFIak2AvEjmy8+W0gb7NFQG32YZB+H Re0Q9NzmTi6A8NHQtmH37LMiF3rpMMB8dV8R3ouualCTuuPeovhNf7Sa+j27O58R m/N9g7nbv0F0HfEtCRLcwAckjV9q0zSovboKQL8arO2fsdfOfv823SBkJ3OC4ZDY t5yc+wyEYFLiDeEGMwYs8MKwa9k9409xdaaPR0mKRfEJ47qhs6tsiE7LhRtmg/oW Sgw5zTm6ySDHwITwUdZLvyR13Q== -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:05 2026 by rpki-client