$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: xux6KSGotrJYBiIRxScU5GLpctRYg7dnFAxIzUdbZks= Subject key identifier: 8B:C9:39:2F:67:31:12:C0:F5:61:1E:3E:AD:25:C8:EE:48:C1:2F:08 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 026A Signing time: Fri 17 Apr 2026 01:51:08 +0000 Manifest this update: Fri 17 Apr 2026 01:51:07 +0000 Manifest next update: Fri 24 Apr 2026 01:51:07 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: yvw1qo77Efcgzor4z8YxORt/w0zcP49ChZwRT16PPj4=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Apr 17 01:51:07 2026 GMT Not After : Apr 24 01:51:07 2026 GMT Subject: CN=69e1920c-d2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:ce:3c:e0:2c:fd:da:e7:de:54:dc:a4:e7: 7b:06:cc:3d:77:f6:c2:fb:fa:b8:45:73:ea:cd:5c: d0:43:46:bf:0f:4b:51:75:df:e5:85:e6:51:e7:39: f2:cc:1b:86:98:98:25:40:84:c6:a2:cd:d2:ac:21: 3f:05:9c:1b:19:72:0e:31:5c:97:3e:f3:af:de:a3: 8e:79:d1:15:90:3a:17:2b:aa:fd:54:43:f2:45:4e: 96:68:43:b2:de:b2:38:39:51:78:2a:b2:15:63:09: cd:5d:ec:2d:69:a1:ec:49:27:d9:d5:60:49:da:84: e7:0f:02:a6:be:05:d3:66:59:52:27:c9:5b:5f:57: 30:40:59:a8:cc:89:99:b6:0e:19:e4:eb:e0:c7:95: 61:cf:fb:73:b9:2d:9d:ac:79:6e:dc:62:d9:2f:37: 83:6c:b4:a1:88:c9:ac:5d:bb:4a:72:4b:7e:2c:0f: e6:3d:b9:22:aa:35:13:a3:e8:bd:71:8c:7a:0a:d4: cb:55:46:31:f8:69:d5:ca:6d:8b:7d:9c:00:5e:0f: 61:be:51:22:fc:5b:1c:79:39:42:a8:15:1e:40:e0: 07:b8:5a:be:d3:a9:46:39:b0:b8:8b:f9:74:15:60: a3:f2:36:18:5a:74:98:e1:d3:94:2b:0d:92:fd:53: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C9:39:2F:67:31:12:C0:F5:61:1E:3E:AD:25:C8:EE:48:C1:2F:08 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:73:9a:d3:5a:46:77:d9:e6:f5:1a:50:35:e8:cf:68:99:3e: 6a:f6:27:e3:74:2c:f9:80:4c:b7:67:cf:ff:c2:ff:0e:db:7f: ac:8b:22:76:be:e6:ee:15:16:af:0a:26:f7:c4:bc:8e:fc:18: da:33:da:1e:ed:1b:41:f0:09:3a:ed:d5:18:c4:3d:37:24:05: b1:5b:bc:0d:3e:ab:29:cc:26:5b:87:06:c8:38:dc:33:c0:26: 14:09:ee:5b:c9:59:42:56:e4:d8:ca:87:56:7a:0c:b1:3e:88: dc:f2:32:93:2c:43:fd:33:fa:2b:e9:f5:af:32:2b:45:52:6f: 8f:c1:05:52:57:b7:4d:f2:a2:1e:7d:a3:41:3d:3b:ad:9c:3a: e9:4c:c7:09:fe:35:e6:ce:51:e6:f3:63:62:f3:19:c8:e3:ef: 11:f5:3e:66:a9:c3:1c:3a:f6:51:47:50:d0:4e:6c:37:4a:96: 9d:d8:24:98:13:d8:b5:d3:8a:93:49:65:a8:ee:0d:e9:2d:a0: 5c:25:e1:ea:5e:de:37:cb:d6:25:4c:8e:3c:cf:95:69:4f:69: 94:4d:a1:fc:6e:7b:5e:ed:b2:03:73:49:ad:12:be:03:89:41: bc:23:29:83:81:01:fe:ad:13:df:b0:f0:7e:d2:0b:63:c5:db: d0:f2:00:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwNDE3MDE1MTA3WhcNMjYwNDI0MDE1MTA3WjAYMRYwFAYD VQQDEw02OWUxOTIwYy1kMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4nOPOAs/drn3lTcpOd7Bsw9d/bC+/q4RXPqzVzQQ0a/D0tRdd/lheZR5zny zBuGmJglQITGos3SrCE/BZwbGXIOMVyXPvOv3qOOedEVkDoXK6r9VEPyRU6WaEOy 3rI4OVF4KrIVYwnNXewtaaHsSSfZ1WBJ2oTnDwKmvgXTZllSJ8lbX1cwQFmozImZ tg4Z5Ovgx5Vhz/tzuS2drHlu3GLZLzeDbLShiMmsXbtKckt+LA/mPbkiqjUTo+i9 cYx6CtTLVUYx+GnVym2LfZwAXg9hvlEi/FsceTlCqBUeQOAHuFq+06lGObC4i/l0 FWCj8jYYWnSY4dOUKw2S/VOCRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvJOS9n MRLA9WEePq0lyO5IwS8IMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnOa01pGd9nm9RpQNejPaJk+avYn43Qs+YBMt2fP/8L/Dtt/rIsidr7m7hUW rwom98S8jvwY2jPaHu0bQfAJOu3VGMQ9NyQFsVu8DT6rKcwmW4cGyDjcM8AmFAnu W8lZQlbk2MqHVnoMsT6I3PIykyxD/TP6K+n1rzIrRVJvj8EFUle3TfKiHn2jQT07 rZw66UzHCf415s5R5vNjYvMZyOPvEfU+ZqnDHDr2UUdQ0E5sN0qWndgkmBPYtdOK k0llqO4N6S2gXCXh6l7eN8vWJUyOPM+VaU9plE2h/G57Xu2yA3NJrRK+A4lBvCMp g4EB/q0T37DwftILY8Xb0PIAXg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:29:41 2026 by rpki-client