$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: Ah/1GT6WFClNl/nOSq+VVxRZ7bo8OVEL2UB9TCcgxHI= Subject key identifier: C3:70:2B:C2:AB:17:E6:50:5A:4C:05:5E:06:A2:B0:A0:C1:76:93:CB Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 02B8 Signing time: Sun 19 Apr 2026 01:30:16 +0000 Manifest this update: Sun 19 Apr 2026 01:30:15 +0000 Manifest next update: Sun 26 Apr 2026 01:30:15 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: MslJ7Io9OHUeHR45CcyM0O3eSOQ1bUCNM2wcmPZ5BXA=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 01:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Apr 19 01:30:15 2026 GMT Not After : Apr 26 01:30:15 2026 GMT Subject: CN=69e43027-37b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:0a:a1:89:15:fa:09:99:a2:70:b4:d7:05: 35:9e:d9:d5:96:9c:4e:66:2d:e5:44:83:98:77:a2: 17:c4:aa:99:9f:63:b2:11:6a:0c:07:a8:2d:69:2e: f0:80:1a:3f:12:a8:58:54:50:07:46:d9:e5:7b:1c: 59:b0:71:d0:20:28:35:99:86:e5:4f:e6:8c:85:2f: 3d:04:ee:97:f5:58:19:d1:8b:af:a3:1b:d7:a6:15: 64:57:3b:b4:a3:d6:a5:3f:a0:42:d5:3d:8b:16:3e: 92:99:02:d0:93:35:ac:2b:8e:5b:27:03:05:35:57: d8:fc:24:32:01:79:29:6a:f4:6d:9a:05:8b:f9:10: b2:5d:3f:d9:63:b0:22:51:ff:f7:5e:8c:e9:01:60: 97:fc:97:6f:84:2d:40:3b:5f:3e:26:b3:fc:e0:07: 9c:ec:74:41:e3:08:d4:11:bb:57:85:42:90:95:5e: 48:0f:95:a1:aa:a3:d1:ea:8a:3a:9c:83:d7:30:86: d9:55:e5:15:40:b0:51:91:94:f9:d1:83:64:e2:43: 13:29:37:89:42:c3:89:d0:9c:93:23:c1:9c:0b:f7: 78:90:34:3c:22:d7:1f:b1:69:02:87:c9:ad:2a:f6: 3a:c7:3f:5a:87:39:0c:b5:0b:4f:cb:1b:81:89:d2: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:70:2B:C2:AB:17:E6:50:5A:4C:05:5E:06:A2:B0:A0:C1:76:93:CB X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:33:f6:03:b7:84:cc:a9:2d:be:6b:98:75:c5:80:4c:c1:56: 35:d2:b2:81:db:f4:e6:b0:5b:0a:95:60:e4:0f:88:61:b3:81: fc:60:38:1b:a7:51:a3:d9:70:e5:69:2c:7c:ce:81:e6:62:54: a2:fd:a0:6a:0b:19:0d:26:6d:da:7c:9e:3c:8d:d0:86:d0:d7: ca:2b:37:76:44:82:0a:c7:52:e4:3c:2c:13:9a:22:85:d6:4f: 04:35:a0:8a:70:24:c1:7c:ef:5a:8e:ad:5a:ec:88:9a:ef:4c: da:b0:de:88:65:ee:81:e5:4b:f4:b5:29:a8:94:aa:37:ed:47: d2:71:15:a9:e2:5e:14:62:db:1f:8a:dc:79:ec:d6:67:d9:2d: 0f:82:8c:dc:6b:b3:bc:45:08:c4:1d:a7:73:48:bc:27:0b:55: 0a:fe:87:21:9c:58:b2:09:3e:28:08:55:a9:09:03:f8:3b:28: 90:75:e4:72:cb:42:de:29:18:3f:d7:0d:fb:cf:4b:8b:0c:6b: 23:d9:e9:a9:2e:21:25:cc:30:09:61:bb:1e:17:4b:db:14:c8: 36:c7:33:1c:8a:b0:ad:58:b2:5e:fd:4f:fc:7d:f0:bf:d3:ab: 08:4b:46:8a:42:e5:40:39:57:91:b0:4a:2e:ca:33:8b:09:d0: a4:a5:c4:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjYwNDE5MDEzMDE1WhcNMjYwNDI2MDEzMDE1WjAYMRYwFAYD VQQDEw02OWU0MzAyNy0zN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbUKoYkV+gmZonC01wU1ntnVlpxOZi3lRIOYd6IXxKqZn2OyEWoMB6gtaS7w gBo/EqhYVFAHRtnlexxZsHHQICg1mYblT+aMhS89BO6X9VgZ0YuvoxvXphVkVzu0 o9alP6BC1T2LFj6SmQLQkzWsK45bJwMFNVfY/CQyAXkpavRtmgWL+RCyXT/ZY7Ai Uf/3XozpAWCX/JdvhC1AO18+JrP84Aec7HRB4wjUEbtXhUKQlV5ID5WhqqPR6oo6 nIPXMIbZVeUVQLBRkZT50YNk4kMTKTeJQsOJ0JyTI8GcC/d4kDQ8ItcfsWkCh8mt KvY6xz9ahzkMtQtPyxuBidIkhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNwK8Kr F+ZQWkwFXgaisKDBdpPLMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuDP2A7eEzKktvmuYdcWATMFWNdKygdv05rBbCpVg5A+IYbOB/GA4G6dRo9lw 5WksfM6B5mJUov2gagsZDSZt2nyePI3QhtDXyis3dkSCCsdS5DwsE5oihdZPBDWg inAkwXzvWo6tWuyImu9M2rDeiGXugeVL9LUpqJSqN+1H0nEVqeJeFGLbH4rceezW Z9ktD4KM3GuzvEUIxB2nc0i8JwtVCv6HIZxYsgk+KAhVqQkD+DsokHXkcstC3ikY P9cN+89LiwxrI9npqS4hJcwwCWG7HhdL2xTINsczHIqwrViyXv1P/H3wv9OrCEtG ikLlQDlXkbBKLsoziwnQpKXEww== -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:44 2026 by rpki-client