$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: r+HULpuZ+hesS1aI69dIe/+0B3lB5YqneFASLCI8aG0= Subject key identifier: 03:59:B4:E7:E7:63:32:A8:5F:4F:81:38:E7:2B:01:94:1D:1E:BD:32 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 04D2 Signing time: Thu 16 Apr 2026 23:45:27 +0000 Manifest this update: Thu 16 Apr 2026 23:45:27 +0000 Manifest next update: Thu 23 Apr 2026 23:45:27 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: rLp73Q89nbOTbRr4P2r/zzXkNinvA/C0G4bghwW8+zE=) 2: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=) 3: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Apr 16 23:45:27 2026 GMT Not After : Apr 23 23:45:27 2026 GMT Subject: CN=69e17497-e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:de:4f:9c:15:bd:2a:4f:d6:05:ea:69:98: 84:6b:e2:20:99:54:46:5b:91:af:10:01:cc:56:65: 2a:af:1b:87:69:20:0e:fd:5c:b1:fe:04:16:d3:7a: d1:e6:55:43:2a:4d:27:f6:d6:41:45:b6:dd:2f:28: 86:36:53:80:9e:7e:9c:b1:8d:57:68:78:c8:42:7b: 61:72:c4:fc:7a:7a:25:56:9d:33:14:fc:cc:eb:93: 65:84:d2:1d:dc:25:38:94:03:42:ae:18:90:3a:9d: e0:69:18:9d:4f:ae:ff:08:6e:6b:d5:0e:bf:01:5d: 7e:5e:a3:f7:73:45:40:6b:da:55:d9:d7:d7:e4:c7: f5:01:2b:a4:41:38:9b:f5:c2:4e:cf:32:9d:f9:8d: 38:c7:bf:74:20:b7:36:12:35:6d:f4:ce:f6:c2:88: c3:05:a9:40:fc:44:71:c2:90:f9:7a:25:dd:47:54: c9:18:e4:fb:73:66:db:cf:e1:1c:17:e3:d3:a5:85: a2:06:6b:cf:70:02:79:e5:9a:a2:78:52:1a:4d:0e: 95:5f:52:65:7b:26:4b:f3:f3:fc:70:a5:d9:98:10: 33:8d:03:f3:1e:1b:f2:74:61:c7:25:d0:91:c9:6d: 41:81:6e:04:7f:2e:6d:29:a4:01:ed:7f:1d:a6:e8: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:B4:E7:E7:63:32:A8:5F:4F:81:38:E7:2B:01:94:1D:1E:BD:32 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0b:08:ce:16:89:ef:35:d6:ff:1c:48:8a:5e:0f:2a:9b:9a: 5b:a7:86:03:8e:73:1a:23:0a:21:34:9f:8c:a2:03:3f:66:13: 00:e4:44:17:fd:99:6e:df:48:96:5b:b0:3c:9f:17:ed:44:bb: 42:07:be:66:c3:88:2c:b1:d5:ec:b9:54:b6:2f:b1:9d:d7:02: 2e:eb:15:a0:8e:93:72:a1:5e:63:b8:33:b8:c9:a0:83:d1:d0: cc:65:ec:c3:ee:ab:f7:7f:87:48:cc:3e:32:ba:22:0d:9b:23: b4:d2:56:10:02:78:6b:ec:33:4c:0f:c7:b0:bf:a4:47:3d:4e: 6f:bb:8e:00:bc:75:33:85:cd:fd:54:a6:03:fd:a4:47:28:56: 63:60:64:74:66:29:83:b3:42:8f:86:dc:c5:af:7f:11:37:a1: 81:31:9b:d9:04:af:ab:c0:ff:68:e6:55:f1:45:08:d6:bc:9d: 28:0b:bf:54:e1:ae:23:2a:a1:54:83:99:3f:7f:25:11:94:73: 58:e3:00:92:63:b9:1c:16:ab:95:50:0b:96:4b:1b:a0:a4:40: 1e:59:dd:15:20:c8:64:62:7a:89:fc:0f:bd:71:34:fd:b2:9d: fb:4b:cd:75:a4:55:cd:16:48:a4:a2:2e:e2:3f:5e:7e:3d:9c: 58:4c:a6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjYwNDE2MjM0NTI3WhcNMjYwNDIzMjM0NTI3WjAYMRYwFAYD VQQDEw02OWUxNzQ5Ny1lMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOzeT5wVvSpP1gXqaZiEa+IgmVRGW5GvEAHMVmUqrxuHaSAO/Vyx/gQW03rR 5lVDKk0n9tZBRbbdLyiGNlOAnn6csY1XaHjIQnthcsT8enolVp0zFPzM65NlhNId 3CU4lANCrhiQOp3gaRidT67/CG5r1Q6/AV1+XqP3c0VAa9pV2dfX5Mf1ASukQTib 9cJOzzKd+Y04x790ILc2EjVt9M72wojDBalA/ERxwpD5eiXdR1TJGOT7c2bbz+Ec F+PTpYWiBmvPcAJ55ZqieFIaTQ6VX1JleyZL8/P8cKXZmBAzjQPzHhvydGHHJdCR yW1BgW4Efy5tKaQB7X8dpugW0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANZtOfn YzKoX0+BOOcrAZQdHr0yMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATgsIzhaJ7zXW/xxIil4PKpuaW6eGA45zGiMKITSfjKIDP2YTAOREF/2Zbt9I lluwPJ8X7US7Qge+ZsOILLHV7LlUti+xndcCLusVoI6TcqFeY7gzuMmgg9HQzGXs w+6r93+HSMw+MroiDZsjtNJWEAJ4a+wzTA/HsL+kRz1Ob7uOALx1M4XN/VSmA/2k RyhWY2BkdGYpg7NCj4bcxa9/ETehgTGb2QSvq8D/aOZV8UUI1rydKAu/VOGuIyqh VIOZP38lEZRzWOMAkmO5HBarlVALlksboKRAHlndFSDIZGJ6ifwPvXE0/bKd+0vN daRVzRZIpKIu4j9efj2cWEym9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:40 2026 by rpki-client