$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: 684X3d8cxM9T1fQR4mr+nroNXOIwliq3pEwQrRcfKBA= Subject key identifier: 09:D5:B8:68:55:C2:3E:D3:D8:3A:E6:64:B4:43:32:54:89:73:6F:1C Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 028C Signing time: Fri 17 Apr 2026 01:35:26 +0000 Manifest this update: Fri 17 Apr 2026 01:35:26 +0000 Manifest next update: Fri 24 Apr 2026 01:35:26 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: RsX7cciLGFZUJkIXn2gM4k9LDEQ19/PVIoHAsdc99Es=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: eqDK5JxYlPrD2YI5tre8evg6C6tiJ/GL+g0KzbaQtNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Apr 17 01:35:26 2026 GMT Not After : Apr 24 01:35:26 2026 GMT Subject: CN=69e18e5e-6aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6b:df:05:a8:54:2d:5a:be:01:f5:35:3f:76: a4:6d:19:51:52:5f:9e:b2:5c:53:c9:2e:43:9a:af: ee:ba:e0:51:57:97:7d:fe:5f:f2:7d:06:2d:08:7e: 3d:6d:09:b3:ae:6c:17:94:b3:bd:98:96:99:7b:3b: 1d:c5:f5:51:4b:d3:3a:4e:57:fb:35:67:df:a1:a2: 92:e2:99:e3:e8:9c:9c:1c:35:d9:5c:a2:7a:d8:c7: 7b:c7:20:27:50:2a:53:60:77:fc:34:3b:45:40:c3: 87:57:c7:84:b2:21:f0:72:77:34:f7:b8:c8:a2:07: 7c:d1:00:e0:b0:44:98:da:e0:40:97:3f:42:13:21: f4:8b:b8:a8:3d:42:7e:02:a8:fa:f0:15:8a:27:5f: 80:62:7d:13:af:62:a4:53:f5:c3:4c:70:ec:c1:3e: d2:25:6f:e7:a9:92:17:78:b6:e7:46:88:2b:9a:9f: 54:e2:29:83:1a:f6:1e:2f:e5:ac:fa:f9:cb:9c:c8: ce:43:10:e3:a7:53:f6:96:36:a9:ad:76:32:bd:4a: a5:18:a7:f0:9a:e7:26:ae:c1:51:39:40:35:95:78: 70:7f:54:38:f7:75:dc:31:9f:5d:87:b9:25:8d:2f: 68:83:b8:5b:27:5d:3c:b8:32:ae:40:b2:8d:c7:98: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D5:B8:68:55:C2:3E:D3:D8:3A:E6:64:B4:43:32:54:89:73:6F:1C X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e1:2e:ed:68:ec:fe:c9:46:42:4f:64:94:7d:ce:f9:04:33: 1f:e3:af:f2:3d:d6:1e:9c:12:64:d3:47:20:8c:6a:ff:a5:5c: be:3e:36:0f:49:dd:9f:cf:3c:6b:fe:b1:80:4f:eb:a0:89:d3: 04:7d:13:a9:80:b6:8e:74:70:54:43:5b:90:8c:0f:34:00:56: 46:1a:a6:86:90:48:0f:8d:f9:19:f0:c1:df:f6:ac:71:bc:1f: 48:91:0e:34:a2:76:d1:f7:03:ee:1f:d9:d8:14:25:2d:70:20: 2b:39:2d:06:d4:80:12:52:81:24:05:ab:53:15:74:a7:57:7d: 83:c8:af:56:56:09:98:46:35:d8:18:23:f8:59:1b:88:87:0d: eb:ad:0d:18:2d:ee:6a:5c:17:db:ab:86:26:a3:75:72:91:23: 22:09:73:b5:50:8b:73:03:1d:df:f2:dc:5b:bd:81:44:0a:e3: fb:4f:1e:cf:b3:69:45:6a:af:42:c9:3f:4a:30:37:fb:6f:1f: 26:df:c1:cd:20:17:f4:62:21:4a:69:23:ff:2d:94:f2:47:07: ef:3f:b0:5c:06:64:e1:b3:10:43:8d:e7:52:d6:32:7d:68:f9: 40:d1:61:2d:a8:c4:a6:61:57:d7:e9:8e:20:d2:3a:9d:30:17: 7b:dc:01:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjYwNDE3MDEzNTI2WhcNMjYwNDI0MDEzNTI2WjAYMRYwFAYD VQQDEw02OWUxOGU1ZS02YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mvfBahULVq+AfU1P3akbRlRUl+eslxTyS5Dmq/uuuBRV5d9/l/yfQYtCH49 bQmzrmwXlLO9mJaZezsdxfVRS9M6Tlf7NWffoaKS4pnj6JycHDXZXKJ62Md7xyAn UCpTYHf8NDtFQMOHV8eEsiHwcnc097jIogd80QDgsESY2uBAlz9CEyH0i7ioPUJ+ Aqj68BWKJ1+AYn0Tr2KkU/XDTHDswT7SJW/nqZIXeLbnRogrmp9U4imDGvYeL+Ws +vnLnMjOQxDjp1P2ljaprXYyvUqlGKfwmucmrsFROUA1lXhwf1Q493XcMZ9dh7kl jS9og7hbJ108uDKuQLKNx5gu7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnVuGhV wj7T2DrmZLRDMlSJc28cMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe+Eu7Wjs/slGQk9klH3O+QQzH+Ov8j3WHpwSZNNHIIxq/6Vcvj42D0ndn888 a/6xgE/roInTBH0TqYC2jnRwVENbkIwPNABWRhqmhpBID435GfDB3/ascbwfSJEO NKJ20fcD7h/Z2BQlLXAgKzktBtSAElKBJAWrUxV0p1d9g8ivVlYJmEY12Bgj+Fkb iIcN660NGC3ualwX26uGJqN1cpEjIglztVCLcwMd3/LcW72BRArj+08ez7NpRWqv Qsk/SjA3+28fJt/BzSAX9GIhSmkj/y2U8kcH7z+wXAZk4bMQQ43nUtYyfWj5QNFh LajEpmFX1+mOINI6nTAXe9wByw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:55 2026 by rpki-client