$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json) Hash identifier: boUZ4ySLT3LYeEgxRtNujmI/isVqYTGH5vw8vwqns5M= Subject key identifier: 4E:77:EA:D6:88:44:30:D2:77:E7:5D:F0:E7:FC:D4:98:24:BB:EC:B8 Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 Certificate issuer: /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft Manifest number: 21 Signing time: Fri 17 Apr 2026 08:36:46 +0000 Manifest this update: Fri 17 Apr 2026 08:36:45 +0000 Manifest next update: Fri 24 Apr 2026 08:36:45 +0000 Files and hashes: 1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: pcds8an1a0u893wtYoKsRpmvns0vI4VzMHLpr1OJaec=) 2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Validity Not Before: Apr 17 08:36:45 2026 GMT Not After : Apr 24 08:36:45 2026 GMT Subject: CN=69e1f11e-b880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:ee:a0:5e:0e:b1:8c:3e:66:38:51:09:6a: 33:44:36:06:4c:94:57:7f:2a:3b:cf:80:5b:69:87: 28:2b:e3:c9:87:78:45:d1:19:d8:29:49:4e:84:78: 55:f5:03:78:60:c4:70:2c:10:d5:96:6e:13:8b:92: 00:57:a3:3e:69:8f:09:56:d5:47:5c:a5:cd:8a:b8: 16:57:c9:8d:30:de:fa:6b:c0:f7:e7:81:b1:e6:ea: 81:df:46:4b:f9:8e:4c:f1:d7:71:f8:af:06:ba:1f: fb:14:d7:4d:12:f8:40:c3:15:5a:af:98:6e:11:1a: d4:68:dd:67:af:00:52:b3:77:ae:2f:5a:6e:ec:10: 4f:bd:08:a3:77:d5:d6:ea:24:02:d6:d5:e2:56:a0: 35:e3:b7:ad:92:2d:15:df:36:37:b8:01:8b:ca:56: fc:0c:33:cc:1f:71:07:ff:34:88:bb:52:98:b5:df: 24:a0:75:2a:42:db:9b:97:f6:26:f0:34:3b:0f:31: 33:35:1b:3c:97:0e:b8:d2:c0:38:78:dc:ef:66:b0: 44:82:6f:ab:c9:fe:ae:07:8f:1c:78:d4:16:1a:1f: ce:43:f4:f5:29:ee:fe:80:79:fc:cd:30:97:7b:ba: 01:ec:ba:a4:6d:52:e8:95:43:91:cb:b9:b7:51:28: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:EA:D6:88:44:30:D2:77:E7:5D:F0:E7:FC:D4:98:24:BB:EC:B8 X509v3 Authority Key Identifier: keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9a:9c:49:7d:ea:50:8e:50:53:a6:17:7c:a9:42:19:b7:bb: 97:08:6d:fe:99:b8:1e:86:af:3b:46:ce:8d:3b:31:bc:7c:20: 68:a7:31:b9:ed:bf:51:b9:37:46:cf:ca:fb:92:2b:87:eb:d3: a5:94:59:2b:3b:02:9a:bc:35:e5:c6:c7:15:70:54:bf:53:39: f8:5b:03:bf:87:32:97:0b:ff:a5:36:cb:c9:01:1e:7a:81:94: 0f:6c:ae:2e:42:69:f5:f7:f4:12:0a:dd:4f:6d:63:66:ec:20: 3b:67:6b:89:35:c2:d1:4d:b7:08:07:84:16:23:52:bf:b1:4c: 2f:f1:4b:a7:66:75:04:e9:51:aa:aa:e0:cc:a3:3d:49:f9:37: c7:62:d6:42:58:71:d4:8d:e9:4d:b7:9c:fe:88:a1:fb:a5:99: 19:c9:a8:a9:f4:c7:f4:1f:54:00:6b:53:be:4a:49:be:b9:55: 17:5a:52:d9:3c:e4:a6:f6:b0:68:3f:bd:04:c4:d0:27:e9:4a: eb:8d:df:35:4a:18:6b:ee:52:7b:97:b0:ba:77:0f:5d:45:0c: 07:c0:5c:58:c9:02:a0:0b:84:2f:ca:95:b3:f6:05:4f:74:1d: 42:48:b3:3e:62:9d:53:1e:d1:f6:f3:27:72:29:8d:10:a4:55: 6a:b9:60:be -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoODVGMjJEOTIxNTNGMjAxRDU5MjNBOUYyN0Y5NjFGQzc2 RDcxMTlCODAeFw0yNjA0MTcwODM2NDVaFw0yNjA0MjQwODM2NDVaMBgxFjAUBgNV BAMTDTY5ZTFmMTFlLWI4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMee6gXg6xjD5mOFEJajNENgZMlFd/KjvPgFtphygr48mHeEXRGdgpSU6EeFX1 A3hgxHAsENWWbhOLkgBXoz5pjwlW1Udcpc2KuBZXyY0w3vprwPfngbHm6oHfRkv5 jkzx13H4rwa6H/sU100S+EDDFVqvmG4RGtRo3WevAFKzd64vWm7sEE+9CKN31dbq JALW1eJWoDXjt62SLRXfNje4AYvKVvwMM8wfcQf/NIi7Upi13ySgdSpC25uX9ibw NDsPMTM1GzyXDrjSwDh43O9msESCb6vJ/q4Hjxx41BYaH85D9PUp7v6AefzNMJd7 ugHsuqRtUuiVQ5HLubdRKDszAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTnfq1ohE MNJ3513w5/zUmCS77LgwHwYDVR0jBBgwFoAUhfItkhU/IB1ZI6nyf5Yfx21xGbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0REREMzOTE2MTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIxWkk2bnlmNVlmeDIxeEdi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGZJdGtoVV9JQjFaSTZueWY1WWZ4MjF4R2JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0REREMzOTE2MTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIx Wkk2bnlmNVlmeDIxeEdiZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBimpxJfepQjlBTphd8qUIZt7uXCG3+mbgehq87Rs6NOzG8fCBopzG57b9RuTdG z8r7kiuH69OllFkrOwKavDXlxscVcFS/Uzn4WwO/hzKXC/+lNsvJAR56gZQPbK4u Qmn19/QSCt1PbWNm7CA7Z2uJNcLRTbcIB4QWI1K/sUwv8UunZnUE6VGqquDMoz1J +TfHYtZCWHHUjelNt5z+iKH7pZkZyaip9Mf0H1QAa1O+Skm+uVUXWlLZPOSm9rBo P70ExNAn6Urrjd81Shhr7lJ7l7C6dw9dRQwHwFxYyQKgC4QvypWz9gVPdB1CSLM+ Yp1THtH28ydyKY0QpFVquWC+ -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:12 2026 by rpki-client