$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: Q9kwG03C0WgP6+zP/2EHVVUL95mFgD1mhXvE0UVH+To= Subject key identifier: F9:29:ED:58:39:6F:72:EC:74:7E:76:BC:CA:93:44:3C:A2:4A:FF:9F Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 53 Signing time: Fri 17 Apr 2026 07:52:06 +0000 Manifest this update: Fri 17 Apr 2026 07:52:06 +0000 Manifest next update: Fri 24 Apr 2026 07:52:06 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: +3UDhVBkX+sFc7c0c6kU1+8m7STU1+EX8OTZBHaSorU=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Apr 17 07:52:06 2026 GMT Not After : Apr 24 07:52:06 2026 GMT Subject: CN=69e1e6a6-b57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:81:6f:1f:8a:98:75:3a:10:21:5a:06:0c: f7:e6:75:a7:b3:a7:45:9a:8a:d7:4f:04:89:6b:8c: 9c:c8:bb:fe:43:1a:f2:91:a7:95:7b:35:78:e9:bf: 63:2d:87:94:bf:c0:6b:58:34:75:b8:32:4c:4d:ad: 0a:c2:b1:32:a2:d6:0a:51:9d:f8:66:05:d9:3e:e1: 4d:05:32:3a:0d:78:22:75:3a:f3:44:ce:2d:b8:01: d5:54:1a:50:36:75:f6:31:5e:97:4a:df:d0:f5:14: c5:5e:50:a6:68:66:4b:29:55:0e:75:8e:bf:d5:9b: 3c:6a:37:b4:36:4b:cb:ea:c7:1e:9d:3d:42:34:cf: 7c:eb:e1:11:a7:1b:d0:ef:de:35:40:94:92:a1:f0: 17:ef:c7:df:ed:0d:d6:72:88:03:27:c5:9f:fd:ae: 64:b0:e4:a2:6a:88:58:5d:d5:94:65:42:59:37:3e: 4d:92:24:05:06:be:fc:b4:17:0a:48:ef:01:cd:ed: a7:ac:1a:99:91:c4:ae:15:67:ce:1c:7b:77:47:31: 3f:55:56:ed:7b:d5:31:66:7c:0b:30:5e:c6:8b:f8: 61:4e:ee:6c:a7:e4:42:cf:87:49:25:fe:96:25:7d: 12:22:bf:46:d4:5d:77:a2:45:21:a5:10:59:16:19: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:29:ED:58:39:6F:72:EC:74:7E:76:BC:CA:93:44:3C:A2:4A:FF:9F X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0e:33:c1:fd:c2:0c:e1:0b:81:86:f1:32:cc:6c:59:7b:1b: e2:20:21:15:21:9e:cd:6d:78:9c:80:d1:28:31:2e:f5:b0:8e: 5f:0c:d4:2b:00:2c:11:16:7e:5e:76:b4:73:20:cb:ec:fe:1a: 45:d2:ba:8f:23:a2:ec:d9:0d:a2:4d:ea:ba:7f:8e:5c:78:bd: 37:8f:af:62:76:0b:99:ea:aa:25:d4:11:13:6c:47:2e:66:4f: 66:76:08:e2:67:c6:9d:ca:21:a3:79:5c:a5:f1:0e:23:15:3a: 64:59:b2:8c:4f:2a:60:c3:dd:71:22:dd:a5:3e:1c:1c:0c:3d: 4e:0a:9a:93:22:cf:35:75:6a:0f:c6:b1:4f:d9:2a:5a:b0:73: 4e:8e:2a:70:3b:cb:c5:d5:ed:53:d3:ae:f4:a7:1f:48:c3:8a: 5c:5f:72:ba:0c:2f:5c:bc:57:88:03:90:2f:a8:e0:48:2a:01: 2d:91:60:0c:2c:29:82:dc:00:de:f7:18:49:9c:a8:1e:8a:08: 6e:cd:66:e2:45:9c:76:c7:29:0a:cd:95:12:df:4e:6f:0d:9c: 33:3d:5e:37:bd:4d:70:ef:33:84:bc:44:b2:90:19:c4:83:45: 94:fe:71:ab:cd:af:2d:33:df:b6:a7:35:5a:4e:f3:a7:94:5c: cf:ad:af:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNjA0MTcwNzUyMDZaFw0yNjA0MjQwNzUyMDZaMBgxFjAUBgNV BAMTDTY5ZTFlNmE2LWI1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9hoFvH4qYdToQIVoGDPfmdaezp0WaitdPBIlrjJzIu/5DGvKRp5V7NXjpv2Mt h5S/wGtYNHW4MkxNrQrCsTKi1gpRnfhmBdk+4U0FMjoNeCJ1OvNEzi24AdVUGlA2 dfYxXpdK39D1FMVeUKZoZkspVQ51jr/VmzxqN7Q2S8vqxx6dPUI0z3zr4RGnG9Dv 3jVAlJKh8Bfvx9/tDdZyiAMnxZ/9rmSw5KJqiFhd1ZRlQlk3Pk2SJAUGvvy0FwpI 7wHN7aesGpmRxK4VZ84ce3dHMT9VVu171TFmfAswXsaL+GFO7myn5ELPh0kl/pYl fRIiv0bUXXeiRSGlEFkWGT/jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+SntWDlv cux0fna8ypNEPKJK/58wHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBADjPB/cIM4QuBhvEyzGxZexviICEVIZ7NbXicgNEoMS71sI5fDNQrACwRFn5e drRzIMvs/hpF0rqPI6Ls2Q2iTeq6f45ceL03j69idguZ6qol1BETbEcuZk9mdgji Z8adyiGjeVyl8Q4jFTpkWbKMTypgw91xIt2lPhwcDD1OCpqTIs81dWoPxrFP2Spa sHNOjipwO8vF1e1T0670px9Iw4pcX3K6DC9cvFeIA5AvqOBIKgEtkWAMLCmC3ADe 9xhJnKgeighuzWbiRZx2xykKzZUS305vDZwzPV43vU1w7zOEvESykBnEg0WU/nGr za8tM9+2pzVaTvOnlFzPra/h -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:13 2026 by rpki-client