$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: XnbL0I18fTRe8cPoYiC9Y8KKFsDkPBZyEE1YRWrT6UQ= Subject key identifier: 32:31:45:9E:22:52:FD:44:02:E2:0C:FF:45:8D:B1:19:2F:78:5F:92 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 0770 Signing time: Thu 16 Apr 2026 21:36:43 +0000 Manifest this update: Thu 16 Apr 2026 21:36:43 +0000 Manifest next update: Thu 23 Apr 2026 21:36:43 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: 8O3d2YOfVnBT5GKzXOwuaXSoifAAzEB2UPEmWOzezCE=) 2: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) 4: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Apr 16 21:36:43 2026 GMT Not After : Apr 23 21:36:43 2026 GMT Subject: CN=69e1566b-37d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:e6:71:85:36:73:13:da:8c:fe:de:72:21: 7c:a6:44:c4:15:32:26:34:50:6c:f8:67:51:9d:f8: 86:de:11:04:68:b4:10:fe:cf:2a:0f:7e:0c:1e:22: 07:1e:cd:dc:65:5a:8a:b6:0f:71:34:cf:66:e3:ca: e9:38:9b:e9:7b:47:33:a4:59:03:a5:00:f9:eb:68: 0d:0b:a2:3c:d4:54:03:d1:c2:70:6f:fd:9f:0f:eb: d5:ee:7a:39:1b:06:83:14:d7:b0:20:52:e0:7e:67: b0:89:65:b4:5c:17:ff:92:48:0c:b3:41:e4:05:5c: 2a:62:f2:cc:d6:af:e2:a2:1c:fa:42:bf:ff:e8:11: 92:08:43:1d:c9:57:71:80:08:b7:4b:67:6b:19:88: 50:c6:ae:04:9d:59:76:4f:c7:4e:f9:6e:b3:82:03: 6d:f5:87:b8:97:f5:8a:2f:6e:10:27:4a:d4:96:6d: 8c:a0:38:9b:a5:9e:b4:bd:2b:11:e6:25:84:c9:74: 84:7a:e4:03:df:ec:8f:1d:97:ef:18:a6:67:05:4c: 88:89:8a:52:1c:be:54:33:34:b6:86:35:83:e2:1d: 97:66:00:db:1e:e4:fc:68:98:fe:28:77:16:6f:08: a3:f1:21:91:57:d3:8e:64:48:b1:b9:5b:cd:30:c0: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:45:9E:22:52:FD:44:02:E2:0C:FF:45:8D:B1:19:2F:78:5F:92 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f5:16:e9:07:cb:34:06:22:1d:36:f7:d8:26:ef:3f:b9:e1: e4:ff:eb:92:0a:98:d5:c1:fb:73:7a:35:a0:c1:c8:d3:92:17: 6b:6d:bf:0f:02:f0:43:c8:ed:90:24:8d:1c:9f:ac:9a:d8:e4: 5a:da:8d:f5:0d:1f:fa:ce:e6:9b:43:47:93:e3:07:fe:18:0e: 4f:a1:01:5d:7e:b8:31:49:6d:2d:65:b4:3b:03:c1:06:26:9e: 34:24:ee:37:23:20:cd:d3:a6:dc:91:02:79:fc:45:6f:c4:47: 86:86:e3:c0:4c:ab:68:3c:2a:87:24:93:e4:64:47:5c:43:e5: 7b:82:d9:e5:c5:d8:78:5a:49:78:6a:ed:c9:36:63:1e:ee:a4: f9:78:b3:f1:9e:ea:87:71:fa:76:5d:01:f5:65:1b:db:28:a7: 5d:05:35:05:f0:eb:82:51:51:fb:5c:d4:fd:57:5c:33:55:2f: b7:13:89:0e:f9:fe:0c:de:bd:07:aa:c5:71:3e:3d:3b:bf:07: 95:21:d6:ef:db:5d:cd:e3:c5:7c:16:b9:0e:d5:8a:f9:8c:20: aa:e1:e1:d1:2e:5a:7e:d5:18:74:fc:d8:70:39:e5:ff:70:60: 08:d1:ae:c7:0e:c9:62:ac:cb:cc:81:bf:be:24:75:61:33:5c: b6:9f:1f:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwNDE2MjEzNjQzWhcNMjYwNDIzMjEzNjQzWjAYMRYwFAYD VQQDEw02OWUxNTY2Yi0zN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo97mcYU2cxPajP7eciF8pkTEFTImNFBs+GdRnfiG3hEEaLQQ/s8qD34MHiIH Hs3cZVqKtg9xNM9m48rpOJvpe0czpFkDpQD562gNC6I81FQD0cJwb/2fD+vV7no5 GwaDFNewIFLgfmewiWW0XBf/kkgMs0HkBVwqYvLM1q/iohz6Qr//6BGSCEMdyVdx gAi3S2drGYhQxq4EnVl2T8dO+W6zggNt9Ye4l/WKL24QJ0rUlm2MoDibpZ60vSsR 5iWEyXSEeuQD3+yPHZfvGKZnBUyIiYpSHL5UMzS2hjWD4h2XZgDbHuT8aJj+KHcW bwij8SGRV9OOZEixuVvNMMA+6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIxRZ4i Uv1EAuIM/0WNsRkveF+SMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvUW6QfLNAYiHTb32CbvP7nh5P/rkgqY1cH7c3o1oMHI05IXa22/DwLwQ8jt kCSNHJ+smtjkWtqN9Q0f+s7mm0NHk+MH/hgOT6EBXX64MUltLWW0OwPBBiaeNCTu NyMgzdOm3JECefxFb8RHhobjwEyraDwqhyST5GRHXEPle4LZ5cXYeFpJeGrtyTZj Hu6k+Xiz8Z7qh3H6dl0B9WUb2yinXQU1BfDrglFR+1zU/VdcM1UvtxOJDvn+DN69 B6rFcT49O78HlSHW79tdzePFfBa5DtWK+YwgquHh0S5aftUYdPzYcDnl/3BgCNGu xw7JYqzLzIG/viR1YTNctp8fJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 04:14:02 2026 by rpki-client