$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: DGzrskIM0itnlLOXSamRNFSkPcTo3l5zdQGR/BiYpi4= Subject key identifier: 58:D9:1F:8C:B8:1E:3B:96:A0:74:C7:93:BD:2F:C7:4C:98:C1:22:81 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: F2 Signing time: Fri 17 Apr 2026 06:03:03 +0000 Manifest this update: Fri 17 Apr 2026 06:03:03 +0000 Manifest next update: Fri 24 Apr 2026 06:03:03 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: w7Aa0+FLtK+sRPKvfDS5Gv2YYJATS1hzmJTA7l6381I=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Apr 17 06:03:03 2026 GMT Not After : Apr 24 06:03:03 2026 GMT Subject: CN=69e1cd17-9ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:ec:0b:48:d3:a6:5b:52:94:f1:94:42:b1: d4:a6:70:a5:ad:c5:75:20:b8:06:a4:41:8c:98:b0: fd:f6:7c:7d:43:ef:e7:d2:e9:2f:8b:21:3c:cf:37: 2d:f1:19:e1:e9:0d:02:3d:c2:74:f4:2b:c8:e7:93: d4:b8:54:f7:b7:c8:26:e0:d4:3c:b2:54:10:11:06: 83:48:61:1b:0e:dd:4b:65:bf:16:e0:13:39:17:40: 22:2a:d7:fc:ca:df:65:46:72:de:fc:e4:65:86:71: 35:6e:9c:2c:f9:b7:2d:4e:28:70:11:48:e7:de:a4: 55:8a:0d:12:20:b4:97:11:dd:e2:c7:fb:ef:8e:76: 5b:f1:87:83:70:86:5b:98:42:72:6a:d2:10:8c:82: 14:e5:9f:c1:84:1f:03:28:52:f2:f1:d7:65:5e:15: 43:97:7c:08:ac:d2:cd:85:47:62:23:9d:ec:ee:52: 11:95:da:bf:0a:b9:42:3d:6c:46:d8:30:90:e2:96: 1d:4f:51:2a:53:06:31:e2:79:bd:be:62:22:40:13: 55:8d:30:16:cc:d7:33:92:f0:56:32:85:8f:79:ae: 2a:54:f2:20:ad:f8:b2:3b:e8:17:02:50:bb:5c:14: 5b:f8:06:df:1f:36:44:ac:74:1e:5d:b1:92:18:60: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:1F:8C:B8:1E:3B:96:A0:74:C7:93:BD:2F:C7:4C:98:C1:22:81 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a0:3f:c3:59:ac:ce:e9:4d:a1:06:f6:b2:f6:7b:f7:70:0a: 0d:5b:47:86:19:a5:ab:b2:25:b0:c5:e7:84:43:97:9e:2e:28: 3a:bc:6d:8a:41:7e:91:1a:43:52:48:d7:71:eb:4a:9e:9e:2d: 67:4e:72:6b:6b:f5:42:5b:dd:71:c8:b5:be:42:17:e6:70:f9: 63:28:0d:ed:30:f6:d5:e2:4e:9a:03:cf:64:9b:04:b3:82:9e: ff:6e:fc:7c:8f:23:ad:a4:32:d7:d1:0b:29:ca:9f:ee:31:9a: e0:50:ee:16:1a:9b:62:d8:81:c4:e9:1b:53:08:25:e7:4c:3c: b8:9c:47:ed:aa:b9:78:c8:67:e5:9d:03:66:39:37:e7:15:02: 87:7b:61:d0:0e:6c:3d:de:ad:e7:3f:11:d6:25:0e:dc:c4:37: 75:58:69:e4:48:cc:95:7a:ee:09:f0:d9:60:b7:4c:a5:de:8c: ca:e4:b6:a7:c5:56:a0:85:84:d5:98:0b:73:90:69:3f:6e:03: 38:79:db:60:ee:cd:6d:3e:8d:5d:72:4e:b8:41:48:ce:a1:28: 9d:d4:3c:b9:c8:80:fe:09:06:78:7e:f0:15:8a:9d:d7:1f:63: a2:db:63:ea:7d:74:46:ca:5a:fb:21:d0:11:08:b8:8f:af:d1: 45:cf:e1:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCQ0MxMTAvBgNVBAUTKDFFNDhFRkU1M0U2MkVEMjA0QkE3QTY5NDM4NENCQUM5 MjQ2Nzk0QTcwHhcNMjYwNDE3MDYwMzAzWhcNMjYwNDI0MDYwMzAzWjAYMRYwFAYD VQQDEw02OWUxY2QxNy05ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D7sC0jTpltSlPGUQrHUpnClrcV1ILgGpEGMmLD99nx9Q+/n0ukviyE8zzct 8Rnh6Q0CPcJ09CvI55PUuFT3t8gm4NQ8slQQEQaDSGEbDt1LZb8W4BM5F0AiKtf8 yt9lRnLe/ORlhnE1bpws+bctTihwEUjn3qRVig0SILSXEd3ix/vvjnZb8YeDcIZb mEJyatIQjIIU5Z/BhB8DKFLy8ddlXhVDl3wIrNLNhUdiI53s7lIRldq/CrlCPWxG 2DCQ4pYdT1EqUwYx4nm9vmIiQBNVjTAWzNczkvBWMoWPea4qVPIgrfiyO+gXAlC7 XBRb+AbfHzZErHQeXbGSGGC1YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjZH4y4 HjuWoHTHk70vx0yYwSKBMB8GA1UdIwQYMBaAFB5I7+U+Yu0gS6emlDhMuskkZ5Sn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUJDQy9COTU4OEJBQ0NF NzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdTQkxwNmFVT0V5NnlTUm5s S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUJDQy9COTU4OEJBQ0NFNzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdT QkxwNmFVT0V5NnlTUm5sS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApaA/w1mszulNoQb2svZ793AKDVtHhhmlq7IlsMXnhEOXni4oOrxtikF+kRpD UkjXcetKnp4tZ05ya2v1Qlvdcci1vkIX5nD5YygN7TD21eJOmgPPZJsEs4Ke/278 fI8jraQy19ELKcqf7jGa4FDuFhqbYtiBxOkbUwgl50w8uJxH7aq5eMhn5Z0DZjk3 5xUCh3th0A5sPd6t5z8R1iUO3MQ3dVhp5EjMlXruCfDZYLdMpd6MyuS2p8VWoIWE 1ZgLc5BpP24DOHnbYO7NbT6NXXJOuEFIzqEondQ8uciA/gkGeH7wFYqd1x9jottj 6n10Rspa+yHQEQi4j6/RRc/h7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:12 2026 by rpki-client