$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: e6KuplNwthVUz0+YV4O2eQmS9ehXJRs53vy1qnQ3JSs= Subject key identifier: CA:64:28:C7:3C:C4:26:FA:0E:6F:62:8B:C2:EE:BB:FF:86:8C:F0:80 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 0329 Signing time: Sun 05 Apr 2026 03:24:23 +0000 Manifest this update: Sun 05 Apr 2026 03:24:22 +0000 Manifest next update: Sun 12 Apr 2026 03:24:22 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: P6RYGym0F1vfnzISTZu+i7BgrfQ0BroLWROWW/J/YEQ=) 2: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Apr 5 03:24:22 2026 GMT Not After : Apr 12 03:24:22 2026 GMT Subject: CN=69d1d5e7-1f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:3f:d6:4b:67:ff:36:ae:32:38:b8:b1:be: 52:ed:53:99:d4:d3:ce:16:73:b0:61:93:0b:96:7d: d1:fc:bc:3d:6b:b5:17:a6:1d:a4:85:39:40:b7:76: 10:fb:4a:93:87:49:48:18:23:f4:89:c9:46:45:74: 65:99:2a:30:7f:7b:d4:85:63:41:00:97:83:55:f2: 3c:8f:aa:8e:d1:e4:60:3b:eb:74:4c:67:1b:e1:12: 92:97:13:a8:b7:72:1e:77:f2:2c:e6:eb:f2:ec:51: cc:a8:35:57:b7:2a:bc:c3:14:f6:87:8a:e7:fa:89: e8:9f:42:48:19:49:62:5c:7b:a0:e5:66:ce:fe:05: 23:8c:14:b9:f5:3b:2e:d6:bd:38:86:ab:e8:b6:ac: f4:59:eb:c6:a3:c7:a2:cf:24:a3:11:98:bc:c5:29: 5c:c2:d5:fb:03:bc:6b:0a:33:dd:89:f7:cd:63:f4: 43:83:11:59:e2:3a:56:46:94:ac:55:92:a5:89:e6: 59:44:e0:98:48:91:77:df:77:db:82:61:a2:c6:2b: c5:27:34:6a:4c:77:1c:af:19:fc:19:90:87:33:f9: 4d:21:81:9e:54:21:87:2b:b4:92:0d:a6:42:80:de: e8:6f:1f:b2:8a:40:94:82:4b:57:6f:ad:e3:1f:ae: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:64:28:C7:3C:C4:26:FA:0E:6F:62:8B:C2:EE:BB:FF:86:8C:F0:80 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8d:b2:79:88:28:d2:67:79:7e:a3:9a:e7:25:0a:a8:b5:1b: 6c:c9:6e:5e:aa:ce:4c:8e:cb:7c:a6:77:92:a3:7e:d3:e6:c4: f0:68:ec:ac:5f:a6:7c:10:85:2c:39:f5:77:2d:c1:87:49:46: 9d:c1:ac:06:a9:e8:47:b0:ee:8a:df:a4:53:86:7f:fc:20:ad: f3:b4:59:35:67:ee:bd:3f:9a:51:a3:64:6a:a0:4e:ea:d9:93: 6c:d7:ce:da:89:52:f4:4b:72:4c:e5:1d:fa:d6:dc:ea:6e:dd: 82:f7:19:60:50:8f:70:b4:23:5e:e3:4d:02:3f:83:9f:67:21: 7b:81:39:9f:83:db:fc:a8:37:e8:23:fa:c9:37:81:5f:26:58: e1:9f:3a:22:0e:c3:fd:86:ec:e1:85:78:ee:f3:cb:cd:61:36: 51:3b:a8:f5:2f:be:61:59:e6:af:0d:13:83:b5:73:3a:31:43: b2:6b:03:cf:7f:bb:22:7b:d2:45:ff:eb:85:cc:85:5b:6c:89: c8:e4:0a:e5:10:b7:e1:e5:b2:67:66:53:d9:29:5a:11:53:a7: 43:d7:d3:38:42:46:19:3d:4f:47:4f:72:28:e6:6b:d4:15:af: 3b:a8:c3:5a:71:52:32:79:3e:cb:54:c7:73:77:ea:88:df:b1: 2c:0a:67:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjYwNDA1MDMyNDIyWhcNMjYwNDEyMDMyNDIyWjAYMRYwFAYD VQQDEw02OWQxZDVlNy0xZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIo/1ktn/zauMji4sb5S7VOZ1NPOFnOwYZMLln3R/Lw9a7UXph2khTlAt3YQ +0qTh0lIGCP0iclGRXRlmSowf3vUhWNBAJeDVfI8j6qO0eRgO+t0TGcb4RKSlxOo t3Ied/Is5uvy7FHMqDVXtyq8wxT2h4rn+onon0JIGUliXHug5WbO/gUjjBS59Tsu 1r04hqvotqz0WevGo8eizySjEZi8xSlcwtX7A7xrCjPdiffNY/RDgxFZ4jpWRpSs VZKlieZZROCYSJF333fbgmGixivFJzRqTHccrxn8GZCHM/lNIYGeVCGHK7SSDaZC gN7obx+yikCUgktXb63jH668+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpkKMc8 xCb6Dm9ii8Luu/+GjPCAMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt42yeYgo0md5fqOa5yUKqLUbbMluXqrOTI7LfKZ3kqN+0+bE8GjsrF+mfBCF LDn1dy3Bh0lGncGsBqnoR7Duit+kU4Z//CCt87RZNWfuvT+aUaNkaqBO6tmTbNfO 2olS9EtyTOUd+tbc6m7dgvcZYFCPcLQjXuNNAj+Dn2che4E5n4Pb/Kg36CP6yTeB XyZY4Z86Ig7D/Ybs4YV47vPLzWE2UTuo9S++YVnmrw0Tg7VzOjFDsmsDz3+7InvS Rf/rhcyFW2yJyOQK5RC34eWyZ2ZT2SlaEVOnQ9fTOEJGGT1PR09yKOZr1BWvO6jD WnFSMnk+y1THc3fqiN+xLApnyg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:04 2026 by rpki-client