$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json) Hash identifier: D1+/z0MPX6SPT9dWJWIccdbyeAavEf6B3/uk2seushI= Subject key identifier: AD:00:08:76:A6:8B:F9:D9:CA:11:BA:2B:48:6E:26:D9:CE:14:79:9B Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft Manifest number: 0120 Signing time: Sun 05 Apr 2026 05:40:05 +0000 Manifest this update: Sun 05 Apr 2026 05:40:05 +0000 Manifest next update: Sun 12 Apr 2026 05:40:05 +0000 Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: 6Rb/gXUBZ2OBUp9Nete1+u6xf4oLeIHyPue/GU1ktWw=) 2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Validity Not Before: Apr 5 05:40:05 2026 GMT Not After : Apr 12 05:40:05 2026 GMT Subject: CN=69d1f5b5-f558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:01:be:94:52:30:52:a8:a1:32:04:d0:19: a7:c8:b9:54:df:9c:24:a4:57:69:19:a0:6d:58:64: cf:f6:3d:03:01:f9:1c:07:b9:44:6b:42:5c:3a:ba: 1b:8f:37:af:a9:94:a3:3d:80:5c:4c:3b:46:45:7d: 8a:9c:fe:a0:cf:41:a3:c0:f6:57:db:9b:ab:2c:8b: 9d:5c:8e:3c:bd:ff:25:24:63:39:6d:66:d7:61:02: d4:29:34:0d:18:21:2c:c9:18:e4:b3:e0:81:52:29: 9f:fa:c7:67:85:4c:96:25:9f:7d:dc:21:e6:9c:08: 0a:8d:b3:86:a4:79:51:bc:84:55:f4:c3:51:5c:3d: 36:f6:19:6c:70:04:f2:c7:b7:4a:ad:60:78:38:14: 1b:8e:6c:3c:b7:95:98:0f:22:3a:45:bd:e4:25:c1: 8a:1d:2b:1b:60:58:2f:ce:31:c4:36:bc:ce:91:5a: 61:b8:2d:05:ac:3d:9c:a7:31:fd:c1:b3:b2:5a:79: 7b:92:25:53:b9:47:11:1b:21:78:37:b9:e7:61:ce: df:85:9b:34:b1:88:b2:52:2e:ac:16:6e:60:e3:8b: d0:7b:97:0f:43:8a:b5:1e:07:bd:42:8e:9b:5a:08: f6:e4:3b:97:a8:5b:d0:f0:93:1a:68:0e:dd:0e:a5: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:00:08:76:A6:8B:F9:D9:CA:11:BA:2B:48:6E:26:D9:CE:14:79:9B X509v3 Authority Key Identifier: keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cd:20:b1:25:e5:26:bb:2f:db:65:19:36:1c:38:64:d5:6e: e8:4b:39:c1:25:fc:f5:39:b0:62:d6:07:98:ef:66:d4:5c:9c: d2:00:85:65:b1:41:82:0b:f3:71:d5:fd:54:87:3d:b4:03:4a: 9d:f9:da:a3:65:7b:dc:4f:52:4f:bc:24:25:a6:3a:38:dc:21: 73:63:a2:46:8b:44:65:52:f3:9c:04:70:62:8f:6b:15:7b:57: 6b:ea:e2:1a:44:fc:1c:13:ce:cb:b4:cd:ea:70:0e:09:ae:c2: f1:61:fe:a5:4c:ae:34:08:52:a1:d4:d2:10:5c:08:a2:ed:6a: 08:c1:7d:06:1d:28:5a:0a:e6:2a:0b:07:3f:89:eb:aa:f8:00: 6a:bf:c1:fd:da:34:7e:7d:37:9f:f2:c6:3b:01:c1:87:13:8b: ad:5b:71:42:80:ee:56:39:2d:b2:52:c0:c5:95:33:82:db:5d: 0e:5f:9e:84:f0:da:5d:4d:dc:49:f7:7c:6f:c6:69:03:47:26: a4:81:ae:25:88:04:4e:d9:9f:cc:68:9c:e3:07:80:01:f5:82: c5:20:55:b3:fd:65:1b:e3:81:ae:ec:39:e2:51:ce:97:cf:3b: 1f:ac:87:56:f4:69:60:7b:b2:32:5c:d8:07:27:1c:e8:ac:0c: e1:d4:ff:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QzMxMTAvBgNVBAUTKDFFNUMxMDdFRkQwM0NGMTNEMjE0QTM5QTZBMkNFOERE QUQzMDQ3MEUwHhcNMjYwNDA1MDU0MDA1WhcNMjYwNDEyMDU0MDA1WjAYMRYwFAYD VQQDEw02OWQxZjViNS1mNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xUBvpRSMFKooTIE0BmnyLlU35wkpFdpGaBtWGTP9j0DAfkcB7lEa0JcOrob jzevqZSjPYBcTDtGRX2KnP6gz0GjwPZX25urLIudXI48vf8lJGM5bWbXYQLUKTQN GCEsyRjks+CBUimf+sdnhUyWJZ993CHmnAgKjbOGpHlRvIRV9MNRXD029hlscATy x7dKrWB4OBQbjmw8t5WYDyI6Rb3kJcGKHSsbYFgvzjHENrzOkVphuC0FrD2cpzH9 wbOyWnl7kiVTuUcRGyF4N7nnYc7fhZs0sYiyUi6sFm5g44vQe5cPQ4q1Hge9Qo6b Wgj25DuXqFvQ8JMaaA7dDqUHhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0ACHam i/nZyhG6K0huJtnOFHmbMB8GA1UdIwQYMBaAFB5cEH79A88T0hSjmmos6N2tMEcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlDMy80NUNDODJDQzgw NjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4UFNGS09hYWl6bzNhMHdS dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsd1FmdjBEenhQU0ZLT2FhaXpvM2Ewd1J3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlDMy80NUNDODJDQzgwNjkxMUVGODJDOTc3M0NDNEY5QUUwMi9IbHdRZnYwRHp4 UFNGS09hYWl6bzNhMHdSdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbM0gsSXlJrsv22UZNhw4ZNVu6Es5wSX89TmwYtYHmO9m1Fyc0gCFZbFBggvz cdX9VIc9tANKnfnao2V73E9ST7wkJaY6ONwhc2OiRotEZVLznARwYo9rFXtXa+ri GkT8HBPOy7TN6nAOCa7C8WH+pUyuNAhSodTSEFwIou1qCMF9Bh0oWgrmKgsHP4nr qvgAar/B/do0fn03n/LGOwHBhxOLrVtxQoDuVjktslLAxZUzgttdDl+ehPDaXU3c Sfd8b8ZpA0cmpIGuJYgETtmfzGic4weAAfWCxSBVs/1lG+OBruw54lHOl887H6yH VvRpYHuyMlzYBycc6KwM4dT/Cw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:32 2026 by rpki-client