$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: 8Ex7APRCem3GDp5uDUDPvBAeQGTc81AFG+wL//9kNz8= Subject key identifier: 88:A6:06:33:00:0E:8A:6D:65:03:6E:57:BA:C6:1A:B1:73:56:60:92 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0238 Signing time: Sun 05 Apr 2026 02:12:27 +0000 Manifest this update: Sun 05 Apr 2026 02:12:26 +0000 Manifest next update: Sun 12 Apr 2026 02:12:26 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: /aAlrYKBXuH5BxBdRZkEJ5//O6d5lgPMYsHuFY4YV94=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: JBVdMn9V63ntfKzu1SgO4Amcoz4X4cr4DQDKXv5eI+0=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: 5bqa2F16x3K2ufD94UWeJcKjSY7OuoSHPB7AZTdIMpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Apr 5 02:12:26 2026 GMT Not After : Apr 12 02:12:26 2026 GMT Subject: CN=69d1c50b-3cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:c2:c0:cc:b1:25:f5:74:34:2b:49:28:7e: 69:bb:48:fe:99:fe:e6:a9:32:d3:49:f3:94:cc:de: cd:d1:5d:79:dc:7d:1d:9b:c6:47:84:e7:c2:e8:68: 05:8c:f2:fa:06:fe:09:7f:72:3a:d7:8a:bb:76:f3: 07:7f:9d:83:13:62:30:08:7e:e1:cd:03:9a:43:4c: 51:67:aa:f6:01:c9:c0:88:94:95:3d:bd:f7:37:e1: 69:f1:42:9e:b4:19:5a:dd:8a:e5:1e:df:e5:7a:60: 1a:6c:97:0b:62:86:4a:1f:0b:5d:63:b0:70:f6:dc: f5:cb:3f:8d:81:c7:63:2f:03:d5:31:cc:77:a2:db: a0:4f:ce:00:87:d7:ef:a9:03:c1:15:46:8a:eb:62: 6a:23:6b:aa:57:be:06:ac:eb:dc:31:d5:94:1f:1e: 49:c3:d3:5c:34:5d:84:96:ed:81:49:7f:b3:21:b7: 26:cc:6c:84:1c:8e:48:66:be:11:8c:b8:e7:2e:bf: cb:b9:d9:c4:af:68:02:1e:6f:ea:e6:30:1f:84:8d: 78:b2:89:9c:65:1c:d7:b3:4b:46:6b:d6:e9:d4:c8: 22:58:c1:8a:59:cf:8c:c9:2c:5f:2f:c2:ac:23:a3: 0c:c4:de:5f:26:e8:a3:ab:03:f5:d7:78:75:c3:91: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A6:06:33:00:0E:8A:6D:65:03:6E:57:BA:C6:1A:B1:73:56:60:92 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:60:d0:23:8d:80:5a:19:34:63:89:1e:8f:65:30:11:8b:22: 8e:6b:61:8b:90:ae:20:e8:fa:6a:91:0c:36:1f:14:f9:e5:1d: c8:f5:a8:a5:fc:f7:34:d1:2e:c1:db:be:1f:c8:02:2f:d2:4f: 21:7e:bd:64:fa:cf:bb:a7:fc:b1:a5:4f:f0:37:32:6d:b5:0f: 39:9a:7b:a5:fc:24:6a:35:07:c1:4d:b7:28:b8:07:a5:4a:fd: 34:3d:1f:0d:2b:fb:70:42:30:ef:90:3d:d4:d6:c0:e1:c5:89: 2a:fb:f8:a9:5d:49:df:dd:f4:ce:ee:af:db:e6:3c:2b:d9:aa: df:23:e2:dd:72:5f:16:d0:56:e7:c3:96:ac:dc:3c:3b:7d:cc: 3e:a0:e8:63:df:a0:dc:49:46:71:1e:88:b9:bf:c0:6a:24:45: cb:ca:a3:b1:52:3f:17:61:39:59:ee:81:1d:99:1e:bc:f5:c0: 64:77:0f:bc:2e:4e:e2:c2:0c:a5:c4:66:34:66:4b:61:ae:8b: 92:d7:ea:fa:6b:21:a0:e9:81:60:a8:4d:ee:22:ef:cb:f3:23: 7e:78:0f:86:3d:d7:32:69:eb:86:b9:db:e9:9f:60:31:15:5c: b5:76:84:77:7f:86:f6:61:4b:b2:89:4f:9a:48:ac:29:a4:31: a5:f9:02:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwNDA1MDIxMjI2WhcNMjYwNDEyMDIxMjI2WjAYMRYwFAYD VQQDEw02OWQxYzUwYi0zY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoLCwMyxJfV0NCtJKH5pu0j+mf7mqTLTSfOUzN7N0V153H0dm8ZHhOfC6GgF jPL6Bv4Jf3I614q7dvMHf52DE2IwCH7hzQOaQ0xRZ6r2AcnAiJSVPb33N+Fp8UKe tBla3YrlHt/lemAabJcLYoZKHwtdY7Bw9tz1yz+NgcdjLwPVMcx3otugT84Ah9fv qQPBFUaK62JqI2uqV74GrOvcMdWUHx5Jw9NcNF2Elu2BSX+zIbcmzGyEHI5IZr4R jLjnLr/LudnEr2gCHm/q5jAfhI14somcZRzXs0tGa9bp1MgiWMGKWc+MySxfL8Ks I6MMxN5fJuijqwP113h1w5HFLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIimBjMA DoptZQNuV7rGGrFzVmCSMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJmDQI42AWhk0Y4kej2UwEYsijmthi5CuIOj6apEMNh8U+eUdyPWopfz3NNEu wdu+H8gCL9JPIX69ZPrPu6f8saVP8DcybbUPOZp7pfwkajUHwU23KLgHpUr9ND0f DSv7cEIw75A91NbA4cWJKvv4qV1J3930zu6v2+Y8K9mq3yPi3XJfFtBW58OWrNw8 O33MPqDoY9+g3ElGcR6Iub/AaiRFy8qjsVI/F2E5We6BHZkevPXAZHcPvC5O4sIM pcRmNGZLYa6Lktfq+mshoOmBYKhN7iLvy/MjfngPhj3XMmnrhrnb6Z9gMRVctXaE d3+G9mFLsolPmkisKaQxpfkCJQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:59 2026 by rpki-client