$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json) Hash identifier: RIaFd2wTeottQctgHwI02JNj2fqjJv8vPALsqaRFVcM= Subject key identifier: 2D:FC:5D:D6:14:AB:A1:45:25:04:94:E1:30:50:E9:1E:AF:50:B4:FE Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft Manifest number: 28 Signing time: Sun 05 Apr 2026 08:06:15 +0000 Manifest this update: Sun 05 Apr 2026 08:06:15 +0000 Manifest next update: Sun 12 Apr 2026 08:06:15 +0000 Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: gihnrisfwYDvC/URnAXAUAHYNHJSMyATzMTDSH/stRY=) 2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF Validity Not Before: Apr 5 08:06:15 2026 GMT Not After : Apr 12 08:06:15 2026 GMT Subject: CN=69d217f7-6fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:58:c0:28:86:c0:6f:a5:2f:29:4b:cc:0b: d1:d2:63:83:46:14:ff:b1:e1:97:68:a3:24:9b:c0: 48:fc:2b:fd:04:e4:6b:6d:48:f8:09:35:13:f6:7a: 36:24:85:38:cf:16:85:8a:61:12:cd:27:ce:6e:bf: bd:4c:09:c9:e8:1d:7e:b7:48:7a:1a:6f:2b:ef:98: 51:3c:d5:a5:23:cc:d9:e1:02:4b:f9:af:85:04:2e: 32:22:22:ec:0f:ae:e8:74:dc:d9:c8:ac:d2:48:00: a0:a9:a7:cb:80:6b:0f:31:96:90:3c:4d:28:31:1c: f8:c4:d9:51:63:30:a3:b9:09:6c:6c:61:91:7c:07: a7:95:23:6d:fe:af:14:59:6e:ed:cd:4e:37:8e:e6: e7:36:98:7b:d5:eb:f3:a9:2d:cd:f6:a1:03:c6:0c: 2f:91:87:bf:ca:6f:ea:cd:c4:3d:15:5a:59:12:13: 00:d6:eb:7b:c7:fe:a8:ef:db:88:06:29:09:13:1a: 1f:24:0e:c0:04:c4:42:15:78:72:89:74:1f:98:19: 7f:4f:40:8e:0f:96:80:20:fb:35:1b:fc:35:38:e1: f6:6a:69:43:c8:92:49:b9:2b:a9:38:49:0a:da:e7: 08:e4:8d:e8:e2:72:7f:1e:6b:d0:d2:b2:3e:19:53: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FC:5D:D6:14:AB:A1:45:25:04:94:E1:30:50:E9:1E:AF:50:B4:FE X509v3 Authority Key Identifier: keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:74:c4:66:96:cd:33:74:26:a3:66:6a:3f:4f:bb:5d:31:7c: ba:a4:45:92:ae:98:b4:38:09:e7:99:05:a6:69:7b:e8:df:0d: 54:53:bd:77:30:d9:db:b1:33:79:51:1b:af:bb:f3:5e:8b:57: 4d:5c:2e:fe:90:30:91:9b:7c:57:96:32:0c:7f:84:8a:bf:6a: 2b:92:ad:b6:b2:78:21:72:86:c9:ea:4f:22:88:c5:1b:4e:fe: 15:01:f5:91:e1:29:1a:6d:32:46:91:9b:26:e7:5b:d2:ff:3b: a2:ee:60:67:6e:02:66:ea:a7:3c:c4:5d:73:57:22:aa:f5:37: 57:6d:f5:10:75:ac:79:af:5d:67:06:ce:4d:2f:b2:04:04:64: 0c:67:b3:39:63:59:12:b7:38:c4:02:59:24:9a:55:08:a8:59: 5f:31:cd:3f:db:0b:a5:75:90:6c:0c:6f:a6:1f:1a:aa:53:10: 50:67:9f:fe:eb:5f:34:79:b8:f2:18:4f:72:54:34:bc:48:b4: ca:69:ef:b1:b9:44:99:58:39:13:46:4b:4b:8e:d5:2c:5f:ad: 48:bd:30:f5:8f:e1:9f:a6:2d:51:3c:04:b6:34:92:5e:60:b7: 2e:7c:88:01:e5:14:18:d9:86:3d:61:1a:2d:86:40:2e:5f:f3: c6:93:94:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjcwRjExMC8GA1UEBRMoMUZGOENBRTIyRDJENzI0QUJCRDFDMkQxMjVGQjdEQjdC NEY4NEFGRjAeFw0yNjA0MDUwODA2MTVaFw0yNjA0MTIwODA2MTVaMBgxFjAUBgNV BAMTDTY5ZDIxN2Y3LTZmYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9+VjAKIbAb6UvKUvMC9HSY4NGFP+x4ZdooySbwEj8K/0E5GttSPgJNRP2ejYk hTjPFoWKYRLNJ85uv71MCcnoHX63SHoabyvvmFE81aUjzNnhAkv5r4UELjIiIuwP ruh03NnIrNJIAKCpp8uAaw8xlpA8TSgxHPjE2VFjMKO5CWxsYZF8B6eVI23+rxRZ bu3NTjeO5uc2mHvV6/OpLc32oQPGDC+Rh7/Kb+rNxD0VWlkSEwDW63vH/qjv24gG KQkTGh8kDsAExEIVeHKJdB+YGX9PQI4PloAg+zUb/DU44fZqaUPIkkm5K6k4SQra 5wjkjejicn8ea9DSsj4ZU+DjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULfxd1hSr oUUlBJThMFDpHq9QtP4wHwYDVR0jBBgwFoAUH/jK4i0tckq70cLRJft9t7T4Sv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NzBGL0Y2RUIzMjRFRjlE ODExRjBCN0EzOTY0QjY2NkY1NkJDL0hfaks0aTB0Y2txNzBjTFJKZnQ5dDdUNFN2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSF9qSzRpMHRja3E3MGNMUkpmdDl0N1Q0U3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NzBGL0Y2RUIzMjRFRjlEODExRjBCN0EzOTY0QjY2NkY1NkJDL0hfaks0aTB0Y2tx NzBjTFJKZnQ5dDdUNFN2OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2dMRmls0zdCajZmo/T7tdMXy6pEWSrpi0OAnnmQWmaXvo3w1UU713MNnbsTN5 URuvu/Nei1dNXC7+kDCRm3xXljIMf4SKv2orkq22snghcobJ6k8iiMUbTv4VAfWR 4SkabTJGkZsm51vS/zui7mBnbgJm6qc8xF1zVyKq9TdXbfUQdax5r11nBs5NL7IE BGQMZ7M5Y1kStzjEAlkkmlUIqFlfMc0/2wuldZBsDG+mHxqqUxBQZ5/+6180ebjy GE9yVDS8SLTKae+xuUSZWDkTRktLjtUsX61IvTD1j+Gfpi1RPAS2NJJeYLcufIgB 5RQY2YY9YRothkAuX/PGk5Su -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:10 2026 by rpki-client