$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: q5wGleVSL9YqZGMnw24C2a3j1mHtSKYq8DOMXdXl168= Subject key identifier: C3:64:25:B2:A0:E5:68:4F:33:41:BF:EC:A0:1D:28:DE:7B:48:ED:34 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CE9 Signing time: Sat 04 Apr 2026 18:08:42 +0000 Manifest this update: Sat 04 Apr 2026 18:08:41 +0000 Manifest next update: Sat 11 Apr 2026 18:08:41 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: T6Fc4BtJP1oFn5CYnaylWdNvcrb+voyuU34wge7rurg=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Apr 4 18:08:41 2026 GMT Not After : Apr 11 18:08:41 2026 GMT Subject: CN=69d153aa-cdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:7a:48:db:07:a2:86:1e:8b:b9:05:87:a8: 8f:78:ee:53:a7:18:8d:91:be:db:d2:4e:f3:1c:f4: c3:61:08:e4:84:db:03:c4:07:bb:97:c4:08:54:33: ba:ce:bd:28:c1:10:5b:79:50:6d:6a:6c:ee:6f:8e: e7:45:bd:30:4c:8f:b4:f8:bd:ce:68:4c:f1:7f:26: 28:1d:27:b9:a8:40:56:41:31:a9:82:bc:47:8d:c3: f1:0e:a2:95:32:8b:c8:00:05:74:cd:7a:49:d9:1e: c3:e2:64:ca:88:06:92:ee:9a:e1:e5:8e:d0:c9:bf: b3:5d:a4:51:58:a6:5c:be:54:f0:c6:45:bf:94:00: 6c:6c:5b:d0:66:ec:23:06:ca:5a:f3:67:1e:48:81: 07:3a:ff:81:11:4a:1b:14:59:c2:50:1e:dd:41:eb: 5f:79:ec:3f:00:9b:66:e8:9d:b4:ec:99:0d:da:18: 0c:6a:f5:6b:96:01:8f:51:a8:85:77:d8:09:d2:99: 89:15:98:9f:06:a7:5d:19:3c:1e:aa:fd:27:1c:b2: 2f:7d:2f:3f:41:85:3e:da:4e:97:6c:bd:5e:c0:dd: cd:67:f9:7a:a4:03:12:5b:89:40:17:9b:83:5f:71: d0:c5:6e:ac:f4:3f:54:50:19:60:2c:e6:18:ac:f5: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:25:B2:A0:E5:68:4F:33:41:BF:EC:A0:1D:28:DE:7B:48:ED:34 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:0c:11:26:46:a2:58:d9:39:29:bd:8f:d5:03:2b:72:0e: 1c:98:7c:92:37:71:64:7f:f9:24:e5:c8:f8:35:64:7a:7c:6c: 47:2f:95:ec:e3:a0:49:53:25:33:6e:0d:2b:e9:4d:36:46:03: b6:7e:9b:64:9b:ce:93:fa:e2:fb:a3:8f:83:36:25:d1:9f:cb: 99:be:ee:75:6d:b3:78:68:de:b6:c9:8c:94:eb:f2:2a:65:77: 46:d7:e5:68:fc:7d:c2:f0:4f:7a:52:54:f4:c5:06:10:4a:6e: 4f:a7:b6:b0:45:57:e3:f8:58:cf:52:60:eb:7f:42:88:ce:14: 29:69:59:65:28:05:c2:0b:d8:cb:54:c1:4e:2d:16:e3:ed:ff: 64:01:bd:4e:de:9f:71:14:53:c3:42:21:b9:1f:9a:28:20:d6: ab:9a:1e:58:d4:3f:f1:50:3f:15:06:ae:27:d9:c1:fd:a5:f1: 6f:b4:49:69:81:0b:8b:ef:b7:80:ac:fc:47:7e:9c:4d:43:40: ae:64:9d:94:6b:7c:64:94:ae:98:bd:1b:77:96:a5:9e:92:8d: 64:f3:43:ce:7e:ae:5f:fe:b6:a6:df:ad:cd:f5:55:13:e3:d8: 6e:af:26:69:c2:bf:26:d3:20:e9:80:74:81:87:6e:5d:9f:6c: 71:72:bc:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNDA0MTgwODQxWhcNMjYwNDExMTgwODQxWjAYMRYwFAYD VQQDEw02OWQxNTNhYS1jZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSR6SNsHooYei7kFh6iPeO5TpxiNkb7b0k7zHPTDYQjkhNsDxAe7l8QIVDO6 zr0owRBbeVBtamzub47nRb0wTI+0+L3OaEzxfyYoHSe5qEBWQTGpgrxHjcPxDqKV MovIAAV0zXpJ2R7D4mTKiAaS7prh5Y7Qyb+zXaRRWKZcvlTwxkW/lABsbFvQZuwj Bspa82ceSIEHOv+BEUobFFnCUB7dQetfeew/AJtm6J207JkN2hgMavVrlgGPUaiF d9gJ0pmJFZifBqddGTweqv0nHLIvfS8/QYU+2k6XbL1ewN3NZ/l6pAMSW4lAF5uD X3HQxW6s9D9UUBlgLOYYrPUshQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNkJbKg 5WhPM0G/7KAdKN57SO00MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTgMESZGoljZOSm9j9UDK3IOHJh8kjdxZH/5JOXI+DVkenxsRy+V7OOgSVMl M24NK+lNNkYDtn6bZJvOk/ri+6OPgzYl0Z/Lmb7udW2zeGjetsmMlOvyKmV3Rtfl aPx9wvBPelJU9MUGEEpuT6e2sEVX4/hYz1Jg639CiM4UKWlZZSgFwgvYy1TBTi0W 4+3/ZAG9Tt6fcRRTw0IhuR+aKCDWq5oeWNQ/8VA/FQauJ9nB/aXxb7RJaYELi++3 gKz8R36cTUNArmSdlGt8ZJSumL0bd5alnpKNZPNDzn6uX/62pt+tzfVVE+PYbq8m acK/JtMg6YB0gYduXZ9scXK8QA== -----END CERTIFICATE-----Generated at Mon Apr 6 12:47:52 2026 by rpki-client