$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: IsdGExa46d0r4LO9339G7c2+32+btjHZKKKdCIkLGt4= Subject key identifier: 79:34:C8:20:E1:66:02:10:03:A1:51:DB:C7:E4:E5:97:74:0F:8C:70 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 0737 Signing time: Sat 04 Apr 2026 21:35:59 +0000 Manifest this update: Sat 04 Apr 2026 21:35:59 +0000 Manifest next update: Sat 11 Apr 2026 21:35:59 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: fGS/4vkN1sOoY0KmjKOppB72fHycxWsfIdCCXSkMjJU=) 2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: POpr8wQqUbcrtsin7090l3LSjMlxCYgCxYONDuDwzEA=) 3: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 0A1AOVsjVRyjkOa0stdyBH8yBCmf007m2jZE8cgy4HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Apr 4 21:35:59 2026 GMT Not After : Apr 11 21:35:59 2026 GMT Subject: CN=69d1843f-b252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:28:6d:e2:be:cb:e4:3b:c8:f3:79:ce:f9: 40:25:d3:10:65:0d:f8:93:5b:61:7c:5b:3e:0b:ab: ef:98:4c:b6:32:d5:e3:41:71:60:47:f4:02:0d:fe: 43:dc:fe:83:55:8d:ff:20:74:7c:69:53:0d:fa:f4: f5:af:42:46:18:ad:89:98:b1:fc:30:e4:7b:0b:d9: 84:f8:3f:c4:61:2c:3c:a0:bb:6f:fe:bb:4b:03:35: 34:4d:1d:54:02:e9:c6:6a:e7:53:99:a1:02:23:e4: ea:87:ea:44:58:f8:05:83:8a:c6:3d:5c:fa:65:9c: 6c:3b:27:d9:76:76:8f:a8:6a:4b:b8:2b:96:bd:4b: 3e:45:92:84:30:77:e9:6d:a7:c3:ff:a1:fa:01:e5: ff:cd:d0:c3:2f:6a:05:8a:16:0a:f4:7b:9a:68:59: c3:22:f8:00:a3:03:b9:82:a4:cb:fa:5a:90:2d:26: d6:7c:88:f7:11:96:8c:d0:f7:a4:93:4f:33:da:23: a7:4b:d7:16:50:ae:59:db:ad:a2:a7:0b:0e:17:e3: 17:29:42:18:97:ff:f1:da:ed:dc:5a:23:99:1f:7a: 8d:74:59:0e:f6:81:b1:af:a9:7f:fb:bc:0d:82:41: ee:1a:23:6e:82:21:24:e1:1a:f2:35:78:1d:72:38: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:34:C8:20:E1:66:02:10:03:A1:51:DB:C7:E4:E5:97:74:0F:8C:70 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b3:47:08:d4:20:9a:75:4a:38:3d:50:4c:9b:9a:96:75:38: 4f:3c:80:34:b1:1b:ba:32:d5:ed:5d:d0:7a:9b:ea:44:35:83: 04:7e:5f:c1:90:7b:ec:0f:8a:9f:70:64:d5:92:44:2c:de:3c: 12:4e:5a:c9:6b:25:84:ca:fb:7e:1e:58:b1:4f:f5:e6:35:9f: 72:6d:fa:19:85:7d:e6:50:77:0a:80:91:a5:7b:7c:4b:14:75: f0:45:01:0d:6d:68:14:e7:c2:97:29:f6:70:f1:f9:21:83:b7: 7a:db:73:dc:20:73:2a:cb:59:ca:b9:a5:a6:19:80:20:79:97: 11:20:7f:11:7d:3f:14:33:98:75:76:59:f9:cf:37:7c:bc:67: bb:8f:71:0b:de:9c:53:e0:83:cf:e6:a7:c0:0f:fd:50:5d:16: be:ad:1d:7f:c3:6e:5b:aa:d3:8f:e0:a9:e9:bc:72:d3:af:c5: ff:c2:d1:f5:1b:6d:e9:a0:20:29:22:18:8a:4e:c9:a5:12:86: b1:f6:bb:3f:38:6c:44:e3:31:aa:4c:e5:b8:bd:0c:d9:8f:d2: c2:18:e6:fc:2a:54:fd:44:d7:52:86:41:73:ec:78:d6:54:73: 0f:fb:45:1c:5f:93:53:a0:e8:1d:c6:a3:ce:c1:a2:61:a1:4f: ac:75:f9:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwNDA0MjEzNTU5WhcNMjYwNDExMjEzNTU5WjAYMRYwFAYD VQQDEw02OWQxODQzZi1iMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I0obeK+y+Q7yPN5zvlAJdMQZQ34k1thfFs+C6vvmEy2MtXjQXFgR/QCDf5D 3P6DVY3/IHR8aVMN+vT1r0JGGK2JmLH8MOR7C9mE+D/EYSw8oLtv/rtLAzU0TR1U AunGaudTmaECI+Tqh+pEWPgFg4rGPVz6ZZxsOyfZdnaPqGpLuCuWvUs+RZKEMHfp bafD/6H6AeX/zdDDL2oFihYK9HuaaFnDIvgAowO5gqTL+lqQLSbWfIj3EZaM0Pek k08z2iOnS9cWUK5Z262ipwsOF+MXKUIYl//x2u3cWiOZH3qNdFkO9oGxr6l/+7wN gkHuGiNugiEk4RryNXgdcjjbOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk0yCDh ZgIQA6FR28fk5Zd0D4xwMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIbNHCNQgmnVKOD1QTJualnU4TzyANLEbujLV7V3QepvqRDWDBH5fwZB77A+K n3Bk1ZJELN48Ek5ayWslhMr7fh5YsU/15jWfcm36GYV95lB3CoCRpXt8SxR18EUB DW1oFOfClyn2cPH5IYO3ettz3CBzKstZyrmlphmAIHmXESB/EX0/FDOYdXZZ+c83 fLxnu49xC96cU+CDz+anwA/9UF0Wvq0df8NuW6rTj+Cp6bxy06/F/8LR9Rtt6aAg KSIYik7JpRKGsfa7PzhsROMxqkzluL0M2Y/Swhjm/CpU/UTXUoZBc+x41lRzD/tF HF+TU6DoHcajzsGiYaFPrHX5rw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:34 2026 by rpki-client