$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: hPzBZLXQQb8QZxlNX/7L0t6cyi7+LEN99ZX2IPTYpCQ= Subject key identifier: 5E:80:0F:48:F5:52:E5:D9:40:AA:4B:4A:F6:E4:79:2F:50:05:7A:0E Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 01E1 Signing time: Sun 05 Apr 2026 02:59:51 +0000 Manifest this update: Sun 05 Apr 2026 02:59:50 +0000 Manifest next update: Sun 12 Apr 2026 02:59:50 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: 20WIKkp0/UGMgseTd+2Ye4NvPe0dNqfnH/SUpKhk/Yo=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Apr 5 02:59:50 2026 GMT Not After : Apr 12 02:59:50 2026 GMT Subject: CN=69d1d027-b11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:6b:ca:5e:fa:44:51:2e:e7:da:6f:12:a6: 3a:03:bd:18:a5:7e:c9:de:a9:3c:5a:d4:42:40:fb: 0f:72:ab:e6:bc:6d:ed:1f:ae:8b:9b:5d:9c:07:9a: 0b:1d:62:9f:dc:91:18:73:c9:94:d6:03:b6:c3:0d: c4:e3:17:cf:cc:c6:4b:83:2e:36:78:e6:ca:81:7b: e9:bf:76:2e:49:43:fb:b3:4c:36:0b:dc:7c:19:f0: 27:5f:57:85:1d:13:0d:94:fe:8e:ca:e3:36:94:a5: ff:7c:d1:51:a9:a5:64:7e:8d:b8:b8:8c:fc:08:97: 7e:6b:19:cd:ae:e1:91:f3:b1:b8:17:88:e3:ef:36: cc:ce:63:9a:29:18:f5:72:19:27:e3:53:ca:81:8a: cd:0f:d0:45:fa:6b:62:e4:74:79:da:86:cd:2a:0e: c1:71:06:33:fe:39:1c:ab:a5:7f:cf:77:e0:0c:67: 78:b9:74:6a:9b:1f:6c:44:95:18:a9:8d:77:c2:e5: 05:ff:02:89:6a:ac:f4:07:53:89:c4:5e:af:7b:fd: e1:c9:ca:7b:74:a3:d6:22:2f:db:19:73:2e:26:a8: 95:0f:d6:5b:eb:33:85:18:f0:36:71:47:28:b0:74: 82:37:44:24:bc:16:13:a4:85:14:3b:96:32:72:1a: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:0F:48:F5:52:E5:D9:40:AA:4B:4A:F6:E4:79:2F:50:05:7A:0E X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:54:1d:40:76:eb:48:b0:97:1d:03:41:b6:af:85:fd:a0:f3: a4:64:6a:69:a3:be:a8:57:1b:60:19:57:a0:58:af:b2:8f:73: 49:2c:b6:50:37:a7:34:4c:d2:8c:9b:b2:6c:09:ce:9a:ec:04: 27:14:1d:0f:b6:51:34:01:a8:d6:c5:12:96:00:84:b5:46:e1: c4:c3:1b:64:3e:76:f0:0c:d3:b2:fa:be:43:5e:32:32:81:55: da:06:a0:5b:a8:a7:d8:0f:07:ff:68:93:5d:5a:19:79:d4:0d: 22:bb:de:5d:60:80:dc:b4:77:ee:d9:39:fc:99:a8:cc:54:77: 16:ff:97:70:af:49:89:f2:29:8a:f3:41:3a:2e:49:13:79:e2: 87:bf:ae:38:e2:3c:31:a5:08:b3:c6:c7:1f:ae:26:ce:59:13: 93:ae:e0:0b:52:15:8c:4c:99:90:3d:2a:d2:94:c0:80:e7:76: a4:fa:f3:03:08:cf:29:6d:81:bb:10:f6:65:0f:06:4a:42:17: 0a:cf:88:e8:80:9a:7c:8f:0e:e1:33:9c:97:f8:fb:82:0f:b6: 27:0f:16:20:af:ee:ca:44:da:f1:18:b3:cc:3f:29:32:8f:d0: b2:6d:75:98:db:cf:e9:e5:a4:75:81:75:69:3e:3c:c7:e9:d8: e8:66:75:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjYwNDA1MDI1OTUwWhcNMjYwNDEyMDI1OTUwWjAYMRYwFAYD VQQDEw02OWQxZDAyNy1iMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt05ryl76RFEu59pvEqY6A70YpX7J3qk8WtRCQPsPcqvmvG3tH66Lm12cB5oL HWKf3JEYc8mU1gO2ww3E4xfPzMZLgy42eObKgXvpv3YuSUP7s0w2C9x8GfAnX1eF HRMNlP6OyuM2lKX/fNFRqaVkfo24uIz8CJd+axnNruGR87G4F4jj7zbMzmOaKRj1 chkn41PKgYrND9BF+mti5HR52obNKg7BcQYz/jkcq6V/z3fgDGd4uXRqmx9sRJUY qY13wuUF/wKJaqz0B1OJxF6ve/3hycp7dKPWIi/bGXMuJqiVD9Zb6zOFGPA2cUco sHSCN0QkvBYTpIUUO5YychrhZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6AD0j1 UuXZQKpLSvbkeS9QBXoOMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3 cFQwa1J1X2JETUJad1ZKTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVVQdQHbrSLCXHQNBtq+F/aDzpGRqaaO+qFcbYBlXoFivso9zSSy2UDenNEzS jJuybAnOmuwEJxQdD7ZRNAGo1sUSlgCEtUbhxMMbZD528AzTsvq+Q14yMoFV2gag W6in2A8H/2iTXVoZedQNIrveXWCA3LR37tk5/JmozFR3Fv+XcK9JifIpivNBOi5J E3nih7+uOOI8MaUIs8bHH64mzlkTk67gC1IVjEyZkD0q0pTAgOd2pPrzAwjPKW2B uxD2ZQ8GSkIXCs+I6ICafI8O4TOcl/j7gg+2Jw8WIK/uykTa8RizzD8pMo/Qsm11 mNvP6eWkdYF1aT48x+nY6GZ11A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:23:09 2026 by rpki-client