$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: kK6UCjOjIPRiTlhwtyFELbYa6nVpypwrEw1pdld6VSY= Subject key identifier: 41:89:D5:F2:DB:17:63:10:64:7A:DA:D5:DB:00:86:5F:8F:3A:08:BB Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 012C Signing time: Sun 05 Apr 2026 05:05:53 +0000 Manifest this update: Sun 05 Apr 2026 05:05:52 +0000 Manifest next update: Sun 12 Apr 2026 05:05:52 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: iGsUQAEDel9e36WwjNBjif65Yp9BHBQKfDlKSCKkbMI=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: 6wieboldL+svyfaS92rGNVhaWY2jMOAdUQcLZF1T9Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Apr 5 05:05:52 2026 GMT Not After : Apr 12 05:05:52 2026 GMT Subject: CN=69d1edb1-20e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:96:ca:d2:ad:62:03:a7:ec:c3:69:5e:8a: 3e:e8:b6:d0:87:ca:c1:05:de:76:d4:53:24:aa:78: 24:40:44:13:f0:e9:95:8f:9b:39:47:06:f2:d9:57: 6a:2b:45:cd:19:82:95:fc:b7:e5:35:d9:0d:bf:a5: 9e:2e:a0:dc:d6:b9:12:da:b5:7b:6a:a3:f4:51:0f: 95:c2:8e:a1:1a:07:de:00:69:e9:f8:2b:d4:db:51: a2:3b:27:d0:56:8b:de:08:c8:58:f0:5e:6c:79:c0: 2a:03:76:2d:05:99:7a:8f:b1:ef:43:55:f9:4a:18: a4:e5:a6:4b:1f:91:02:99:31:a5:5f:67:cd:49:fe: 6f:ca:17:26:01:ba:4f:c4:bf:1f:7a:89:09:ba:c3: 59:c7:09:ce:0d:7b:19:3d:38:02:46:4a:c7:68:3c: 41:9b:6b:da:03:35:1f:56:b5:ef:3c:3a:20:d6:bc: 0c:31:07:51:54:97:3f:da:0b:28:c9:c2:0e:4e:ba: 11:51:5b:b6:00:f9:79:67:07:e0:29:48:e7:0a:d9: fd:2c:06:7a:b7:9c:fb:b4:ca:75:6b:8e:9e:4f:e6: 3c:d4:f8:f2:36:aa:fc:68:e7:49:c5:42:47:96:72: 76:1a:bc:25:f6:b9:6e:d9:76:0a:bb:52:1e:7a:73: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:D5:F2:DB:17:63:10:64:7A:DA:D5:DB:00:86:5F:8F:3A:08:BB X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2c:fa:07:0c:2e:bc:ea:a7:53:33:70:93:8f:5c:90:13:6f: 42:19:2e:96:af:f1:86:27:39:05:5d:87:2c:90:d4:86:28:f0: 99:4d:6f:17:1d:b9:5d:3b:22:79:3f:9a:c4:3e:a9:f3:a1:58: ff:0f:72:38:e8:12:be:32:63:8e:30:99:88:2a:b1:08:bc:66: 05:f7:75:c7:83:6f:9a:02:2b:50:2f:cb:e9:26:16:4a:12:a6: f2:9c:5f:a8:1c:a1:88:69:a2:0c:7e:fb:8b:3f:23:37:bb:97: 8d:e1:1b:de:1d:50:23:03:60:1b:07:9d:28:90:49:01:61:c0: 76:7a:18:86:21:b5:5d:9c:05:5a:50:48:15:e9:ff:c9:82:26: d0:9d:94:51:14:f4:dd:c8:d4:77:0b:a5:6b:81:f1:72:48:8c: d3:b3:83:61:f3:38:91:94:b7:bc:cc:ca:6b:ae:02:4a:71:34: 75:50:17:ad:f0:38:df:0e:74:f3:01:1b:ab:90:6b:77:2d:ae: c9:ac:8b:6e:01:40:49:91:7a:e6:f6:d0:74:0e:82:1b:75:01: 6e:10:32:10:fe:7e:c4:e6:79:d3:1f:90:fa:b7:29:e6:4a:87: c6:15:c4:a2:d4:eb:7e:10:bb:49:fa:c3:13:6b:c3:bd:39:2b: 94:96:b6:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjYwNDA1MDUwNTUyWhcNMjYwNDEyMDUwNTUyWjAYMRYwFAYD VQQDEw02OWQxZWRiMS0yMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N2WytKtYgOn7MNpXoo+6LbQh8rBBd521FMkqngkQEQT8OmVj5s5Rwby2Vdq K0XNGYKV/LflNdkNv6WeLqDc1rkS2rV7aqP0UQ+Vwo6hGgfeAGnp+CvU21GiOyfQ VoveCMhY8F5secAqA3YtBZl6j7HvQ1X5Shik5aZLH5ECmTGlX2fNSf5vyhcmAbpP xL8feokJusNZxwnODXsZPTgCRkrHaDxBm2vaAzUfVrXvPDog1rwMMQdRVJc/2gso ycIOTroRUVu2APl5ZwfgKUjnCtn9LAZ6t5z7tMp1a46eT+Y81PjyNqr8aOdJxUJH lnJ2Grwl9rlu2XYKu1IeenMWHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGJ1fLb F2MQZHra1dsAhl+POgi7MB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfCz6BwwuvOqnUzNwk49ckBNvQhkulq/xhic5BV2HLJDUhijwmU1vFx25XTsi eT+axD6p86FY/w9yOOgSvjJjjjCZiCqxCLxmBfd1x4NvmgIrUC/L6SYWShKm8pxf qByhiGmiDH77iz8jN7uXjeEb3h1QIwNgGwedKJBJAWHAdnoYhiG1XZwFWlBIFen/ yYIm0J2UURT03cjUdwula4HxckiM07ODYfM4kZS3vMzKa64CSnE0dVAXrfA43w50 8wEbq5Brdy2uyayLbgFASZF65vbQdA6CG3UBbhAyEP5+xOZ50x+Q+rcp5kqHxhXE otTrfhC7SfrDE2vDvTkrlJa2wA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:53 2026 by rpki-client