$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: hs0icf/gxFI8UowK7KxO0Tos5fS6YBbJ6f2OGKxcbAA= Subject key identifier: 26:86:DF:EA:A0:20:11:1B:65:75:54:62:1B:58:12:D9:1F:27:5D:98 Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 23 Signing time: Tue 21 Apr 2026 08:39:19 +0000 Manifest this update: Tue 21 Apr 2026 08:39:18 +0000 Manifest next update: Tue 28 Apr 2026 08:39:18 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: Y+V/KN//3VSVvt0n+VYsMBahr7+Wa2Knj3n1Qa8NGcI=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: Apr 21 08:39:18 2026 GMT Not After : Apr 28 08:39:18 2026 GMT Subject: CN=69e737b7-ac1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:8d:79:c9:ee:db:da:40:05:9f:d2:a3:1a: 35:4e:a0:f9:6e:d0:5d:ba:c1:dd:06:16:dd:14:a3: 1d:ae:2b:47:62:f8:c8:45:4e:24:6c:8e:e9:e1:8f: df:01:f9:b4:74:01:61:05:08:7d:9f:40:c5:2e:af: ce:b1:9e:f1:f5:15:cc:c6:57:9f:5e:3e:0b:09:00: 2d:e6:e3:36:28:c6:14:9d:85:63:ab:db:23:6a:b6: a4:09:80:67:89:df:45:5f:fb:b9:7e:0b:ce:7e:5f: d3:a3:64:2a:96:0e:a2:64:84:35:82:b7:c0:82:3b: 75:82:a3:10:95:91:d9:86:64:f2:98:d6:0b:ac:6c: 7e:ca:a2:39:63:72:34:95:2a:56:4f:8c:8c:68:87: b2:d1:f4:f1:a2:10:51:2e:af:6d:3d:e8:6e:6e:c2: e2:57:bc:6a:9e:4e:9f:cf:5e:ee:c9:3d:ad:e3:ca: 40:5b:18:66:ba:4a:29:1b:64:34:67:0d:c9:0f:b3: 9a:6f:bf:3a:46:7f:e4:29:85:aa:ca:b3:12:3e:cc: c4:fc:8f:ef:2c:46:e3:fe:14:e3:47:a8:3d:08:cf: 90:fb:f5:fe:fc:b2:7e:6e:99:7b:31:56:94:40:8d: 01:cf:bc:f7:41:b2:99:05:f0:fa:2c:e8:95:6c:34: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:DF:EA:A0:20:11:1B:65:75:54:62:1B:58:12:D9:1F:27:5D:98 X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:4b:22:f9:d3:bb:8f:97:c2:05:f5:25:1c:7a:23:7f:9e:53: dd:46:2b:b8:fd:ea:dd:b2:61:9f:5a:5b:84:f1:b9:94:d0:8e: 76:4c:06:a4:10:3f:8a:4b:a2:82:c8:67:ac:92:f8:7e:b6:6f: 9e:2d:f5:6f:16:a0:dc:2c:39:fb:d1:8f:22:28:79:ed:77:da: 0e:8a:7a:cc:10:ae:01:2a:0b:98:cb:1c:b7:1f:c1:96:4b:1c: e5:e8:c9:0c:c3:91:35:65:80:e8:12:85:d3:e7:a3:05:e3:61: 28:7c:74:db:aa:2b:55:5c:8e:ed:1f:78:b7:e1:47:b7:e0:49: dc:dd:44:db:00:7a:dc:b5:df:0a:5f:3a:56:7b:41:75:e3:18: 31:d9:9f:5c:b4:c7:67:a3:97:83:43:d7:ce:8c:fe:c0:08:62: 45:ee:94:d7:81:dd:64:84:80:d3:ba:80:90:5c:23:6b:f2:b9: c1:18:ab:1a:b2:ad:3e:0d:3c:d3:33:1a:19:3a:a3:b3:49:c1: c8:1d:44:48:d7:fc:b1:a4:82:32:f1:ff:81:a5:e8:73:37:17: b0:10:b9:79:4b:26:52:00:63:2f:d9:d9:94:ee:8e:1b:44:8d: 7a:59:f6:44:24:9d:49:25:8c:d7:a2:41:8e:b4:33:d7:9e:ad: 6c:36:06:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjA0MjEwODM5MThaFw0yNjA0MjgwODM5MThaMBgxFjAUBgNV BAMTDTY5ZTczN2I3LWFjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC08415ye7b2kAFn9KjGjVOoPlu0F26wd0GFt0Uox2uK0di+MhFTiRsjunhj98B +bR0AWEFCH2fQMUur86xnvH1FczGV59ePgsJAC3m4zYoxhSdhWOr2yNqtqQJgGeJ 30Vf+7l+C85+X9OjZCqWDqJkhDWCt8CCO3WCoxCVkdmGZPKY1gusbH7KojljcjSV KlZPjIxoh7LR9PGiEFEur2096G5uwuJXvGqeTp/PXu7JPa3jykBbGGa6SikbZDRn DckPs5pvvzpGf+QpharKsxI+zMT8j+8sRuP+FONHqD0Iz5D79f78sn5umXsxVpRA jQHPvPdBspkF8Pos6JVsNF/JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJobf6qAg ERtldVRiG1gS2R8nXZgwHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCnSyL507uPl8IF9SUceiN/nlPdRiu4/erdsmGfWluE8bmU0I52TAakED+KS6KC yGeskvh+tm+eLfVvFqDcLDn70Y8iKHntd9oOinrMEK4BKguYyxy3H8GWSxzl6MkM w5E1ZYDoEoXT56MF42EofHTbqitVXI7tH3i34Ue34Enc3UTbAHrctd8KXzpWe0F1 4xgx2Z9ctMdno5eDQ9fOjP7ACGJF7pTXgd1khIDTuoCQXCNr8rnBGKsasq0+DTzT MxoZOqOzScHIHURI1/yxpIIy8f+BpehzNxewELl5SyZSAGMv2dmU7o4bRI16WfZE JJ1JJYzXokGOtDPXnq1sNgbB -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:09 2026 by rpki-client