$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: sUBgu/2jbmvnTuxOUZWHJS1bZZ+l8hBR9WLK9FG7CeQ= Subject key identifier: EA:F6:99:28:E1:3E:0C:1E:1F:38:A6:EF:29:B0:B0:6B:C0:FE:92:EC Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0B1F Signing time: Sat 04 Apr 2026 19:08:10 +0000 Manifest this update: Sat 04 Apr 2026 19:08:10 +0000 Manifest next update: Sat 11 Apr 2026 19:08:10 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: EcTNSFV2wfObCQU6oHXK+55oqBX/qvN7zZi0w8aUnlo=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: bmZDBP315oKogWRN77TB7S1FyMQuLeHvXamkt99dOkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Apr 4 19:08:10 2026 GMT Not After : Apr 11 19:08:10 2026 GMT Subject: CN=69d1619a-9aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:b5:0a:81:c8:d6:ec:8d:51:d7:a7:b5:6a: 8b:79:43:8d:ef:ea:ef:dc:5e:57:14:ff:31:11:75: f8:70:df:f7:6b:0d:eb:ae:58:af:fe:68:f2:6d:2c: 6b:2a:6b:8a:1a:f0:af:65:d3:8f:9e:8c:bc:d8:24: 3b:83:43:3a:0a:77:64:a4:4a:d9:07:a2:33:d8:2c: 30:bf:8b:eb:a7:8f:cb:26:39:93:81:e1:fa:5b:36: 2a:3b:f7:f6:74:7b:36:ca:ce:a5:ec:e4:a2:df:11: a2:e6:26:85:b6:f2:68:d9:04:b6:f8:c2:63:37:51: 5c:41:87:b9:66:ce:ad:54:9b:ae:79:4b:0f:1b:32: ab:32:51:5a:18:72:22:9a:58:b0:f7:8b:5b:65:1c: 0e:ff:8f:fb:0c:3a:5a:80:d3:10:f4:f0:cc:23:0d: 9a:4f:0c:a5:51:31:d9:4a:3c:5a:14:d0:91:44:6c: e3:31:41:23:d0:f3:2b:a6:8e:be:ef:ef:9d:82:95: 47:80:6a:d4:69:eb:61:41:13:94:64:5a:a6:60:c7: 56:e3:4d:13:07:4a:f0:6d:39:2e:a5:ad:dd:b2:cf: 13:75:3d:4d:15:92:24:c5:8b:98:b6:2a:18:0c:23: 94:46:86:6b:b7:28:3b:47:dd:7d:00:9b:ad:98:41: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F6:99:28:E1:3E:0C:1E:1F:38:A6:EF:29:B0:B0:6B:C0:FE:92:EC X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:b0:e2:bd:ed:f4:7f:c0:2f:af:18:93:d3:33:51:2c:cc: 08:cc:e6:db:2b:b5:7f:25:ba:ee:63:5c:b4:22:8b:d4:f0:77: 32:98:50:38:7b:31:57:6f:b8:0c:62:f9:c3:3d:1d:1b:f9:0b: 62:e6:b2:87:3b:08:cf:fb:47:65:83:23:52:b4:16:60:e4:10: 6b:2a:e5:95:f9:7c:36:6e:45:5d:2c:a5:ec:c9:4b:78:3c:6e: 88:cd:3b:9d:39:4c:67:01:4b:c3:39:0c:c8:02:5a:a5:3e:09: 61:ed:49:ae:b1:cf:2f:1a:c2:6f:01:f9:8e:83:f3:01:ac:4e: 7d:8c:f6:22:93:88:2a:36:df:06:8a:c9:fb:4a:78:65:11:55: 00:8f:31:18:99:01:6e:b0:7a:17:25:5a:ae:b6:d0:82:e1:a9: ae:25:d5:3d:55:a2:a4:ae:2a:07:2f:2b:f9:2b:16:e8:76:fc: 4e:ef:a2:e0:a1:11:13:06:1a:40:4c:ee:4a:6d:68:e7:c9:b2: e1:5c:b3:b7:3d:05:de:40:30:f0:69:b4:13:81:58:a6:c7:8b: 64:6d:2a:4d:68:c2:f2:76:4f:76:d7:b5:14:b2:b3:32:f1:bf: 6b:d6:f5:cf:ff:40:b6:38:c6:93:94:79:91:9c:28:f0:4f:fa: 31:00:64:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjYwNDA0MTkwODEwWhcNMjYwNDExMTkwODEwWjAYMRYwFAYD VQQDEw02OWQxNjE5YS05YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53e1CoHI1uyNUdentWqLeUON7+rv3F5XFP8xEXX4cN/3aw3rrliv/mjybSxr KmuKGvCvZdOPnoy82CQ7g0M6CndkpErZB6Iz2Cwwv4vrp4/LJjmTgeH6WzYqO/f2 dHs2ys6l7OSi3xGi5iaFtvJo2QS2+MJjN1FcQYe5Zs6tVJuueUsPGzKrMlFaGHIi mliw94tbZRwO/4/7DDpagNMQ9PDMIw2aTwylUTHZSjxaFNCRRGzjMUEj0PMrpo6+ 7++dgpVHgGrUaethQROUZFqmYMdW400TB0rwbTkupa3dss8TdT1NFZIkxYuYtioY DCOURoZrtyg7R919AJutmEGGDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOr2mSjh PgweHzim7ymwsGvA/pLsMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdl2w4r3t9H/AL68Yk9MzUSzMCMzm2yu1fyW67mNctCKL1PB3MphQOHsxV2+4 DGL5wz0dG/kLYuayhzsIz/tHZYMjUrQWYOQQayrllfl8Nm5FXSyl7MlLeDxuiM07 nTlMZwFLwzkMyAJapT4JYe1JrrHPLxrCbwH5joPzAaxOfYz2IpOIKjbfBorJ+0p4 ZRFVAI8xGJkBbrB6FyVarrbQguGpriXVPVWipK4qBy8r+SsW6Hb8Tu+i4KEREwYa QEzuSm1o58my4Vyztz0F3kAw8Gm0E4FYpseLZG0qTWjC8nZPdte1FLKzMvG/a9b1 z/9AtjjGk5R5kZwo8E/6MQBkOQ== -----END CERTIFICATE-----Generated at Mon Apr 6 12:45:58 2026 by rpki-client