$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: lpyZbvn4Qxs1beUWrSD8HN8rnNlGG1RWUVYTFTfypWs= Subject key identifier: DD:D8:A7:7B:AE:B0:EA:C3:76:FA:C0:4C:A1:FA:14:DB:1F:09:B3:FD Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: 0146 Signing time: Sun 05 Apr 2026 04:43:19 +0000 Manifest this update: Sun 05 Apr 2026 04:43:19 +0000 Manifest next update: Sun 12 Apr 2026 04:43:19 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: 9JIB36ZDH0D+evUqS2bQpusDu2lcf4Y5I5bWZMji1Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: Apr 5 04:43:19 2026 GMT Not After : Apr 12 04:43:19 2026 GMT Subject: CN=69d1e867-87a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:c1:c8:e3:45:56:fb:ed:d5:e2:b1:15:73: 3a:44:83:25:db:40:6e:81:61:fc:53:4a:b1:b0:3d: c6:a1:0a:0c:6e:a1:d7:0b:05:94:de:70:1d:12:83: d2:e8:03:20:1e:43:b2:c4:90:4c:f7:34:90:25:99: c9:87:c7:8c:7e:ce:3d:da:57:3a:21:73:62:bc:21: d0:5a:ca:bb:98:04:b0:85:fd:d0:3a:71:6c:07:77: e2:6b:a6:3c:b0:cd:fa:c2:3a:c4:9d:a9:74:a3:b9: 65:2a:b0:e6:00:d3:3a:6d:b2:8b:9a:11:a8:04:c9: b1:d7:cf:62:79:ff:37:af:8c:da:55:36:d3:9e:0a: e8:a8:ae:85:56:35:c6:4d:8c:33:58:e3:5d:1f:65: 12:06:37:ec:ef:83:30:01:42:3e:bf:ab:7d:92:ef: ca:db:cc:b2:ea:cc:71:da:29:03:2b:0b:e0:2e:4a: 27:bd:c1:3a:36:a2:dd:77:d5:ad:8c:35:9c:c6:fc: eb:6d:0e:09:8b:70:66:0b:36:74:d4:ee:c8:7c:71: 77:0b:75:ec:ad:be:43:b1:44:b1:74:b2:14:08:4b: 14:80:39:b8:1e:81:16:5d:7c:81:ad:69:d3:b0:d4: ab:6c:2f:e1:32:d3:b5:18:33:fb:9c:8e:cb:1d:7f: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:A7:7B:AE:B0:EA:C3:76:FA:C0:4C:A1:FA:14:DB:1F:09:B3:FD X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:6e:6b:c7:c3:36:96:4f:3e:8a:28:f4:53:fb:65:26:60: bf:3d:9b:9d:d4:57:43:20:54:eb:1a:24:e1:60:12:55:44:db: 33:6e:5a:01:7c:38:d1:86:ef:3b:f0:67:6f:27:07:f6:3a:e5: fa:fd:20:d8:f4:f9:36:68:86:53:5c:71:64:dc:c3:1a:be:48: a4:05:d5:fa:7e:83:1d:45:10:a1:80:56:98:7f:aa:e8:b3:9d: 6b:c3:05:a5:3e:be:7c:ea:fc:d0:7b:25:8c:e3:02:b8:00:5f: 3a:ef:30:3b:d9:8e:05:dd:de:10:45:eb:63:50:93:eb:e9:33: 2e:48:eb:d1:80:68:bf:2a:dc:0f:69:18:b4:1a:ff:42:69:f5: 33:50:68:8c:56:51:f8:eb:89:02:cb:dc:93:7d:e0:67:3f:ce: 34:ee:2b:15:f2:58:eb:53:34:3c:da:ca:48:a6:4e:e5:d5:13: 60:d0:f1:4a:e3:d7:9e:3b:46:7a:b2:4f:7e:9d:3b:9e:08:66: b4:69:c3:c7:a1:ba:3b:f0:98:47:ce:7d:a8:91:38:0f:0d:d3: 3c:0e:c7:af:29:f6:31:45:c7:d7:3f:67:b0:41:1e:b0:90:2a: 9a:50:15:50:9c:e5:6d:24:23:99:17:3a:2c:2d:2d:2d:dd:20: 1c:3c:99:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2 QzkyREU5MzQwHhcNMjYwNDA1MDQ0MzE5WhcNMjYwNDEyMDQ0MzE5WjAYMRYwFAYD VQQDEw02OWQxZTg2Ny04N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRHByONFVvvt1eKxFXM6RIMl20BugWH8U0qxsD3GoQoMbqHXCwWU3nAdEoPS 6AMgHkOyxJBM9zSQJZnJh8eMfs492lc6IXNivCHQWsq7mASwhf3QOnFsB3fia6Y8 sM36wjrEnal0o7llKrDmANM6bbKLmhGoBMmx189ief83r4zaVTbTngroqK6FVjXG TYwzWONdH2USBjfs74MwAUI+v6t9ku/K28yy6sxx2ikDKwvgLkonvcE6NqLdd9Wt jDWcxvzrbQ4Ji3BmCzZ01O7IfHF3C3Xsrb5DsUSxdLIUCEsUgDm4HoEWXXyBrWnT sNSrbC/hMtO1GDP7nI7LHX+p8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3Yp3uu sOrDdvrATKH6FNsfCbP9MB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY ZlUwNHBDbngwaHhza3Q2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhABua8fDNpZPPooo9FP7ZSZgvz2bndRXQyBU6xok4WASVUTbM25aAXw40Ybv O/BnbycH9jrl+v0g2PT5NmiGU1xxZNzDGr5IpAXV+n6DHUUQoYBWmH+q6LOda8MF pT6+fOr80HsljOMCuABfOu8wO9mOBd3eEEXrY1CT6+kzLkjr0YBovyrcD2kYtBr/ Qmn1M1BojFZR+OuJAsvck33gZz/ONO4rFfJY61M0PNrKSKZO5dUTYNDxSuPXnjtG erJPfp07nghmtGnDx6G6O/CYR859qJE4Dw3TPA7Hryn2MUXH1z9nsEEesJAqmlAV UJzlbSQjmRc6LC0tLd0gHDyZ1w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:05 2026 by rpki-client