$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json) Hash identifier: P0yPuSxIa8faqCkx++rNAk21ZPRulk1vVo2PmP98W14= Subject key identifier: CF:9A:D3:33:FA:8C:B9:B4:52:6E:4D:DE:41:86:01:24:A3:20:5C:07 Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft Manifest number: 07 Signing time: Mon 27 Apr 2026 09:07:10 +0000 Manifest this update: Mon 27 Apr 2026 09:07:09 +0000 Manifest next update: Mon 04 May 2026 09:07:09 +0000 Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: XvRnfE7HVsefB+AXra5QWjJYFxhcO3JBJBVEKSNmzbo=) 2: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=) 3: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 09:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Validity Not Before: Apr 27 09:07:09 2026 GMT Not After : May 4 09:07:09 2026 GMT Subject: CN=69ef273e-eff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:71:33:ef:3c:62:5b:1c:71:17:67:fe:18: 5d:5d:f3:96:36:2e:e2:3d:18:c9:28:c7:f6:1d:db: 46:d8:69:4f:84:9a:33:f7:9f:1d:9f:75:fa:59:55: cf:c1:91:a8:a2:af:61:0d:1b:dd:ad:cc:8c:7d:86: f6:9b:7d:c5:91:04:cc:2d:ff:07:62:3a:46:c7:ab: 63:8f:4c:f0:7a:2a:bb:d2:84:e8:a4:c2:11:bb:f3: b2:fb:32:12:0b:7f:d9:c7:25:bf:12:d3:50:4e:25: 5e:04:10:1f:04:42:c1:a9:35:57:77:02:73:0a:65: 67:da:f4:51:8c:00:33:b3:16:60:14:e2:6c:ce:74: 24:d6:0f:b9:ee:32:3d:4a:d9:a8:3d:25:91:50:ea: 18:e0:fb:7d:2d:39:74:0c:54:8b:26:11:af:b0:8b: b2:16:4b:e5:ef:09:a8:34:89:d6:10:ea:b5:91:2e: ab:4b:31:88:3b:c9:87:28:b7:6e:a5:40:b7:cd:79: ff:7c:21:42:b3:7b:64:41:40:20:8d:16:38:73:37: e6:2e:73:08:85:71:99:11:36:c6:d7:8f:a2:a2:8c: 76:3e:b8:ef:cf:1a:16:0e:eb:10:b7:2c:b6:d1:85: 47:61:5d:de:89:aa:56:69:88:5b:ee:28:c3:fa:86: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:D3:33:FA:8C:B9:B4:52:6E:4D:DE:41:86:01:24:A3:20:5C:07 X509v3 Authority Key Identifier: keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:f4:57:7d:7d:76:8c:b9:e4:85:75:a0:a1:2d:e8:e2:ba: 2c:f3:5a:d7:4e:32:d7:de:1a:ff:92:b1:bb:db:15:d6:dd:25: d4:cd:07:bd:15:be:ec:22:66:de:6e:af:01:c9:71:78:ee:c3: 2a:e1:fb:ad:d4:18:c5:0a:16:4f:99:0a:17:8e:d3:bb:b1:67: 54:a8:6e:c3:95:8c:95:ce:b6:82:e0:3a:60:63:bf:17:13:6b: 05:87:29:c3:af:e9:7f:07:69:dd:9c:e3:67:1c:5b:37:ab:f1: c4:24:ac:7d:a7:92:35:04:9b:49:e7:92:e7:67:16:e6:06:a4: da:0c:d9:58:0f:2e:68:74:22:d5:97:e9:0f:30:6c:b1:7b:3f: 60:95:5c:d9:56:6e:2f:52:be:03:41:b1:ad:5b:39:21:25:77: f5:dc:7b:4a:43:5b:3d:b9:8d:90:dd:85:08:c1:9a:26:26:f3: 2a:8d:b1:44:2a:41:b7:6b:d3:b1:90:8d:7c:a7:c1:12:11:95: 38:c2:a7:d0:d0:4b:07:bf:85:67:aa:65:99:82:d3:18:d4:de: 96:80:f4:16:4b:be:39:d0:42:b4:e7:ac:8e:7b:5a:23:cb:b8: 37:78:d6:54:d9:ee:28:d7:74:d4:84:28:63:24:98:14:7d:26: dd:d6:e3:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoODUxMkU5Njk5NTZBQ0I3RDNFNzYwRUQ5ODZFMUJFRUEz RjhBQzBGODAeFw0yNjA0MjcwOTA3MDlaFw0yNjA1MDQwOTA3MDlaMBgxFjAUBgNV BAMTDTY5ZWYyNzNlLWVmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeF3Ez7zxiWxxxF2f+GF1d85Y2LuI9GMkox/Yd20bYaU+EmjP3nx2fdfpZVc/B kaiir2ENG92tzIx9hvabfcWRBMwt/wdiOkbHq2OPTPB6KrvShOikwhG787L7MhIL f9nHJb8S01BOJV4EEB8EQsGpNVd3AnMKZWfa9FGMADOzFmAU4mzOdCTWD7nuMj1K 2ag9JZFQ6hjg+30tOXQMVIsmEa+wi7IWS+XvCag0idYQ6rWRLqtLMYg7yYcot26l QLfNef98IUKze2RBQCCNFjhzN+YucwiFcZkRNsbXj6KijHY+uO/PGhYO6xC3LLbR hUdhXd6JqlZpiFvuKMP6hsqtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz5rTM/qM ubRSbk3eQYYBJKMgXAcwHwYDVR0jBBgwFoAUhRLpaZVqy30+dg7ZhuG+6j+KwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzkxQkUyQkMwM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMwLWRnN1podUctNmotS3dQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFJMcGFaVnF5MzAtZGc3Wmh1Ry02ai1Ld1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzkxQkUyQkMwM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMw LWRnN1podUctNmotS3dQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMsvRXfX12jLnkhXWgoS3o4ros81rXTjLX3hr/krG72xXW3SXUzQe9Fb7sImbe bq8ByXF47sMq4fut1BjFChZPmQoXjtO7sWdUqG7DlYyVzraC4DpgY78XE2sFhynD r+l/B2ndnONnHFs3q/HEJKx9p5I1BJtJ55LnZxbmBqTaDNlYDy5odCLVl+kPMGyx ez9glVzZVm4vUr4DQbGtWzkhJXf13HtKQ1s9uY2Q3YUIwZomJvMqjbFEKkG3a9Ox kI18p8ESEZU4wqfQ0EsHv4VnqmWZgtMY1N6WgPQWS7450EK056yOe1ojy7g3eNZU 2e4o13TUhChjJJgUfSbd1uNe -----END CERTIFICATE-----Generated at Tue Apr 28 17:47:10 2026 by rpki-client