$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: U4NytWbB15/tOkj3WjFEA2oxVivzV1fu8Hcuoh6ak4g= Subject key identifier: 69:C1:3C:DB:E2:F6:78:2B:DA:07:86:EA:B6:DD:AE:21:DA:C1:2D:BB Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 2975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 28F8 Signing time: Sat 04 Apr 2026 15:33:06 +0000 Manifest this update: Sat 04 Apr 2026 15:33:05 +0000 Manifest next update: Sat 11 Apr 2026 15:33:05 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: bmr4V03b0+H60j3+6I1/hTCugOR1rwJMnV6wh4wLV7A=) 2: 57D5BBF870F211F086293675C4F9AE02.roa (hash: DeKhzeI6csoLVB/N7GeSeQ/TlM+YbpCUPGuUuLwXV4E=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: 9cZ6L/GPvQKK4pJ4l7g4uN4OgEx5HSReU5gKVwtDiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10613 (0x2975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Apr 4 15:33:05 2026 GMT Not After : Apr 11 15:33:05 2026 GMT Subject: CN=69d12f32-c753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:c4:e8:97:78:6c:a3:9d:d4:c4:82:1c:08: 46:5d:82:81:10:23:a8:7e:ad:f3:32:10:e3:51:4e: 81:b5:b7:94:52:ef:73:1a:b6:24:08:36:3c:96:62: d5:92:b9:3e:11:9d:08:8e:39:9d:20:2e:86:bc:20: 69:68:b8:c3:77:59:78:c7:be:68:02:d5:95:87:ac: 17:c0:c6:96:65:39:55:f9:20:c4:f1:7e:6f:3d:cd: c6:f0:e9:db:11:6c:a5:56:7c:d3:59:ca:aa:5e:72: 8c:7f:40:1a:ab:88:fa:b0:be:32:1a:21:9d:97:f3: 74:ea:a9:a1:4d:76:a8:53:d8:20:32:3e:29:fd:4a: ca:99:05:e0:c2:53:69:b2:15:06:3c:90:8f:06:e8: 14:43:5c:7f:f5:49:84:bc:90:67:78:d1:0a:0e:20: 0b:d8:0e:39:ed:e1:45:fd:0b:dd:85:f0:43:5d:44: 86:d9:31:2f:45:f3:46:cf:d0:ea:bb:99:1f:fa:2c: 31:88:3d:c5:c7:32:a5:dd:e8:74:7b:31:0b:be:04: 35:58:05:72:49:dc:e3:7b:fa:b8:9e:60:c1:5d:58: 22:5b:b9:29:8b:aa:93:fe:92:23:f8:f7:40:0f:41: f8:20:3a:10:fb:96:7b:f4:6a:1d:df:4e:24:ec:c1: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C1:3C:DB:E2:F6:78:2B:DA:07:86:EA:B6:DD:AE:21:DA:C1:2D:BB X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cc:85:94:7d:93:50:44:15:0e:a0:42:b5:eb:5c:d3:b1:f1: c4:06:fb:69:8d:a0:e5:2e:fb:33:e1:a8:ad:1a:37:91:89:c7: 33:81:64:e5:cb:41:05:1d:a6:6f:ea:04:f1:32:72:64:6e:ba: 97:83:1d:d8:32:bb:0d:eb:2f:b3:b9:71:d7:a0:27:55:e2:e6: ff:cc:60:ce:c4:ab:58:66:2b:4b:9a:6f:14:75:f7:70:1e:de: 9e:4d:8b:b7:67:3e:42:83:d3:55:33:65:c2:be:b7:2a:c7:64: 9e:e7:96:4d:05:b4:7d:fb:d4:c9:4d:56:ad:15:ac:48:bc:0d: 0c:6a:ae:70:a0:ba:b5:75:26:01:65:f1:c2:50:2e:3b:3c:87: 9d:f6:3c:93:f4:ea:93:eb:d0:24:ca:a3:55:28:57:11:2a:a3: a5:03:46:95:e1:d2:28:18:97:44:b4:29:68:dc:a4:e7:c5:a1: 5c:de:f8:02:f8:6b:a2:bc:13:c0:2a:20:a1:8b:61:d4:2a:a7: 80:a5:64:25:17:1b:0d:55:b5:77:86:66:1a:ae:88:c6:b6:81: 91:0b:37:82:68:d0:72:a6:e7:55:f0:8e:c1:46:5e:6d:f2:6c: 3b:76:f7:55:75:ac:8c:d9:40:87:11:97:6a:d4:81:21:d6:3f: 40:fe:f8:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwNDA0MTUzMzA1WhcNMjYwNDExMTUzMzA1WjAYMRYwFAYD VQQDEw02OWQxMmYzMi1jNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx/E6Jd4bKOd1MSCHAhGXYKBECOofq3zMhDjUU6BtbeUUu9zGrYkCDY8lmLV krk+EZ0IjjmdIC6GvCBpaLjDd1l4x75oAtWVh6wXwMaWZTlV+SDE8X5vPc3G8Onb EWylVnzTWcqqXnKMf0Aaq4j6sL4yGiGdl/N06qmhTXaoU9ggMj4p/UrKmQXgwlNp shUGPJCPBugUQ1x/9UmEvJBneNEKDiAL2A457eFF/QvdhfBDXUSG2TEvRfNGz9Dq u5kf+iwxiD3FxzKl3eh0ezELvgQ1WAVySdzje/q4nmDBXVgiW7kpi6qT/pIj+PdA D0H4IDoQ+5Z79God304k7MGr0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnBPNvi 9ngr2geG6rbdriHawS27MB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKsyFlH2TUEQVDqBCtetc07HxxAb7aY2g5S77M+GorRo3kYnHM4Fk5ctBBR2m b+oE8TJyZG66l4Md2DK7Desvs7lx16AnVeLm/8xgzsSrWGYrS5pvFHX3cB7enk2L t2c+QoPTVTNlwr63KsdknueWTQW0ffvUyU1WrRWsSLwNDGqucKC6tXUmAWXxwlAu OzyHnfY8k/Tqk+vQJMqjVShXESqjpQNGleHSKBiXRLQpaNyk58WhXN74AvhrorwT wCogoYth1CqngKVkJRcbDVW1d4ZmGq6IxraBkQs3gmjQcqbnVfCOwUZebfJsO3b3 VXWsjNlAhxGXatSBIdY/QP74Vw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:34 2026 by rpki-client