$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: 6OsCrepFzWRFDa7vnx7gENRqpPIT/xvn9XcBbb8yX8E= Subject key identifier: 20:63:DC:DB:A9:C2:41:90:73:39:1F:AA:30:17:36:4D:99:C9:8D:A2 Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 17B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 17AA Signing time: Sat 04 Apr 2026 16:28:42 +0000 Manifest this update: Sat 04 Apr 2026 16:28:42 +0000 Manifest next update: Sat 11 Apr 2026 16:28:42 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: LatjCwoC2tLScVlUqjet0Qu8QEfx1jMKNCoqAGHeBWU=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6072 (0x17b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: Apr 4 16:28:42 2026 GMT Not After : Apr 11 16:28:42 2026 GMT Subject: CN=69d13c3a-80a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:c7:ff:d2:f1:2a:27:f9:77:50:c8:99:f9: 45:28:57:67:63:b9:71:a1:fa:c9:55:61:48:f6:e5: ff:15:ae:e7:9b:bc:73:10:ae:12:08:31:96:c7:df: c8:36:c8:51:86:dc:f8:79:7f:7e:77:10:e0:0a:aa: c4:21:94:f4:2e:93:7c:68:17:01:06:30:97:9d:1b: 8d:f1:24:37:62:c8:5d:2c:e8:e0:58:e9:f3:ce:ea: 87:90:e2:cc:9f:0d:25:7c:05:12:9c:46:c7:52:a2: 41:99:92:a3:63:33:51:72:04:b1:ee:f9:ec:a3:81: c3:87:4b:14:26:3f:d0:c9:0f:6f:da:b8:cb:6f:c7: f6:61:7f:4c:01:bd:08:2a:6f:aa:8f:0e:10:e4:b3: 22:fd:fc:04:c5:20:36:e3:37:a4:b2:6a:77:c6:a1: db:b9:1e:3b:45:1c:75:ef:08:bf:e1:37:bc:76:6a: de:33:94:38:40:d6:9f:e1:be:db:66:6b:16:34:3c: a4:53:c4:fa:76:96:ed:bb:11:11:54:41:76:5a:35: 27:5e:f5:ee:99:e4:97:2c:d6:ce:47:ee:ab:e0:cd: d8:1d:9f:6b:76:d4:b4:9f:d9:95:6e:eb:bd:ab:c2: 7a:3d:d4:a8:e9:af:56:86:8b:bb:b0:76:fa:bb:45: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:DC:DB:A9:C2:41:90:73:39:1F:AA:30:17:36:4D:99:C9:8D:A2 X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:fd:cf:d0:1a:40:e6:a9:c2:58:9b:a2:c6:56:f9:99:8b: 5a:73:f5:b6:1c:3e:7c:cf:ef:f1:53:31:88:92:2e:bf:e8:26: 76:02:e4:23:86:63:ea:78:01:7b:39:03:a7:4b:f3:f2:a3:16: 73:32:0d:51:78:55:be:86:84:ea:94:d4:94:49:0e:d1:dc:79: 44:6b:2f:e3:bd:81:29:50:3c:5a:c0:06:49:22:6a:5d:20:7a: 23:fa:13:a4:18:f5:25:f8:6e:2e:26:0b:67:81:22:e5:f7:c6: 93:af:52:a5:f2:8d:c0:fd:bb:41:4a:c9:7c:c4:b4:5e:a0:6f: 2e:6f:18:72:b7:a2:74:47:51:70:57:2b:e9:f8:a5:60:7c:3d: de:4e:e2:f5:ba:69:52:56:fd:6f:ef:68:d8:14:3b:6f:23:91: 66:3a:db:f6:61:b2:de:ae:65:03:a4:45:36:f2:e3:b3:2d:97: 14:bd:9e:7c:04:f2:1f:29:be:36:0d:bb:14:bd:ae:ee:05:d7: e3:06:f1:d1:c7:36:51:6f:f4:8a:c8:02:33:0a:04:de:8c:f5: aa:d6:48:7d:43:db:28:f6:d3:2a:8b:0e:41:78:05:78:69:26: d1:5d:67:39:dd:55:94:47:a1:d5:b4:cd:16:ea:14:2c:e3:6c: 32:e6:06:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjYwNDA0MTYyODQyWhcNMjYwNDExMTYyODQyWjAYMRYwFAYD VQQDEw02OWQxM2MzYS04MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFvH/9LxKif5d1DImflFKFdnY7lxofrJVWFI9uX/Fa7nm7xzEK4SCDGWx9/I NshRhtz4eX9+dxDgCqrEIZT0LpN8aBcBBjCXnRuN8SQ3YshdLOjgWOnzzuqHkOLM nw0lfAUSnEbHUqJBmZKjYzNRcgSx7vnso4HDh0sUJj/QyQ9v2rjLb8f2YX9MAb0I Km+qjw4Q5LMi/fwExSA24zeksmp3xqHbuR47RRx17wi/4Te8dmreM5Q4QNaf4b7b ZmsWNDykU8T6dpbtuxERVEF2WjUnXvXumeSXLNbOR+6r4M3YHZ9rdtS0n9mVbuu9 q8J6PdSo6a9Whou7sHb6u0WPPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBj3Nup wkGQczkfqjAXNk2ZyY2iMB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4/9z9AaQOapwlibosZW+ZmLWnP1thw+fM/v8VMxiJIuv+gmdgLkI4Zj6ngB ezkDp0vz8qMWczINUXhVvoaE6pTUlEkO0dx5RGsv472BKVA8WsAGSSJqXSB6I/oT pBj1JfhuLiYLZ4Ei5ffGk69SpfKNwP27QUrJfMS0XqBvLm8YcreidEdRcFcr6fil YHw93k7i9bppUlb9b+9o2BQ7byORZjrb9mGy3q5lA6RFNvLjsy2XFL2efATyHym+ Ng27FL2u7gXX4wbx0cc2UW/0isgCMwoE3oz1qtZIfUPbKPbTKosOQXgFeGkm0V1n Od1VlEeh1bTNFuoULONsMuYGXA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:46 2026 by rpki-client