$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json) Hash identifier: FbqtaxUHOkDGuAEbRbiLL9/5E6/8V+7ACoxU4pfNMmY= Subject key identifier: E2:BA:67:76:D6:F5:8D:84:F4:98:E5:FC:AF:5A:3F:F8:AC:B9:1C:0A Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft Manifest number: 0697 Signing time: Sat 04 Apr 2026 22:14:05 +0000 Manifest this update: Sat 04 Apr 2026 22:14:04 +0000 Manifest next update: Sat 11 Apr 2026 22:14:04 +0000 Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: g6OsOB0RKCCWOgU796WYqa97Olrra1c4CwAe350WbDI=) 2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: 2Lk4CmVFEj2uOR0iFzgVtffOiiM041R6QTALbm/THG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Validity Not Before: Apr 4 22:14:04 2026 GMT Not After : Apr 11 22:14:04 2026 GMT Subject: CN=69d18d2d-98e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:32:3a:33:28:f4:b9:6f:43:4d:f9:06:c8: c7:8e:59:a6:17:ee:32:3d:05:f4:b2:f8:be:4b:b0: 02:af:ff:b4:8e:b5:c5:eb:74:8b:89:91:85:48:d5: 92:c6:8e:e4:40:30:f8:5d:ed:6e:cf:38:82:0c:ce: a6:17:9d:55:7f:b7:2a:27:3c:16:0a:92:0c:5a:b2: 1e:3e:a3:2a:f6:af:73:60:d3:9d:ff:3e:ab:8f:be: 6a:09:d1:82:c9:2d:ed:f0:65:45:ee:9f:57:c0:f3: fe:33:a3:70:18:43:7e:4a:ef:9d:ad:53:34:e8:d2: 8a:ca:09:3a:dd:8e:13:fb:36:45:ec:f6:fd:18:bd: 05:a5:91:2b:0c:25:60:51:60:dc:14:16:c8:96:28: c4:03:a7:4e:2d:96:08:c2:89:10:00:6c:f5:a2:58: f6:5d:12:db:81:f4:7e:81:3b:57:92:e5:fb:c1:4d: 82:5c:99:bb:68:af:ad:97:fe:de:9c:f8:83:6e:7f: 4a:54:d9:2a:77:82:8c:c4:2a:e9:ba:9e:58:71:dc: 91:fa:11:08:51:cc:12:cb:ff:e8:3c:22:c8:84:03: 8c:9c:49:d7:b7:25:53:32:4d:5a:26:31:6b:27:39: 3c:b5:36:85:07:6f:c3:1e:cd:a3:5e:e3:ce:77:cb: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:67:76:D6:F5:8D:84:F4:98:E5:FC:AF:5A:3F:F8:AC:B9:1C:0A X509v3 Authority Key Identifier: keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c8:0d:32:fa:3b:45:20:39:f0:46:8e:3a:83:c4:41:62:c0: be:a1:8a:56:58:11:37:4f:bb:bb:8c:7c:bf:4a:c1:32:aa:bf: ac:45:05:d2:7f:b2:ff:ad:d6:22:7a:90:b7:45:4e:e9:37:4d: 60:c6:b7:40:84:e2:01:3e:48:6a:d5:af:e2:24:81:12:1d:08: 18:d5:07:a0:73:f3:da:3e:39:2e:89:d5:6f:8d:46:0f:75:a3: 39:6d:43:d8:7b:13:5b:ee:b2:e5:47:fe:ba:af:28:0f:b9:d3: 65:f3:1c:39:47:42:78:aa:52:e2:d9:2c:bc:9a:66:75:e1:92: 76:65:84:a7:98:87:1c:a9:2d:f4:4f:8e:f2:8a:ca:07:f0:62: d1:6c:e4:08:4d:c6:e2:74:a9:8d:f0:81:ac:9c:6f:1e:d5:17: 3d:fc:d9:2f:87:f6:95:22:e3:1e:38:23:a4:9a:37:dc:69:6c: d6:fa:65:da:d4:45:4e:a9:9a:ec:64:6f:34:cc:5d:29:c6:a1: 17:69:fb:40:97:20:33:ee:69:fd:4a:db:22:c2:21:d6:cc:97: 4c:ff:0f:bf:8b:72:5d:3a:39:b9:71:91:97:ba:78:77:04:97: f0:a8:d9:d0:8f:2c:46:bb:43:7f:ef:26:7f:0e:4e:32:71:8b: 8f:f5:ef:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD QUEyMjFFMzcwHhcNMjYwNDA0MjIxNDA0WhcNMjYwNDExMjIxNDA0WjAYMRYwFAYD VQQDEw02OWQxOGQyZC05OGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgsyOjMo9LlvQ035BsjHjlmmF+4yPQX0svi+S7ACr/+0jrXF63SLiZGFSNWS xo7kQDD4Xe1uzziCDM6mF51Vf7cqJzwWCpIMWrIePqMq9q9zYNOd/z6rj75qCdGC yS3t8GVF7p9XwPP+M6NwGEN+Su+drVM06NKKygk63Y4T+zZF7Pb9GL0FpZErDCVg UWDcFBbIlijEA6dOLZYIwokQAGz1olj2XRLbgfR+gTtXkuX7wU2CXJm7aK+tl/7e nPiDbn9KVNkqd4KMxCrpup5YcdyR+hEIUcwSy//oPCLIhAOMnEnXtyVTMk1aJjFr Jzk8tTaFB2/DHs2jXuPOd8tn2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK6Z3bW 9Y2E9Jjl/K9aP/isuRwKMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz VXExLURndkRMUGZLb2lIamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAosgNMvo7RSA58EaOOoPEQWLAvqGKVlgRN0+7u4x8v0rBMqq/rEUF0n+y/63W InqQt0VO6TdNYMa3QITiAT5IatWv4iSBEh0IGNUHoHPz2j45LonVb41GD3WjOW1D 2HsTW+6y5Uf+uq8oD7nTZfMcOUdCeKpS4tksvJpmdeGSdmWEp5iHHKkt9E+O8orK B/Bi0WzkCE3G4nSpjfCBrJxvHtUXPfzZL4f2lSLjHjgjpJo33Gls1vpl2tRFTqma 7GRvNMxdKcahF2n7QJcgM+5p/UrbIsIh1syXTP8Pv4tyXTo5uXGRl7p4dwSX8KjZ 0I8sRrtDf+8mfw5OMnGLj/XvRg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:27 2026 by rpki-client