$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft File: rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json) Hash identifier: QpJAd2fodegr6Q8xI2GHwtUf0Nz3gWYoPp7mrmxWqbQ= Subject key identifier: 2B:A8:A8:AD:83:3C:AC:31:FC:5D:EF:5E:4E:BB:E4:9C:CB:5F:FC:14 Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49 Certificate issuer: /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft Manifest number: 0CD1 Signing time: Sat 04 Apr 2026 18:14:20 +0000 Manifest this update: Sat 04 Apr 2026 18:14:19 +0000 Manifest next update: Sat 11 Apr 2026 18:14:19 +0000 Files and hashes: 1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: N09biuCFvmkTnhk/qLZHKfpdAGsqxqiWJAY9OC8R6ko=) 2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: 4IWb1AIWezAKoYALmO7zIehYCtFAdvZjNhim+DfuwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49 Validity Not Before: Apr 4 18:14:19 2026 GMT Not After : Apr 11 18:14:19 2026 GMT Subject: CN=69d154fc-0be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:dc:90:1f:7f:21:0f:f6:93:95:1c:ec:0e: ff:46:4a:0b:d2:2e:2e:e6:ff:e6:86:53:ac:45:21: 7e:81:51:d2:3e:eb:83:b8:41:82:74:17:55:d8:45: bb:43:0a:af:78:bc:47:fa:b4:51:11:6a:e9:22:ce: 6e:47:91:df:fe:2e:6b:72:ee:3c:a1:d5:94:f7:7b: 1a:4a:bf:d3:cb:eb:f6:8f:58:c0:1b:2b:07:3d:4b: c9:5f:1d:8f:85:03:13:da:a6:ff:0d:09:27:76:2b: aa:51:c9:db:5c:2f:14:4d:9c:af:fe:93:65:03:6e: 22:88:fa:21:0b:48:03:dc:9c:11:9f:a6:c8:c8:60: c1:f4:b6:0a:a3:3e:ed:8b:4b:b0:6e:63:7d:d9:c0: ef:46:84:ea:05:5f:4e:c4:82:af:af:7a:ce:31:68: 62:75:c1:00:23:02:09:22:42:74:0f:45:86:42:29: 9d:fd:6c:81:f4:09:21:f6:6b:96:e0:d8:7c:ac:aa: 5b:16:92:1d:28:1e:ed:8f:57:11:ac:25:0e:12:7f: 27:74:49:6a:4a:3d:32:c7:3f:a0:a1:ea:2f:de:4b: a2:09:20:c5:02:ce:10:cd:c6:87:d0:39:dd:f9:8f: 38:f4:01:e5:c0:4d:cf:26:bb:35:9a:09:58:ce:ff: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A8:A8:AD:83:3C:AC:31:FC:5D:EF:5E:4E:BB:E4:9C:CB:5F:FC:14 X509v3 Authority Key Identifier: keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:28:10:37:2c:00:c5:b7:9d:66:bb:4e:7d:5b:64:fb:02:28: fd:c0:5c:1e:1e:3d:af:49:b4:97:42:24:67:1f:6c:6d:33:1b: a7:0e:85:53:22:c1:20:66:51:39:ba:30:a7:89:bd:15:9a:9f: 9c:ec:08:ed:4d:d1:48:c5:25:b9:e1:9f:d3:59:e3:a4:9d:b7: 70:43:12:ad:21:ff:7d:f2:2e:82:41:23:0c:49:8f:3b:1d:d2: fd:7a:c9:8f:78:16:67:dd:eb:6d:2d:de:b9:67:bd:ba:19:12: 56:79:a3:7a:11:f1:0f:71:b9:6e:1c:e1:4d:ee:71:9c:10:e6: 13:4e:cb:c6:8b:54:f9:8d:52:63:05:d1:dd:c4:5e:03:da:44: ed:6f:e0:eb:e2:31:15:99:32:83:04:46:29:fd:18:72:bb:ba: 05:c0:0f:64:39:97:86:66:aa:3d:f9:4a:04:cd:77:5a:06:0e: 2b:dd:4d:a7:c0:2b:d9:f9:41:0a:a5:87:94:96:b9:de:a0:e2: f6:4b:5f:49:05:ea:f2:32:77:c8:e9:84:cd:43:43:51:a2:51: db:21:09:a7:b1:9c:f0:c7:78:98:0b:90:ab:11:87:41:c8:f9: f8:61:51:83:b2:e2:b0:03:24:64:ff:67:f0:71:ab:2f:08:05: db:b4:59:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3NzcxMTAvBgNVBAUTKEFDNzEzNTA0Q0I0M0VCQ0UzNTc5NEI3REQyMkFFQTdC QjU4MjNDNDkwHhcNMjYwNDA0MTgxNDE5WhcNMjYwNDExMTgxNDE5WjAYMRYwFAYD VQQDEw02OWQxNTRmYy0wYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMLckB9/IQ/2k5Uc7A7/RkoL0i4u5v/mhlOsRSF+gVHSPuuDuEGCdBdV2EW7 QwqveLxH+rRREWrpIs5uR5Hf/i5rcu48odWU93saSr/Ty+v2j1jAGysHPUvJXx2P hQMT2qb/DQkndiuqUcnbXC8UTZyv/pNlA24iiPohC0gD3JwRn6bIyGDB9LYKoz7t i0uwbmN92cDvRoTqBV9OxIKvr3rOMWhidcEAIwIJIkJ0D0WGQimd/WyB9Akh9muW 4Nh8rKpbFpIdKB7tj1cRrCUOEn8ndElqSj0yxz+goeov3kuiCSDFAs4QzcaH0Dnd +Y849AHlwE3PJrs1mglYzv/n3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuoqK2D PKwx/F3vXk675JzLX/wUMB8GA1UdIwQYMBaAFKxxNQTLQ+vONXlLfdIq6nu1gjxJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njc3Ny9GREFBNzcyMDBB RDMxMUVBOUFERjc3MkNDNEY5QUUwMi9ySEUxQk10RDY4NDFlVXQ5MGlycWU3V0NQ RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIRTFCTXRENjg0MWVVdDkwaXJxZTdXQ1BFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njc3Ny9GREFBNzcyMDBBRDMxMUVBOUFERjc3MkNDNEY5QUUwMi9ySEUxQk10RDY4 NDFlVXQ5MGlycWU3V0NQRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2SgQNywAxbedZrtOfVtk+wIo/cBcHh49r0m0l0IkZx9sbTMbpw6FUyLBIGZR Obowp4m9FZqfnOwI7U3RSMUlueGf01njpJ23cEMSrSH/ffIugkEjDEmPOx3S/XrJ j3gWZ93rbS3euWe9uhkSVnmjehHxD3G5bhzhTe5xnBDmE07LxotU+Y1SYwXR3cRe A9pE7W/g6+IxFZkygwRGKf0Ycru6BcAPZDmXhmaqPflKBM13WgYOK91Np8Ar2flB CqWHlJa53qDi9ktfSQXq8jJ3yOmEzUNDUaJR2yEJp7Gc8Md4mAuQqxGHQcj5+GFR g7LisAMkZP9n8HGrLwgF27RZTg== -----END CERTIFICATE-----Generated at Mon Apr 6 11:27:06 2026 by rpki-client