$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: Bhmp5rw6wT+Yvuy0lbOziaKPl6RqT8G095lFexOiSVY= Subject key identifier: 84:F5:E0:FF:44:27:58:91:DC:E3:70:71:00:B3:94:AC:F0:04:B4:19 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 0404 Signing time: Sun 05 Apr 2026 00:13:53 +0000 Manifest this update: Sun 05 Apr 2026 00:13:52 +0000 Manifest next update: Sun 12 Apr 2026 00:13:52 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: +acQiG1e+AKJcmpaO3nnuu595j1SMtjQyNhQfvNVlmk=) 2: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=) 3: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Apr 5 00:13:52 2026 GMT Not After : Apr 12 00:13:52 2026 GMT Subject: CN=69d1a941-b063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:cb:81:52:69:49:72:a1:6a:83:c6:77:00: 1c:b5:8d:c9:39:54:80:5d:0e:d3:75:76:67:5f:33: ad:90:b5:b6:54:9c:e5:b6:be:88:be:d7:18:c6:20: 0c:73:42:0b:1f:a7:2e:09:51:f1:bf:d6:8a:93:86: 1a:5a:ab:13:3b:98:bb:86:75:eb:95:c4:69:67:43: 32:90:b2:cb:55:df:6a:a9:df:0d:4e:2d:af:8e:75: 5d:5e:71:c8:8d:5a:38:4f:10:6a:73:c6:ee:6f:73: 01:ef:9c:fc:60:3a:c6:a1:49:9d:c9:d6:66:ca:ed: 1e:38:b1:b3:b7:eb:f2:57:be:a1:71:7c:8e:4f:c5: 17:0b:3a:8b:87:92:44:69:f7:ba:d6:8c:c0:d9:78: 63:02:a1:97:c9:b6:00:43:10:92:c0:f8:87:63:3d: 83:41:e5:f4:ee:01:0e:3c:8d:ca:ea:3e:2e:0a:59: dc:42:5e:92:83:1e:59:22:bf:14:a8:59:55:bc:75: d3:ac:30:9f:a2:f4:ed:23:ff:92:9b:25:d6:2d:e2: bf:34:cb:66:30:11:a1:44:30:71:70:3b:60:e3:6c: ac:07:14:5f:4f:da:40:65:b7:43:d0:63:a5:16:e2: c7:80:7f:e4:5d:7c:e9:85:b0:1b:d7:0f:df:aa:90: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F5:E0:FF:44:27:58:91:DC:E3:70:71:00:B3:94:AC:F0:04:B4:19 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:78:09:7d:3a:be:6e:20:55:42:59:26:00:9b:13:2e:46: 39:43:1a:55:a4:cd:51:37:10:b3:bc:f4:c5:0a:fb:6a:bc:3f: 3d:4d:27:cb:19:97:08:4e:76:5e:be:e4:8e:62:f3:5a:9e:61: d1:a5:b2:26:d6:31:0c:44:68:c7:d5:1f:e5:63:a4:db:1d:a9: 62:31:fa:cc:6d:4a:f7:c6:d6:17:fb:c8:76:42:08:3c:c7:01: ff:ff:7d:c0:89:8a:19:81:0c:81:ed:4f:77:1d:df:42:2f:22: 35:c7:aa:c2:11:b6:b4:8f:03:72:39:8c:d0:9b:38:bb:11:50: 34:a7:5e:bc:bf:81:1e:03:b8:1c:31:d3:45:46:11:c3:11:0d: 85:d6:74:28:bf:31:aa:d6:13:ae:8f:3a:7c:62:29:04:f9:1d: 1a:81:59:fd:e5:c9:a5:1a:3f:80:3d:25:a8:31:ca:4f:47:86: f2:c3:60:84:43:cc:6f:b5:6a:93:92:7c:3f:d9:53:60:93:97: 74:62:f1:21:03:20:76:0a:6f:39:91:f2:7b:9c:b9:2c:25:09: 58:22:c7:6b:e8:80:7b:63:65:5c:0e:e6:ef:d8:1d:72:bd:51: ea:66:e5:46:a0:a6:33:61:1f:a4:01:32:d2:19:2c:e2:36:1a: 4b:2f:f7:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwNDA1MDAxMzUyWhcNMjYwNDEyMDAxMzUyWjAYMRYwFAYD VQQDEw02OWQxYTk0MS1iMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3vLgVJpSXKhaoPGdwActY3JOVSAXQ7TdXZnXzOtkLW2VJzltr6IvtcYxiAM c0ILH6cuCVHxv9aKk4YaWqsTO5i7hnXrlcRpZ0MykLLLVd9qqd8NTi2vjnVdXnHI jVo4TxBqc8bub3MB75z8YDrGoUmdydZmyu0eOLGzt+vyV76hcXyOT8UXCzqLh5JE afe61ozA2XhjAqGXybYAQxCSwPiHYz2DQeX07gEOPI3K6j4uClncQl6Sgx5ZIr8U qFlVvHXTrDCfovTtI/+SmyXWLeK/NMtmMBGhRDBxcDtg42ysBxRfT9pAZbdD0GOl FuLHgH/kXXzphbAb1w/fqpCP4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIT14P9E J1iR3ONwcQCzlKzwBLQZMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATa54CX06vm4gVUJZJgCbEy5GOUMaVaTNUTcQs7z0xQr7arw/PU0nyxmXCE52 Xr7kjmLzWp5h0aWyJtYxDERox9Uf5WOk2x2pYjH6zG1K98bWF/vIdkIIPMcB//99 wImKGYEMge1Pdx3fQi8iNceqwhG2tI8DcjmM0Js4uxFQNKdevL+BHgO4HDHTRUYR wxENhdZ0KL8xqtYTro86fGIpBPkdGoFZ/eXJpRo/gD0lqDHKT0eG8sNghEPMb7Vq k5J8P9lTYJOXdGLxIQMgdgpvOZHye5y5LCUJWCLHa+iAe2NlXA7m79gdcr1R6mbl RqCmM2EfpAEy0hks4jYaSy/3Tw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:28:57 2026 by rpki-client