$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: dD3/xZn3Nbz8Y0Nx8cTcyA1aeNzr8AcvcLVlMnax5DU= Subject key identifier: D0:64:6A:28:1B:E6:AB:82:9A:73:F3:5B:DC:A7:B7:76:C7:11:64:45 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: EC Signing time: Sun 05 Apr 2026 05:46:21 +0000 Manifest this update: Sun 05 Apr 2026 05:46:20 +0000 Manifest next update: Sun 12 Apr 2026 05:46:20 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: 8Rf/tO5Mh7a4hqTqA23G9G/9NVUy1N6mRaYxHLis0As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Apr 5 05:46:20 2026 GMT Not After : Apr 12 05:46:20 2026 GMT Subject: CN=69d1f72d-5f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:2c:c5:a3:ff:a6:12:9d:14:39:d0:ae:5d: 01:00:c2:8f:11:8b:64:f5:be:26:1f:b2:c3:a4:84: 44:41:38:62:46:09:cb:d9:51:9e:04:d2:70:5c:af: 0d:b6:0c:aa:83:f7:ed:e4:77:ca:c8:27:c5:15:82: fd:fd:10:6f:80:4d:b0:3d:25:f6:df:d9:4b:73:49: e4:eb:29:ed:55:e6:4d:ee:c5:f1:6c:5d:0d:87:c1: d0:68:86:18:a4:f5:b7:41:aa:e3:97:c0:9b:71:3a: 37:6e:08:43:6d:b1:87:1f:d2:01:0a:0d:a0:51:16: 5a:64:68:17:8f:bf:da:44:c5:81:ae:55:47:95:be: ae:c4:e8:01:4c:e2:92:81:b3:3c:1d:3a:b8:88:e5: 66:b6:2e:04:35:ce:b8:0a:ba:7c:7c:16:0f:31:01: ee:51:56:ff:52:59:4c:b2:23:57:e2:e1:fd:4b:99: 72:47:8c:c9:c6:b4:50:84:4b:0d:c4:3f:09:22:73: 44:b1:93:4b:bc:ff:1c:0f:1d:fb:2f:95:3f:76:d5: 42:59:18:cd:27:68:71:e6:25:29:91:52:7a:46:f8: 1c:32:c6:82:d3:1f:7b:2d:7f:37:43:cb:61:a7:ae: 7b:ef:b9:67:11:b1:3b:0e:ba:41:08:04:35:4a:6e: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:6A:28:1B:E6:AB:82:9A:73:F3:5B:DC:A7:B7:76:C7:11:64:45 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:41:80:0d:fa:f9:80:cb:28:41:c6:ed:cb:1c:c5:5e:cb:95: 7e:80:93:ed:e5:92:11:60:18:87:ed:47:dd:f6:4f:cf:ec:df: 34:cc:4d:41:61:d8:e7:89:2e:3b:dc:9a:73:f8:90:db:dc:1b: 99:1e:f9:c6:77:5d:04:1e:5a:cd:a5:e9:cd:86:af:33:fc:de: 70:03:95:75:d7:8c:22:d7:ee:3d:da:4b:30:35:3d:40:ea:ba: 5a:05:8c:0e:30:b4:e3:a6:aa:90:7f:5c:ce:5b:83:80:c8:b4: 2f:5d:c7:e3:9d:d4:5d:17:a7:2c:71:1e:63:56:15:58:e5:93: 0f:7a:30:94:43:2b:03:4d:52:ab:f6:f5:cb:a6:c6:43:4e:cf: 50:12:d4:bd:37:54:40:07:f7:a9:1f:fb:c3:ec:58:be:52:03: ba:f8:ad:e7:41:ea:25:11:26:20:a3:b6:3a:3d:49:44:82:35: b4:3f:e4:fb:64:56:5b:14:26:90:2b:0d:1c:07:61:e6:8d:09: 9c:35:1e:79:4f:77:1e:7d:1e:66:46:28:35:9c:7b:4d:49:ef: 4c:ac:f7:8a:65:73:83:be:35:9a:3b:4f:94:67:a8:ca:84:35: 5b:35:cc:8e:6f:e0:9e:92:30:9e:60:7d:e6:32:71:ef:c8:91: c7:5a:f9:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjYwNDA1MDU0NjIwWhcNMjYwNDEyMDU0NjIwWjAYMRYwFAYD VQQDEw02OWQxZjcyZC01ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndQsxaP/phKdFDnQrl0BAMKPEYtk9b4mH7LDpIREQThiRgnL2VGeBNJwXK8N tgyqg/ft5HfKyCfFFYL9/RBvgE2wPSX239lLc0nk6yntVeZN7sXxbF0Nh8HQaIYY pPW3Qarjl8CbcTo3bghDbbGHH9IBCg2gURZaZGgXj7/aRMWBrlVHlb6uxOgBTOKS gbM8HTq4iOVmti4ENc64Crp8fBYPMQHuUVb/UllMsiNX4uH9S5lyR4zJxrRQhEsN xD8JInNEsZNLvP8cDx37L5U/dtVCWRjNJ2hx5iUpkVJ6RvgcMsaC0x97LX83Q8th p65777lnEbE7DrpBCAQ1Sm5DhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBkaigb 5quCmnPzW9ynt3bHEWRFMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN0GADfr5gMsoQcbtyxzFXsuVfoCT7eWSEWAYh+1H3fZPz+zfNMxNQWHY54ku O9yac/iQ29wbmR75xnddBB5azaXpzYavM/zecAOVddeMItfuPdpLMDU9QOq6WgWM DjC046aqkH9czluDgMi0L13H453UXRenLHEeY1YVWOWTD3owlEMrA01Sq/b1y6bG Q07PUBLUvTdUQAf3qR/7w+xYvlIDuvit50HqJREmIKO2Oj1JRII1tD/k+2RWWxQm kCsNHAdh5o0JnDUeeU93Hn0eZkYoNZx7TUnvTKz3imVzg741mjtPlGeoyoQ1WzXM jm/gnpIwnmB95jJx78iRx1r5Bw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:58 2026 by rpki-client