$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: QAQTeLEpZQg6AK1ThemvjSGfCM6313bpUJVWGkroEZ8= Subject key identifier: 53:17:22:D0:A0:29:22:00:EA:C4:C3:95:15:77:95:40:B9:05:02:07 Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 01C8 Signing time: Sun 05 Apr 2026 03:20:10 +0000 Manifest this update: Sun 05 Apr 2026 03:20:09 +0000 Manifest next update: Sun 12 Apr 2026 03:20:09 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: jsn3xrVAOK8E6D5AVOJZu+CNXgAio9uYz5I10IagNB0=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: 9Cz73WT7Rn3Trdhhklo6EWl3uWAxMBB/0nYJ5e8QOZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: Apr 5 03:20:09 2026 GMT Not After : Apr 12 03:20:09 2026 GMT Subject: CN=69d1d4ea-19cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:85:f9:5b:f0:e2:b0:16:d2:31:bd:f5:38: e3:62:0c:9e:9f:80:98:0a:56:e7:3b:e4:32:d7:52: 73:38:39:44:76:89:85:5e:f8:77:95:be:d7:08:f2: 06:d5:14:ec:ec:33:b6:a9:5a:24:99:43:0e:68:11: 45:a9:df:34:c2:2b:7a:8a:aa:80:72:f6:a3:26:42: 1e:f7:60:10:78:6a:69:71:b9:45:6f:1c:56:57:fe: 66:42:70:90:62:c1:0e:60:3e:ef:a3:65:28:e3:29: c2:e0:0f:51:d6:ea:5f:33:e8:11:79:83:d3:6b:e6: 81:ed:bb:8b:0a:53:bf:c6:4d:6c:d7:1d:07:bb:f4: b7:f2:e0:64:57:15:a5:89:fa:d9:41:e2:2a:29:95: c5:12:bc:46:da:7f:2b:bc:c9:65:b3:39:5b:6f:25: 9a:7f:07:a7:2f:21:f0:be:de:9d:01:07:05:55:de: f1:43:c4:26:e7:bb:9e:a0:77:a6:2b:c5:29:3e:64: b6:40:6b:f1:3d:e0:16:f4:70:4b:10:8a:4d:70:2c: 52:7d:72:4b:ab:7e:19:e9:c8:cd:b0:85:81:6c:1c: c1:c4:3b:01:b5:53:80:bb:57:04:cc:b9:06:f1:9d: 2f:a4:fa:37:ba:58:29:5b:69:7c:d6:c7:36:59:30: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:17:22:D0:A0:29:22:00:EA:C4:C3:95:15:77:95:40:B9:05:02:07 X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a8:0e:85:e5:85:85:81:6e:17:dd:c3:de:a6:c9:b8:6c:75: 9b:45:8d:ce:38:dc:e6:86:63:51:d9:15:2c:2f:64:1e:a4:ef: 06:17:86:d3:66:82:83:5d:9f:93:23:ec:0b:d8:81:8a:e2:99: bf:7f:0b:23:84:fd:dd:9e:85:4a:33:c5:95:30:53:46:10:dd: 65:cf:60:95:f1:46:9f:9e:00:a7:70:ef:ce:f3:07:c3:aa:83: 63:5b:f1:5f:40:13:28:fe:cc:d4:23:d2:24:09:de:8b:af:13: 03:97:3c:e6:a2:f1:f4:3f:73:48:8b:51:69:13:d6:5e:f1:c4: a4:58:f9:6e:bb:6c:ab:eb:33:0d:0b:26:90:04:f5:0d:2f:33: fe:c8:2c:da:05:c0:df:c1:1d:1e:81:1e:64:d1:46:a6:99:38: 26:2c:76:a9:77:b2:ca:42:77:4e:d7:8d:19:b8:3a:fc:28:37: 1e:f8:01:87:a7:3f:c0:76:db:5b:96:ae:16:62:4a:5b:6e:70: a8:f5:f5:8a:bb:b3:07:51:c7:0b:d8:88:7d:bd:3a:bb:d3:d9: 06:41:de:bb:cb:10:23:73:bb:16:ac:f6:df:0a:a8:af:e0:8a: 28:89:c4:bd:e5:08:b7:b9:0e:f1:b7:79:d9:ff:6d:53:9e:e4: 3a:13:d4:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjYwNDA1MDMyMDA5WhcNMjYwNDEyMDMyMDA5WjAYMRYwFAYD VQQDEw02OWQxZDRlYS0xOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf+F+Vvw4rAW0jG99TjjYgyen4CYClbnO+Qy11JzODlEdomFXvh3lb7XCPIG 1RTs7DO2qVokmUMOaBFFqd80wit6iqqAcvajJkIe92AQeGppcblFbxxWV/5mQnCQ YsEOYD7vo2Uo4ynC4A9R1upfM+gReYPTa+aB7buLClO/xk1s1x0Hu/S38uBkVxWl ifrZQeIqKZXFErxG2n8rvMllszlbbyWafwenLyHwvt6dAQcFVd7xQ8Qm57ueoHem K8UpPmS2QGvxPeAW9HBLEIpNcCxSfXJLq34Z6cjNsIWBbBzBxDsBtVOAu1cEzLkG 8Z0vpPo3ulgpW2l81sc2WTDKwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMXItCg KSIA6sTDlRV3lUC5BQIHMB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsagOheWFhYFuF93D3qbJuGx1m0WNzjjc5oZjUdkVLC9kHqTvBheG02aCg12f kyPsC9iBiuKZv38LI4T93Z6FSjPFlTBTRhDdZc9glfFGn54Ap3DvzvMHw6qDY1vx X0ATKP7M1CPSJAnei68TA5c85qLx9D9zSItRaRPWXvHEpFj5brtsq+szDQsmkAT1 DS8z/sgs2gXA38EdHoEeZNFGppk4Jix2qXeyykJ3TteNGbg6/Cg3HvgBh6c/wHbb W5auFmJKW25wqPX1iruzB1HHC9iIfb06u9PZBkHeu8sQI3O7Fqz23wqor+CKKInE veUIt7kO8bd52f9tU57kOhPUSw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:03:07 2026 by rpki-client