$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: 8HXE7TF1C3I3Zv0Sb8yTJ4ARzj+0KUzJxQRiZ9W96U8= Subject key identifier: F8:E2:35:A9:91:E1:20:06:C3:6B:E6:BB:DB:BB:F0:49:1F:E6:91:7E Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 01BC Signing time: Tue 21 Apr 2026 03:42:03 +0000 Manifest this update: Tue 21 Apr 2026 03:42:03 +0000 Manifest next update: Tue 28 Apr 2026 03:42:03 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: TQt7mSeCGvjdD8+QnNpxwDZs29yq0yhO/CODbM2n/Eg=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Apr 21 03:42:03 2026 GMT Not After : Apr 28 03:42:03 2026 GMT Subject: CN=69e6f20b-e3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8a:60:46:4e:cb:e9:73:db:2a:c6:e4:5f:a4: 72:eb:92:cd:c5:05:84:4a:76:00:6b:5c:e7:15:4a: 12:4c:c8:df:7e:d4:3c:c6:16:40:35:2f:d1:0b:ae: 93:71:92:b0:af:a9:ee:37:3a:80:5e:26:5c:11:eb: 9e:99:eb:e4:72:ac:9a:16:a3:92:f4:e8:06:04:15: f9:3f:7e:f4:69:18:83:68:9b:41:95:f9:fd:d9:38: 05:fa:c1:5d:c9:49:cb:30:94:a4:8f:4e:d5:b6:4b: f6:2a:9a:96:63:6c:24:0f:cb:1b:a8:e7:5c:a9:2d: 86:19:67:09:b0:cf:26:92:eb:29:2f:99:e2:97:84: 87:dc:da:6f:89:d9:94:ce:a1:5d:64:96:ef:1a:1e: 60:71:8a:2d:74:c7:61:b9:10:ca:e7:ef:79:67:d8: 6b:f9:3a:84:96:02:70:28:54:7a:4b:d3:a3:a6:d7: 1b:8f:d3:f7:ab:8d:4d:86:82:0f:4c:2d:6e:24:32: c8:8d:3f:4d:eb:ee:cf:bd:fd:32:91:60:f3:ad:4a: 9f:86:cd:4f:6f:24:17:26:00:de:c7:ed:82:96:41: 77:d7:17:08:e1:c0:f1:20:d2:46:67:00:07:36:7d: 1a:5d:ff:b3:1c:fc:c6:1c:9b:6c:a6:09:b9:46:5b: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:35:A9:91:E1:20:06:C3:6B:E6:BB:DB:BB:F0:49:1F:E6:91:7E X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:43:17:b7:e8:93:a2:9f:0e:47:b9:df:f6:aa:1d:3f:c0:5d: 38:54:82:ee:a5:33:71:68:79:02:e5:79:c2:c7:d9:ee:9b:81: cc:60:2e:77:1a:51:c1:d7:9a:15:62:ad:72:bb:a9:93:27:37: 83:ad:33:b5:9b:37:c9:bb:3b:7e:8f:d0:de:19:29:56:e7:f0: 03:25:a0:a2:7b:49:6b:68:2d:38:34:a9:9d:83:ef:01:2c:5c: 36:2d:bf:69:f2:86:e4:94:91:f8:03:b3:97:3e:e9:f2:bb:87: 29:a6:8a:73:b8:9d:df:8b:70:aa:a1:0f:1f:6c:2c:34:81:67: 11:99:47:ec:ab:f9:cb:1c:06:2d:b6:fa:f7:dc:37:0b:33:1e: bc:56:7e:2c:a2:ce:02:68:50:0d:24:a2:08:fc:66:85:97:0a: 38:62:fb:a3:52:cc:ba:8a:11:e5:4c:2b:06:4b:16:47:59:80: 64:b3:a0:8c:2d:f1:03:49:8f:21:05:4b:09:b4:a7:2f:36:67: 3d:e8:49:9d:0d:26:43:6e:27:62:56:f8:64:4a:5b:b6:00:d1: f4:c8:b7:26:72:dd:9e:2f:2b:50:2e:8e:e4:a0:a2:8b:eb:a5: 66:99:d3:50:79:f5:16:b3:12:bc:02:3d:6f:77:f9:2b:d3:68: e4:29:85:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjYwNDIxMDM0MjAzWhcNMjYwNDI4MDM0MjAzWjAYMRYwFAYD VQQDEw02OWU2ZjIwYi1lM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+4pgRk7L6XPbKsbkX6Ry65LNxQWESnYAa1znFUoSTMjfftQ8xhZANS/RC66T cZKwr6nuNzqAXiZcEeuemevkcqyaFqOS9OgGBBX5P370aRiDaJtBlfn92TgF+sFd yUnLMJSkj07Vtkv2KpqWY2wkD8sbqOdcqS2GGWcJsM8mkuspL5nil4SH3NpvidmU zqFdZJbvGh5gcYotdMdhuRDK5+95Z9hr+TqElgJwKFR6S9Ojptcbj9P3q41NhoIP TC1uJDLIjT9N6+7Pvf0ykWDzrUqfhs1PbyQXJgDex+2ClkF31xcI4cDxINJGZwAH Nn0aXf+zHPzGHJtspgm5RluW6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjiNamR 4SAGw2vmu9u78Ekf5pF+MB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtUMXt+iTop8OR7nf9qodP8BdOFSC7qUzcWh5AuV5wsfZ7puBzGAudxpRwdea FWKtcrupkyc3g60ztZs3ybs7fo/Q3hkpVufwAyWgontJa2gtODSpnYPvASxcNi2/ afKG5JSR+AOzlz7p8ruHKaaKc7id34twqqEPH2wsNIFnEZlH7Kv5yxwGLbb699w3 CzMevFZ+LKLOAmhQDSSiCPxmhZcKOGL7o1LMuooR5UwrBksWR1mAZLOgjC3xA0mP IQVLCbSnLzZnPehJnQ0mQ24nYlb4ZEpbtgDR9Mi3JnLdni8rUC6O5KCii+ulZpnT UHn1FrMSvAI9b3f5K9No5CmFeg== -----END CERTIFICATE-----Generated at Wed Apr 22 09:01:44 2026 by rpki-client