$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: uSTLkh+oRPI4DYLgRvN+3KXdM8Zcu6hK67tbDqrHRk0= Subject key identifier: 99:28:3B:97:1D:74:02:22:27:AF:F3:5E:B8:EF:A3:48:13:D9:18:A8 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0F5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0F32 Signing time: Sat 04 Apr 2026 17:28:05 +0000 Manifest this update: Sat 04 Apr 2026 17:28:05 +0000 Manifest next update: Sat 11 Apr 2026 17:28:05 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: jKfJ1jeldwP1EiuFVeAMMANK5GYnjXetwZ3fuuefW5k=) 2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=) 3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=) 4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Apr 4 17:28:05 2026 GMT Not After : Apr 11 17:28:05 2026 GMT Subject: CN=69d14a25-75bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:77:b9:e4:81:0d:83:f6:7e:0b:49:ee:9d: 1a:10:b9:3c:05:f5:ac:e5:be:a7:69:d6:88:c9:84: fd:6a:86:52:3d:25:b6:ac:24:18:fa:45:35:8f:99: 45:2a:4e:99:45:1e:10:a5:25:2f:3a:e9:a6:52:42: 07:9f:6e:90:d6:67:d3:b3:ac:59:66:01:f3:16:37: 9a:a3:5b:6f:e9:cd:52:8c:7e:e1:b1:ab:01:3c:71: 31:16:98:77:18:f1:cf:a2:ef:77:a8:19:11:d3:04: bf:e0:e4:6a:18:2d:2c:8f:f4:e3:a1:79:e9:63:29: 32:1b:84:3f:c5:89:f3:b4:71:b4:f1:8c:25:3b:18: 76:ad:88:18:89:ef:93:42:33:d8:46:ce:5b:05:04: b3:5c:92:64:a8:87:0c:26:5a:b0:b6:97:10:06:3e: 25:50:4e:dd:f3:85:48:5c:6c:d1:4c:f3:09:f8:d4: 2f:2b:2b:ec:c8:d9:f1:4d:5a:3d:3a:ea:8c:f5:81: 8a:73:ee:2d:b1:6e:95:5e:2a:00:d3:af:2e:d7:d0: a8:28:10:9e:bc:92:39:69:e6:ff:24:6b:76:c1:be: 0e:27:7c:69:f0:ba:c1:72:c8:f7:5a:6f:c5:0a:c6: ad:67:5c:95:f2:58:09:b7:ea:36:93:3a:e4:aa:48: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:3B:97:1D:74:02:22:27:AF:F3:5E:B8:EF:A3:48:13:D9:18:A8 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4d:60:55:49:d8:6b:78:a3:71:57:aa:4a:88:65:3a:b7:c1: 32:2e:2d:de:33:14:d2:32:69:d7:6b:ca:58:32:59:24:8d:71: df:1f:7d:d3:56:73:86:ef:f5:da:9a:fe:ee:71:c5:0b:7e:5a: 7b:84:4c:84:d2:9a:19:ea:3d:1c:85:1e:ee:a1:26:85:cf:4b: 71:f1:d5:ac:35:1d:84:63:e6:63:e8:f4:f0:88:34:78:97:54: 65:ca:05:00:be:6c:aa:cb:d5:ca:69:ba:5b:2c:9d:33:a9:d9: 91:7a:44:33:1a:13:4b:d7:54:c1:ec:33:7c:40:7d:cd:43:09: 56:90:fa:a6:cb:5b:8d:3d:e3:72:f3:38:24:4c:05:17:a3:ce: d2:71:c0:7c:dd:4d:1d:b0:54:2e:9a:e3:8d:94:b1:58:90:38: 63:74:d5:8f:4d:da:f4:28:70:87:a4:11:28:5b:ab:96:db:9a: 5b:b1:24:af:53:50:ac:32:46:c7:9d:de:14:1b:ef:9f:b1:cb: 1e:69:b3:2c:6f:99:2b:7d:d6:34:36:31:0d:0a:74:98:a1:ee: 58:38:35:b9:8f:bd:ff:2a:b7:41:0b:b3:ba:87:69:4d:c5:af: 64:1f:92:0e:3a:32:79:95:4a:9f:87:b9:b6:5f:16:e3:f2:72: 95:9a:87:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjYwNDA0MTcyODA1WhcNMjYwNDExMTcyODA1WjAYMRYwFAYD VQQDEw02OWQxNGEyNS03NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0N3ueSBDYP2fgtJ7p0aELk8BfWs5b6nadaIyYT9aoZSPSW2rCQY+kU1j5lF Kk6ZRR4QpSUvOummUkIHn26Q1mfTs6xZZgHzFjeao1tv6c1SjH7hsasBPHExFph3 GPHPou93qBkR0wS/4ORqGC0sj/TjoXnpYykyG4Q/xYnztHG08YwlOxh2rYgYie+T QjPYRs5bBQSzXJJkqIcMJlqwtpcQBj4lUE7d84VIXGzRTPMJ+NQvKyvsyNnxTVo9 OuqM9YGKc+4tsW6VXioA068u19CoKBCevJI5aeb/JGt2wb4OJ3xp8LrBcsj3Wm/F CsatZ1yV8lgJt+o2kzrkqki8bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkoO5cd dAIiJ6/zXrjvo0gT2RioMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtk1gVUnYa3ijcVeqSohlOrfBMi4t3jMU0jJp12vKWDJZJI1x3x9901Zzhu/1 2pr+7nHFC35ae4RMhNKaGeo9HIUe7qEmhc9LcfHVrDUdhGPmY+j08Ig0eJdUZcoF AL5sqsvVymm6WyydM6nZkXpEMxoTS9dUwewzfEB9zUMJVpD6pstbjT3jcvM4JEwF F6PO0nHAfN1NHbBULprjjZSxWJA4Y3TVj03a9Chwh6QRKFurltuaW7Ekr1NQrDJG x53eFBvvn7HLHmmzLG+ZK33WNDYxDQp0mKHuWDg1uY+9/yq3QQuzuodpTcWvZB+S DjoyeZVKn4e5tl8W4/JylZqH7w== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:45 2026 by rpki-client