$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: Vtd2epMm5E+EpTFzOAY/69Fsmr5dfiba4l4Obbs66YY= Subject key identifier: 68:9F:7E:E2:A4:3C:E1:7F:69:58:74:71:EA:15:D4:75:E6:62:D2:7E Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 8A Signing time: Sun 05 Apr 2026 06:56:59 +0000 Manifest this update: Sun 05 Apr 2026 06:56:58 +0000 Manifest next update: Sun 12 Apr 2026 06:56:58 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: iQy6OeFQuCJEEJGFX0hzcBq2jcW9qXqlAgnT8jfTLlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Apr 5 06:56:58 2026 GMT Not After : Apr 12 06:56:58 2026 GMT Subject: CN=69d207ba-5cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:fb:2d:7a:ed:b1:fc:c2:d1:5c:0b:8b:16: 83:1d:3c:de:16:e6:79:53:30:ca:ec:44:9e:e2:20: 82:35:64:6d:ff:8c:48:c0:d8:07:25:f8:09:cc:22: 1a:74:25:c7:9d:4c:0b:3a:31:19:0b:6b:fc:88:f0: 22:2a:fe:69:d9:d2:37:40:0b:d7:0a:72:4a:75:4d: 51:1e:a3:69:5b:6c:fe:04:a9:99:3c:45:63:d1:c8: 4f:c9:26:7c:28:e3:22:4a:ea:34:0e:fb:45:af:fd: 9a:ec:3a:1a:f3:3c:ad:3b:ca:ca:b3:3a:07:dd:70: 1a:ef:36:95:93:4f:f6:f8:37:9c:7e:a0:e0:67:eb: 11:9d:b7:f4:bd:13:d6:48:01:8d:c2:db:ba:64:f2: ae:75:c0:38:f6:6b:4c:d5:76:66:08:80:9a:b6:01: 53:b2:e7:6b:c7:b1:88:93:60:48:8e:01:8a:d4:c1: 68:3c:1a:a9:7f:ba:80:04:4f:a7:02:86:63:58:93: d3:1f:28:1e:8b:fd:3e:03:df:82:2a:fd:ce:11:c8: e4:1e:29:86:66:0b:04:b0:cd:3a:88:f0:52:ac:e0: 74:ac:58:27:95:c6:7f:4e:25:d8:d9:0c:19:a8:47: d1:19:c5:63:7a:8f:55:b1:34:fa:e0:f5:9d:47:49: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:7E:E2:A4:3C:E1:7F:69:58:74:71:EA:15:D4:75:E6:62:D2:7E X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:44:1d:75:29:7b:ab:e6:e3:81:b6:ec:c8:6b:fc:97:51:86: 50:13:bc:8f:b5:51:ae:7f:c7:56:87:80:75:49:e0:e3:86:e4: 66:4b:83:00:64:86:e1:72:a5:2d:3b:2e:5a:0c:92:84:4f:84: dc:8b:39:f9:62:06:9c:ae:6a:16:b9:09:e8:5b:2d:a8:d7:e7: 5b:4c:a8:b4:89:ca:f0:28:2b:5c:2a:66:eb:2f:d0:07:b0:25: 97:9f:3a:a8:3b:fd:f2:06:f7:96:d9:a0:3e:08:6d:e6:e3:ba: ec:d7:6d:43:67:73:bb:40:b9:ee:1d:76:a3:c6:b7:80:e8:3a: f8:8f:f3:bd:02:ca:55:be:0c:34:7b:7b:e2:b2:e0:d9:0e:96: ea:cb:62:82:bc:d6:4c:5e:6d:12:8a:f2:92:f0:12:51:b2:2f: 07:fa:8c:e0:d6:ce:e0:14:38:16:0f:4a:87:2b:01:82:0e:f6: 1f:23:ba:6d:85:ba:b5:1d:e6:79:bc:1f:32:8d:ed:cc:1d:f4: b4:97:63:21:48:d9:eb:d5:ad:30:3e:f0:1c:52:c6:4f:32:aa: a0:d5:a7:e6:aa:21:b1:0b:b2:12:e0:98:5d:de:9d:c6:c4:ba: 29:eb:17:0d:dd:2d:17:ed:99:04:3c:56:c2:84:80:0e:ac:00: cf:21:e1:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQzRjIxMTAvBgNVBAUTKDFENUJFMzkxNTJFQTZENkRGMDlGOUQ4NEFDNjlBOTYx QjdDODM4NkUwHhcNMjYwNDA1MDY1NjU4WhcNMjYwNDEyMDY1NjU4WjAYMRYwFAYD VQQDEw02OWQyMDdiYS01Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPX7LXrtsfzC0VwLixaDHTzeFuZ5UzDK7ESe4iCCNWRt/4xIwNgHJfgJzCIa dCXHnUwLOjEZC2v8iPAiKv5p2dI3QAvXCnJKdU1RHqNpW2z+BKmZPEVj0chPySZ8 KOMiSuo0DvtFr/2a7Doa8zytO8rKszoH3XAa7zaVk0/2+DecfqDgZ+sRnbf0vRPW SAGNwtu6ZPKudcA49mtM1XZmCICatgFTsudrx7GIk2BIjgGK1MFoPBqpf7qABE+n AoZjWJPTHygei/0+A9+CKv3OEcjkHimGZgsEsM06iPBSrOB0rFgnlcZ/TiXY2QwZ qEfRGcVjeo9VsTT64PWdR0lmZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiffuKk POF/aVh0ceoV1HXmYtJ+MB8GA1UdIwQYMBaAFB1b45FS6m1t8J+dhKxpqWG3yDhu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80QzA0RjA2QTYw QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9IVnZqa1ZMcWJXM3duNTJFckdtcFliZklP RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9HNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80QzA0RjA2QTYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9IVnZqa1ZMcWJX M3duNTJFckdtcFliZklPRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATEQddSl7q+bjgbbsyGv8l1GGUBO8j7VRrn/HVoeAdUng44bkZkuDAGSG4XKl LTsuWgyShE+E3Is5+WIGnK5qFrkJ6FstqNfnW0yotInK8CgrXCpm6y/QB7All586 qDv98gb3ltmgPght5uO67NdtQ2dzu0C57h12o8a3gOg6+I/zvQLKVb4MNHt74rLg 2Q6W6stigrzWTF5tEorykvASUbIvB/qM4NbO4BQ4Fg9KhysBgg72HyO6bYW6tR3m ebwfMo3tzB30tJdjIUjZ69WtMD7wHFLGTzKqoNWn5qohsQuyEuCYXd6dxsS6KesX Dd0tF+2ZBDxWwoSADqwAzyHhQA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:21 2026 by rpki-client