$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json) Hash identifier: DxEDKizXJkdRXDfzdcCsab6hiBgAIuCtlMeWN2T6J04= Subject key identifier: C8:DE:70:D7:46:87:E4:3E:17:CE:FA:36:79:67:AB:23:F9:7B:08:03 Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft Manifest number: A4 Signing time: Sun 05 Apr 2026 06:41:56 +0000 Manifest this update: Sun 05 Apr 2026 06:41:56 +0000 Manifest next update: Sun 12 Apr 2026 06:41:56 +0000 Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: aXWNe04AY9MCm/0ux8VnhBOrDg3mJih4bLAsaD9PWCk=) 2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Validity Not Before: Apr 5 06:41:56 2026 GMT Not After : Apr 12 06:41:56 2026 GMT Subject: CN=69d20434-3135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:c0:5f:d8:85:dc:f6:a1:95:7b:b6:f2:d8: 0b:45:73:ff:fe:f5:12:75:0b:e5:7d:18:d1:f1:9d: a1:2a:34:32:ff:46:d1:4f:89:89:69:82:42:82:ba: 88:83:2c:de:eb:59:02:07:0c:4b:5d:7f:73:43:33: ac:c9:de:f7:b0:e0:97:f4:02:1b:45:b6:ed:6b:ec: df:01:db:3f:b6:26:46:2f:ba:2d:e4:43:1d:8b:bf: 8e:eb:24:65:d6:55:46:31:04:a8:d4:37:1b:52:0b: 25:6f:46:a1:80:6e:84:68:86:17:47:cc:c9:c8:d8: f3:b3:e0:66:34:ce:4c:b8:b9:76:22:7b:8c:0b:20: ed:a0:9a:0c:bd:45:2a:d6:04:86:96:f3:72:08:84: 4e:f3:16:c1:fa:c5:4d:0b:7c:06:e0:db:ec:a1:45: ab:41:f6:85:41:43:f7:ef:11:41:1b:2e:f1:97:00: 3f:02:fb:8d:a1:da:37:ad:b2:f2:f8:0a:6e:aa:d7: fe:b1:a0:db:25:5a:8b:24:b6:50:bb:46:31:ab:d4: 54:83:11:1f:fc:e0:b3:24:67:a8:dc:ca:8e:b9:b8: 29:5e:b9:38:22:60:15:c9:16:9a:d1:47:1d:74:20: 67:cb:b3:fb:7c:cc:f2:50:39:b7:7e:e7:77:07:7a: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:70:D7:46:87:E4:3E:17:CE:FA:36:79:67:AB:23:F9:7B:08:03 X509v3 Authority Key Identifier: keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e8:8c:6e:91:c1:95:ab:21:43:13:3f:b0:4e:dd:6a:4f:73: a4:63:f8:65:83:65:2c:19:4b:af:d4:fc:c3:87:d4:2a:a4:8f: be:6e:c6:86:40:11:66:48:c4:85:b0:c3:17:f5:a3:3f:74:a5: 0a:ea:f2:01:c9:03:23:e1:a2:c5:18:b0:b5:b4:e1:05:ff:c5: 02:1a:0d:5a:ed:52:c1:b9:32:64:6d:27:a0:39:ea:6a:dc:a8: 5a:2d:3c:a6:9e:47:4b:cd:94:e9:4b:28:7e:c7:15:db:a8:dc: 51:17:30:6d:2a:3d:66:1b:7d:d3:07:18:24:5f:a9:84:8d:ae: c1:03:ca:d6:b1:e6:e2:0d:1c:75:08:2d:f1:56:87:20:2f:a8: ce:0b:2e:6b:dd:9f:52:95:30:28:d2:47:96:7e:10:52:5c:9e: e6:91:75:b3:20:b6:22:a5:28:40:a0:24:7e:c9:7f:56:0f:a0: 90:1b:e9:ab:1b:ed:a6:0a:8d:dc:8d:f7:fc:03:5f:7b:83:2c: 89:a6:57:16:a8:ed:75:36:9a:ed:d2:74:11:d8:a6:b2:e6:69: fb:bb:ac:82:6d:21:32:cc:13:71:c1:75:10:11:33:98:47:ce: 5b:56:1c:6d:33:cb:09:d4:c3:88:5d:62:89:f5:6f:20:13:93: 5c:2f:d5:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxNzcxMTAvBgNVBAUTKDFDRDJENEYzMjZBMTg0QTQ4N0JGMjJBQ0Q3OEFENUMw NjhGNDY2NjEwHhcNMjYwNDA1MDY0MTU2WhcNMjYwNDEyMDY0MTU2WjAYMRYwFAYD VQQDEw02OWQyMDQzNC0zMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvfAX9iF3PahlXu28tgLRXP//vUSdQvlfRjR8Z2hKjQy/0bRT4mJaYJCgrqI gyze61kCBwxLXX9zQzOsyd73sOCX9AIbRbbta+zfAds/tiZGL7ot5EMdi7+O6yRl 1lVGMQSo1DcbUgslb0ahgG6EaIYXR8zJyNjzs+BmNM5MuLl2InuMCyDtoJoMvUUq 1gSGlvNyCIRO8xbB+sVNC3wG4NvsoUWrQfaFQUP37xFBGy7xlwA/AvuNodo3rbLy +Apuqtf+saDbJVqLJLZQu0Yxq9RUgxEf/OCzJGeo3MqOubgpXrk4ImAVyRaa0Ucd dCBny7P7fMzyUDm3fud3B3rONQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjecNdG h+Q+F876NnlnqyP5ewgDMB8GA1UdIwQYMBaAFBzS1PMmoYSkh78irNeK1cBo9GZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODE3Ny84QkEzRDhDNDNE REIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhLU0h2eUtzMTRyVndHajBa bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOTFU4eWFoaEtTSHZ5S3MxNHJWd0dqMFptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODE3Ny84QkEzRDhDNDNEREIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhL U0h2eUtzMTRyVndHajBabUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAguiMbpHBlashQxM/sE7dak9zpGP4ZYNlLBlLr9T8w4fUKqSPvm7GhkARZkjE hbDDF/WjP3SlCuryAckDI+GixRiwtbThBf/FAhoNWu1SwbkyZG0noDnqatyoWi08 pp5HS82U6UsofscV26jcURcwbSo9Zht90wcYJF+phI2uwQPK1rHm4g0cdQgt8VaH IC+ozgsua92fUpUwKNJHln4QUlye5pF1syC2IqUoQKAkfsl/Vg+gkBvpqxvtpgqN 3I33/ANfe4MsiaZXFqjtdTaa7dJ0EdimsuZp+7usgm0hMswTccF1EBEzmEfOW1Yc bTPLCdTDiF1iifVvIBOTXC/VUg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:46 2026 by rpki-client