$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: Jj+Mh5sDwbgfs89nwbGI2IUHsy3BLuzot/EfSyFMuM4= Subject key identifier: 4B:41:A9:13:ED:40:2E:FA:24:54:6C:2B:3E:1C:E3:75:62:35:04:56 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 0223 Signing time: Mon 02 Mar 2026 00:41:03 +0000 Manifest this update: Mon 02 Mar 2026 00:41:00 +0000 Manifest next update: Mon 09 Mar 2026 00:41:00 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: qIFP5r5wHq1D3ZU1rcJfG2tCf5rbThxEaR1xzVNP4Wk=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Mar 2 00:41:00 2026 GMT Not After : Mar 9 00:41:00 2026 GMT Subject: CN=69a4dc9f-3979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:57:73:b9:60:d5:ae:41:9b:d8:42:91:cb: 5b:26:41:74:39:d1:c8:ca:56:f4:9c:a7:18:bc:49: 94:5d:56:7b:7c:aa:7d:85:8a:5e:7e:0a:26:41:00: 7f:ce:68:ab:4a:cc:26:f0:55:0e:c8:7f:10:0b:72: 0b:65:e5:b3:f6:a7:c8:03:87:f5:c2:01:95:06:33: 20:f5:e5:33:2e:cf:ae:bf:8c:62:1b:b2:16:d7:31: 5a:3c:48:c3:07:5d:1b:f7:06:59:84:37:7d:66:4b: 92:16:4d:44:84:69:6f:70:3f:f1:8a:9e:bf:17:46: ab:86:65:0f:e0:7c:d1:c8:d6:cf:bc:41:d9:48:f6: 70:cf:98:e9:07:85:c2:e8:49:a9:b6:ce:ca:f9:91: 0c:2f:dc:d9:79:f1:41:d2:3e:7d:f3:48:55:90:e8: 2f:87:e4:b8:2e:3c:9d:61:6e:96:19:7e:52:22:1c: fa:fe:31:67:c9:f9:1c:23:62:7b:c6:e6:ab:f1:31: f4:42:ca:9b:19:4a:3a:d9:51:04:1e:32:bb:6a:68: 60:94:29:f1:dd:2d:a7:8b:8d:4d:d8:22:81:99:3a: 41:3f:60:1c:b3:af:97:1c:4f:24:8d:bf:58:b4:ea: 6b:47:eb:03:34:5c:d0:02:9f:4d:aa:97:64:80:2b: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:A9:13:ED:40:2E:FA:24:54:6C:2B:3E:1C:E3:75:62:35:04:56 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:41:54:b6:e3:15:bf:9b:65:72:04:b4:99:85:b2:ce:81:8a: c0:a3:36:04:94:db:21:bf:da:32:76:df:b8:c0:94:33:b4:82: 9a:88:30:0e:c6:53:26:d4:73:1f:1b:1a:d2:9b:d8:24:bc:13: 44:80:17:d1:52:ad:a2:41:f6:35:cf:2b:3c:40:77:1f:87:8b: 46:59:36:70:68:85:f6:d6:ea:32:da:ed:b6:d6:53:ef:3a:76: ab:f7:8f:4b:87:84:f2:c2:94:82:d7:63:21:5d:b2:5f:de:82: 10:15:f1:06:53:45:05:bc:2e:82:1b:3e:89:8b:eb:86:03:58: fd:0a:fa:05:3d:4e:85:ef:3d:c6:a7:a7:1b:a7:42:8c:97:6d: 90:bd:17:74:e1:43:34:8c:39:28:fe:df:0f:98:de:e5:d6:54: b7:0b:a4:f1:6f:6b:0a:c8:9a:f2:89:1c:3b:5f:71:12:ba:4b: bb:27:84:76:80:2a:09:38:3b:37:3c:98:0c:a4:de:85:dc:b6: 9d:c8:46:81:d1:c0:ab:60:b2:e1:87:86:05:0a:2d:06:b1:f9: 9d:b3:e7:a5:22:0c:76:10:58:47:c8:68:1f:41:79:8e:24:9f: 8e:d3:5c:3d:82:1b:fa:2a:52:97:89:46:55:87:4f:9f:06:8c: e7:b0:45:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjYwMzAyMDA0MTAwWhcNMjYwMzA5MDA0MTAwWjAYMRYwFAYD VQQDEw02OWE0ZGM5Zi0zOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl5Xc7lg1a5Bm9hCkctbJkF0OdHIylb0nKcYvEmUXVZ7fKp9hYpefgomQQB/ zmirSswm8FUOyH8QC3ILZeWz9qfIA4f1wgGVBjMg9eUzLs+uv4xiG7IW1zFaPEjD B10b9wZZhDd9ZkuSFk1EhGlvcD/xip6/F0arhmUP4HzRyNbPvEHZSPZwz5jpB4XC 6Empts7K+ZEML9zZefFB0j5980hVkOgvh+S4LjydYW6WGX5SIhz6/jFnyfkcI2J7 xuar8TH0QsqbGUo62VEEHjK7amhglCnx3S2ni41N2CKBmTpBP2Acs6+XHE8kjb9Y tOprR+sDNFzQAp9NqpdkgCtb5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtBqRPt QC76JFRsKz4c43ViNQRWMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd0FUtuMVv5tlcgS0mYWyzoGKwKM2BJTbIb/aMnbfuMCUM7SCmogwDsZTJtRz Hxsa0pvYJLwTRIAX0VKtokH2Nc8rPEB3H4eLRlk2cGiF9tbqMtrtttZT7zp2q/eP S4eE8sKUgtdjIV2yX96CEBXxBlNFBbwughs+iYvrhgNY/Qr6BT1Ohe89xqenG6dC jJdtkL0XdOFDNIw5KP7fD5je5dZUtwuk8W9rCsia8okcO19xErpLuyeEdoAqCTg7 NzyYDKTehdy2nchGgdHAq2Cy4YeGBQotBrH5nbPnpSIMdhBYR8hoH0F5jiSfjtNc PYIb+ipSl4lGVYdPnwaM57BF9A== -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:54 2026 by rpki-client