$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json) Hash identifier: x9o4Iil5+6UYIIPks5xxQVpjKC1ibpTLgXMgX7ajYVE= Subject key identifier: 27:02:4B:05:0D:AF:7B:99:C3:D6:84:4B:39:E4:87:07:E5:F5:1E:41 Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft Manifest number: 2B Signing time: Mon 02 Mar 2026 12:36:15 +0000 Manifest this update: Mon 02 Mar 2026 12:36:14 +0000 Manifest next update: Mon 09 Mar 2026 12:36:14 +0000 Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: okEa4iXN+K7cuXHC62SF7TSVju+9TKIpZ11Knb5ZIhw=) 2: 99984580E35011F0B21921EF756F56BC.roa (hash: acgTLalltM0B7sOprD1qkiK3EfCcLMJ3xgY3XgnlWz4=) 3: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F Validity Not Before: Mar 2 12:36:14 2026 GMT Not After : Mar 9 12:36:14 2026 GMT Subject: CN=69a5843e-88c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:7d:75:88:fe:96:94:39:5b:4d:50:ab:3e: 52:ad:16:47:62:46:ef:52:58:9d:9d:7b:92:30:c8: c0:85:64:47:13:72:08:fd:69:d7:7e:b2:23:21:33: b3:ed:31:9f:42:cf:9f:a6:94:9e:b5:f7:99:49:14: 2d:3e:b5:7c:22:fa:e0:f8:c4:d0:c0:0a:21:eb:25: 40:44:34:be:dc:7c:29:e3:6f:6f:26:45:a9:9b:6b: c5:93:57:7d:1f:19:e2:71:4e:d4:7c:b9:4a:5b:96: 89:34:36:12:7b:c9:55:30:f4:5e:ae:a1:e9:f7:8b: 54:75:14:7e:ba:aa:b4:2d:e3:14:25:bf:71:ab:c7: c9:ba:cc:79:91:95:b1:72:28:dc:c1:65:14:b6:e7: e1:72:41:5e:a7:e3:d2:c8:11:c0:90:68:71:2c:b2: 3d:d0:4a:ab:57:8b:21:ac:5f:56:65:52:21:2e:6b: e7:10:28:a3:0a:74:1c:77:7f:29:d8:53:0b:38:aa: ae:69:37:11:bb:c3:2a:c0:27:8c:c4:15:f6:53:2d: bd:43:a3:83:62:e7:65:45:7a:2d:f6:25:ba:82:2c: 09:fa:2f:9a:97:8f:0a:4b:2a:e0:f0:b8:cd:38:a3: ac:79:30:95:05:2c:93:47:e7:94:1d:d7:d9:73:2d: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:02:4B:05:0D:AF:7B:99:C3:D6:84:4B:39:E4:87:07:E5:F5:1E:41 X509v3 Authority Key Identifier: keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:23:7b:76:c5:25:23:45:34:ea:5c:04:20:ea:dd:0a:42:fc: 08:a2:56:9c:c2:e9:2a:2b:00:f1:44:c7:2e:cf:84:19:a9:01: 7a:fc:c5:9c:be:c1:8f:27:36:70:78:9f:0e:54:cf:f8:86:a4: 30:63:eb:dc:e3:9f:c1:09:49:a2:32:d8:24:18:b4:30:c0:30: c2:06:e1:38:c1:02:56:99:c2:6c:de:a4:d5:77:71:f8:2d:d2: 2a:0f:30:89:9e:fb:fe:15:22:2b:7b:07:2e:16:29:1b:f4:a7: 6c:42:eb:54:61:34:fb:9e:53:f1:ed:ec:09:6f:de:50:a7:8c: 28:de:d9:f3:00:fb:bf:6c:13:62:06:a3:87:c5:74:72:3c:1f: ac:6a:e8:9f:cb:65:ad:25:ae:f4:9b:ca:57:51:e0:af:ee:1b: 14:99:42:36:ed:b9:d4:2c:80:88:99:c7:ca:24:4d:55:88:3d: 25:f2:fd:63:48:97:f2:a8:13:c0:5e:10:71:a2:64:29:96:65: 76:90:75:e2:18:81:2e:22:5d:c7:82:d7:fd:2a:66:25:b8:1f: 2e:3d:87:b0:dd:64:ca:19:31:bd:1f:eb:57:4e:e7:9f:41:59: 4b:d4:a3:f4:39:c0:86:90:e2:1c:46:f5:47:3c:89:b6:80:db: 2d:94:b3:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQ2RTExMC8GA1UEBRMoMUVFQzA3OENCNkJBNTI2NjAzQzIwQzhEOTlDM0E3NDYz MUQ5QzE0RjAeFw0yNjAzMDIxMjM2MTRaFw0yNjAzMDkxMjM2MTRaMBgxFjAUBgNV BAMTDTY5YTU4NDNlLTg4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0An11iP6WlDlbTVCrPlKtFkdiRu9SWJ2de5IwyMCFZEcTcgj9add+siMhM7Pt MZ9Cz5+mlJ6195lJFC0+tXwi+uD4xNDACiHrJUBENL7cfCnjb28mRamba8WTV30f GeJxTtR8uUpblok0NhJ7yVUw9F6uoen3i1R1FH66qrQt4xQlv3Grx8m6zHmRlbFy KNzBZRS25+FyQV6n49LIEcCQaHEssj3QSqtXiyGsX1ZlUiEua+cQKKMKdBx3fynY Uws4qq5pNxG7wyrAJ4zEFfZTLb1Do4Ni52VFei32JbqCLAn6L5qXjwpLKuDwuM04 o6x5MJUFLJNH55Qd19lzLcSRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJwJLBQ2v e5nD1oRLOeSHB+X1HkEwHwYDVR0jBBgwFoAUHuwHjLa6UmYDwgyNmcOnRjHZwU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0I2NTk3OTRDRTI5 MTExRjA5NkUyN0QxMTQ1NkY1NkJDL0h1d0hqTGE2VW1ZRHdneU5tY09uUmpIWndV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSHV3SGpMYTZVbVlEd2d5Tm1jT25Sakhad1U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDZFL0I2NTk3OTRDRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL0h1d0hqTGE2VW1Z RHdneU5tY09uUmpIWndVOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDI3t2xSUjRTTqXAQg6t0KQvwIolacwukqKwDxRMcuz4QZqQF6/MWcvsGPJzZw eJ8OVM/4hqQwY+vc45/BCUmiMtgkGLQwwDDCBuE4wQJWmcJs3qTVd3H4LdIqDzCJ nvv+FSIrewcuFikb9KdsQutUYTT7nlPx7ewJb95Qp4wo3tnzAPu/bBNiBqOHxXRy PB+sauify2WtJa70m8pXUeCv7hsUmUI27bnULICImcfKJE1ViD0l8v1jSJfyqBPA XhBxomQplmV2kHXiGIEuIl3Hgtf9KmYluB8uPYew3WTKGTG9H+tXTuefQVlL1KP0 OcCGkOIcRvVHPIm2gNstlLOy -----END CERTIFICATE-----Generated at Mon Mar 2 23:22:25 2026 by rpki-client