$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: OUAAmYHbEbY9jFy302P2CTR463fDUykIvhJgdd3ssuA= Subject key identifier: D1:15:8F:26:50:1C:62:04:57:8F:58:27:88:D1:DB:58:41:23:F9:DC Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 03E9 Signing time: Mon 02 Mar 2026 02:03:47 +0000 Manifest this update: Mon 02 Mar 2026 02:03:45 +0000 Manifest next update: Mon 09 Mar 2026 02:03:45 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: q8+0YRWJDuI/FWR69pfG7XTPPkjuAufwLE749EH4ADw=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: DeN5+WLuYB95EX5XxNOKqEvwckp++ai7lfprhRYcj3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Mar 2 02:03:45 2026 GMT Not After : Mar 9 02:03:45 2026 GMT Subject: CN=69a4f002-289c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:ee:fd:34:27:cc:9a:c5:1a:22:2b:bd:da: a8:d9:0e:14:72:f3:f8:ab:4e:70:91:d9:30:88:5f: 0a:eb:c7:52:1a:85:28:46:63:f2:2a:5d:dd:c2:14: 60:91:25:80:3d:df:18:3d:a1:71:a0:b6:07:de:81: 2e:b5:8a:66:85:01:1f:32:08:e9:3a:ad:7b:30:be: 62:44:c9:31:41:cf:51:4c:bd:a3:16:d7:fb:66:f1: 0e:ff:95:dd:a6:fa:02:77:3d:ff:3d:91:c6:3a:46: fa:39:2a:1e:46:23:0e:58:6f:9e:3b:c9:d2:73:a0: 08:38:a0:ef:bd:0d:70:cc:b7:ea:d7:95:9b:af:29: 3b:69:34:f1:be:2f:aa:be:6f:b8:51:a2:e2:4f:97: 4e:ae:17:d3:5c:28:1c:8b:c5:73:b3:48:f1:f7:ac: 0a:2a:92:9c:ac:ef:7d:a5:ff:43:60:59:71:22:30: 7c:2c:d9:42:60:1b:6d:64:37:fe:b0:4a:17:eb:f9: 2e:a7:57:41:26:8d:84:1e:90:96:29:73:df:18:8a: 76:1e:23:98:98:5e:7a:13:7c:63:8e:4c:6a:6b:93: 1d:18:8d:db:e1:9b:78:85:48:33:25:e4:74:66:08: 7c:d1:22:20:55:f8:96:d6:7b:97:f3:0c:50:94:e8: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:15:8F:26:50:1C:62:04:57:8F:58:27:88:D1:DB:58:41:23:F9:DC X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:31:b1:c1:98:26:81:86:82:eb:e3:b2:20:0e:de:1a:09:7c: fd:75:e9:b1:2a:7a:f4:7b:c7:14:2f:54:d7:74:4e:17:fb:9d: b8:c1:93:93:d6:04:c2:42:64:1f:64:64:4f:2e:24:c9:86:77: 97:7c:7b:19:5b:64:7e:66:ee:a9:dd:05:e2:2f:9b:90:1e:24: b9:e4:15:e0:01:d9:a0:86:6d:9c:68:a4:1d:ed:f5:4f:64:73: 3b:e0:90:82:97:f8:61:12:d2:94:95:ff:f4:2c:8d:ac:7c:9f: a2:68:31:4c:09:b6:22:f2:f4:a5:45:6a:dc:23:d7:b9:c6:e2: a2:7a:b5:fd:34:cb:4a:1a:b7:bd:bf:47:fb:fa:c5:73:18:3f: 19:6a:d3:0a:b9:20:a6:79:9c:0e:6e:e6:12:ba:83:59:df:80: cb:cd:09:d9:69:e9:31:ed:79:23:7c:3a:ef:da:10:7a:ed:ed: 04:09:09:2c:4e:21:5e:1d:b3:21:30:f0:c9:30:7e:99:c0:f7: b9:be:27:39:b0:52:f8:7e:d0:ed:d2:12:c0:ff:c4:45:f2:4e: c6:d3:e3:15:e0:04:d0:93:0b:6c:74:9d:e1:b1:e7:89:0a:e7: 9f:a3:a5:d0:96:d3:02:40:8b:10:6d:ff:da:0e:8f:99:c4:24: 79:25:5b:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjYwMzAyMDIwMzQ1WhcNMjYwMzA5MDIwMzQ1WjAYMRYwFAYD VQQDEw02OWE0ZjAwMi0yODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gLu/TQnzJrFGiIrvdqo2Q4UcvP4q05wkdkwiF8K68dSGoUoRmPyKl3dwhRg kSWAPd8YPaFxoLYH3oEutYpmhQEfMgjpOq17ML5iRMkxQc9RTL2jFtf7ZvEO/5Xd pvoCdz3/PZHGOkb6OSoeRiMOWG+eO8nSc6AIOKDvvQ1wzLfq15Wbryk7aTTxvi+q vm+4UaLiT5dOrhfTXCgci8Vzs0jx96wKKpKcrO99pf9DYFlxIjB8LNlCYBttZDf+ sEoX6/kup1dBJo2EHpCWKXPfGIp2HiOYmF56E3xjjkxqa5MdGI3b4Zt4hUgzJeR0 Zgh80SIgVfiW1nuX8wxQlOgCIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNEVjyZQ HGIEV49YJ4jR21hBI/ncMB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATjGxwZgmgYaC6+OyIA7eGgl8/XXpsSp69HvHFC9U13ROF/uduMGTk9YEwkJk H2RkTy4kyYZ3l3x7GVtkfmbuqd0F4i+bkB4kueQV4AHZoIZtnGikHe31T2RzO+CQ gpf4YRLSlJX/9CyNrHyfomgxTAm2IvL0pUVq3CPXucbionq1/TTLShq3vb9H+/rF cxg/GWrTCrkgpnmcDm7mErqDWd+Ay80J2WnpMe15I3w679oQeu3tBAkJLE4hXh2z ITDwyTB+mcD3ub4nObBS+H7Q7dISwP/ERfJOxtPjFeAE0JMLbHSd4bHniQrnn6Ol 0JbTAkCLEG3/2g6PmcQkeSVb/A== -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:43 2026 by rpki-client