$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: EQuL9xbLlMnTB7UXQPRBMTmHC5iT5fF+Gf2J/wjF30Y= Subject key identifier: 82:A2:49:57:76:FA:15:5E:49:95:1F:A7:C2:A6:3E:2A:C9:2D:7D:55 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 06F9 Signing time: Mon 02 Mar 2026 02:57:40 +0000 Manifest this update: Mon 02 Mar 2026 02:57:38 +0000 Manifest next update: Mon 09 Mar 2026 02:57:38 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: gWPK+pj2GfdaxCtlCvjbMYCcVbqSWFJH4q1C5YATG7s=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Mar 2 02:57:38 2026 GMT Not After : Mar 9 02:57:38 2026 GMT Subject: CN=69a4fca3-b584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:df:40:be:c6:dc:b8:74:66:74:21:2d:fe: 1a:88:4d:d3:f5:22:9c:45:23:36:24:83:81:80:6e: 2d:fc:3a:69:48:a7:de:27:ea:2a:ac:d5:75:8e:ae: c6:47:5c:c7:77:d3:cc:1c:c5:0d:65:54:f4:f6:ae: 77:61:08:8f:5f:00:7a:b4:88:fc:99:38:47:b3:f9: 2d:c6:8c:e7:b6:b7:f0:3c:c3:27:ad:f1:4b:43:ec: c1:5e:9c:37:a3:59:50:8c:28:9d:25:f8:ae:2d:a7: f8:cf:91:2a:44:77:7c:db:79:49:80:c1:bd:a5:22: 01:01:ac:49:61:2b:4f:6c:9f:f0:ee:f2:b4:19:9d: ff:99:db:8e:b3:da:2e:76:5e:ee:93:40:d3:65:b1: fb:c7:b8:9e:dc:75:ea:97:fa:44:ba:d6:17:22:28: 47:50:dc:5a:96:63:6b:dc:f7:4b:1c:86:4d:11:2c: b2:59:e6:7c:2e:0f:de:0b:09:c3:f6:e2:34:7b:58: 89:7a:d6:ab:9b:b4:09:ab:c3:02:c1:d1:99:72:77: d5:a1:88:bd:8e:f9:d5:58:ae:75:b4:68:b0:ed:6b: 59:8e:ee:1a:60:fa:b3:ab:db:cd:63:39:79:ab:2c: c2:ef:0d:01:d2:1a:9c:41:19:7b:e9:3b:38:00:38: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A2:49:57:76:FA:15:5E:49:95:1F:A7:C2:A6:3E:2A:C9:2D:7D:55 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:7b:73:ea:02:25:7e:e9:21:12:23:84:08:ee:56:ad:90:76: 0e:b9:a9:fb:ac:05:4b:54:c0:c4:3b:ce:a5:56:53:a9:9a:d5: e2:f9:2b:22:af:07:5d:f0:c7:e0:83:f6:55:71:e7:ec:25:91: b7:8d:a9:b9:5d:33:68:7c:ac:19:4d:b1:64:d5:4b:74:b2:c9: 0d:75:45:3d:07:a9:0f:3d:71:44:21:63:14:e8:dd:4c:3a:85: 6f:31:83:82:ea:ee:8f:9d:89:f5:8b:1c:17:9c:23:2a:70:52: 41:1c:18:fe:42:07:ff:87:2b:7b:39:be:bc:13:cb:81:9c:af: 1e:ba:40:f0:6a:2b:5c:44:08:af:42:18:69:cf:e8:c6:11:c2: 2c:5c:e2:40:3c:22:1b:d9:79:f2:4c:9b:6d:a0:d4:f8:e2:58: 5e:47:7b:6b:38:c2:9b:ac:65:2b:d9:11:15:ff:f5:31:80:3b: 83:14:69:cf:19:ab:fa:36:9a:f0:c1:eb:87:3e:94:b4:46:44: 54:6a:01:3f:f8:06:74:27:30:fe:fe:6e:57:04:77:0f:ee:9b: 8b:dd:a7:bc:b1:af:6c:ed:32:60:85:fd:0c:dd:52:9c:79:50: dc:3d:19:e3:bb:ad:15:87:a3:d4:86:d1:59:64:aa:76:0c:09: c4:ab:cb:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjYwMzAyMDI1NzM4WhcNMjYwMzA5MDI1NzM4WjAYMRYwFAYD VQQDEw02OWE0ZmNhMy1iNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQrfQL7G3Lh0ZnQhLf4aiE3T9SKcRSM2JIOBgG4t/DppSKfeJ+oqrNV1jq7G R1zHd9PMHMUNZVT09q53YQiPXwB6tIj8mThHs/ktxozntrfwPMMnrfFLQ+zBXpw3 o1lQjCidJfiuLaf4z5EqRHd823lJgMG9pSIBAaxJYStPbJ/w7vK0GZ3/mduOs9ou dl7uk0DTZbH7x7ie3HXql/pEutYXIihHUNxalmNr3PdLHIZNESyyWeZ8Lg/eCwnD 9uI0e1iJetarm7QJq8MCwdGZcnfVoYi9jvnVWK51tGiw7WtZju4aYPqzq9vNYzl5 qyzC7w0B0hqcQRl76Ts4ADgxJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKiSVd2 +hVeSZUfp8KmPirJLX1VMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQHtz6gIlfukhEiOECO5WrZB2Drmp+6wFS1TAxDvOpVZTqZrV4vkrIq8HXfDH 4IP2VXHn7CWRt42puV0zaHysGU2xZNVLdLLJDXVFPQepDz1xRCFjFOjdTDqFbzGD guruj52J9YscF5wjKnBSQRwY/kIH/4crezm+vBPLgZyvHrpA8GorXEQIr0IYac/o xhHCLFziQDwiG9l58kybbaDU+OJYXkd7azjCm6xlK9kRFf/1MYA7gxRpzxmr+jaa 8MHrhz6UtEZEVGoBP/gGdCcw/v5uVwR3D+6bi92nvLGvbO0yYIX9DN1SnHlQ3D0Z 47utFYej1IbRWWSqdgwJxKvLgQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:31 2026 by rpki-client