$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: ESvURpZZ6gnCuptsbiQo5wLTB+YPLl4RrgRAW942JLM= Subject key identifier: 20:A6:18:17:C5:55:9E:07:3B:8E:D0:72:2E:77:04:D4:0C:DD:53:7F Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0B07 Signing time: Sun 01 Mar 2026 23:19:56 +0000 Manifest this update: Sun 01 Mar 2026 23:19:53 +0000 Manifest next update: Sun 08 Mar 2026 23:19:53 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: Eb8WH04G4RJgaaaGBs7oj5M7iWS+P1yfOVQjQTP7cGE=) 2: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: co751clHp1NAb5mO2U3XRekaid6SQMW74TG1BnFabYU=) 3: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: dcfhIH+ADMwvtvoD4Y9cayQx//RYelcz4dYD7gy5YCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Mar 1 23:19:53 2026 GMT Not After : Mar 8 23:19:53 2026 GMT Subject: CN=69a4c99b-217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:bb:68:7d:4e:ff:c7:9e:32:d7:a4:d1:11: 14:10:a2:7f:a9:34:47:e1:27:19:41:76:b0:67:ff: 91:ad:21:eb:ec:46:ec:99:40:17:a3:59:f5:69:d4: c8:f7:92:d1:94:2b:3c:f5:88:99:59:56:a2:ba:0b: 9a:3f:53:c2:38:29:8a:27:56:f9:c5:7c:a1:24:56: 5c:bc:28:67:71:bc:eb:0d:01:2e:f8:6f:b9:87:a3: 96:31:cc:2e:ec:19:9b:3c:8a:f1:2c:67:d8:15:8b: 4b:e0:09:ac:58:ea:33:1d:b4:0c:f9:71:69:75:d7: bd:9a:6e:38:b3:5a:47:0c:4e:35:0f:14:ea:64:fa: 05:39:f4:cf:e6:bd:b0:ff:0a:b8:b2:5d:59:30:c2: a4:fa:c8:2e:99:e4:4d:1b:4a:7e:0f:30:53:d5:ab: c4:63:0f:3d:ff:70:5f:b8:75:2b:75:9f:a8:19:28: d8:99:16:7c:5e:f3:ab:fd:8e:3b:27:b4:78:8d:87: 10:6a:d1:4b:7e:58:95:fe:9e:58:bd:3f:fa:da:88: 54:6d:65:f4:2d:bb:bb:ba:fb:fc:b4:f4:ed:90:56: 3e:d8:fc:ab:ce:3e:5a:c3:30:e6:23:f4:a0:c6:2a: 5c:b5:e6:ec:6e:60:5c:a9:5e:4b:79:03:52:9e:59: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:18:17:C5:55:9E:07:3B:8E:D0:72:2E:77:04:D4:0C:DD:53:7F X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7c:7f:df:9c:71:a0:d7:21:5f:ac:bb:c0:4d:2c:28:ad:b2: 2d:99:e9:95:fe:77:eb:9d:57:eb:9c:6f:c0:1d:a8:d4:89:15: 9f:99:f7:59:64:3b:e4:7f:64:35:51:f5:01:44:3a:aa:12:45: ba:74:ed:ed:a2:4d:01:61:c7:d9:49:55:6d:b3:13:f9:ba:c3: 53:0a:a4:77:55:73:5d:24:48:ca:55:29:16:fa:89:19:d6:82: 4a:1a:7a:83:6d:1b:51:3e:8c:6c:e1:d0:84:c6:06:fa:cf:58: 63:1f:f6:50:71:b4:d2:b1:c5:89:9e:15:2c:29:f7:d5:5c:5d: ac:45:af:de:25:3e:15:fa:67:70:f7:07:d9:3a:56:a6:4d:7d: 31:9f:e8:53:29:58:8e:04:06:5c:2d:18:ca:b5:c9:5b:27:50: cd:89:26:1f:8e:7c:6d:e0:1f:da:ab:8a:78:11:ce:0e:b3:d7: 5e:27:2f:52:71:95:ad:c0:c0:7d:78:56:58:b4:b2:38:7f:db: 46:5d:03:55:0e:e4:c9:c8:80:76:ee:1d:00:59:c4:fb:70:72: 78:cf:56:be:ee:d3:f2:7b:6e:9a:c7:7f:82:e7:ff:f0:7b:a1: 18:6f:fd:5b:d7:0a:d7:b1:f1:4e:77:80:7e:d9:cc:64:24:39: 87:05:1c:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjYwMzAxMjMxOTUzWhcNMjYwMzA4MjMxOTUzWjAYMRYwFAYD VQQDEw02OWE0Yzk5Yi0yMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyi7aH1O/8eeMtek0REUEKJ/qTRH4ScZQXawZ/+RrSHr7EbsmUAXo1n1adTI 95LRlCs89YiZWVaiuguaP1PCOCmKJ1b5xXyhJFZcvChncbzrDQEu+G+5h6OWMcwu 7BmbPIrxLGfYFYtL4AmsWOozHbQM+XFpdde9mm44s1pHDE41DxTqZPoFOfTP5r2w /wq4sl1ZMMKk+sgumeRNG0p+DzBT1avEYw89/3BfuHUrdZ+oGSjYmRZ8XvOr/Y47 J7R4jYcQatFLfliV/p5YvT/62ohUbWX0Lbu7uvv8tPTtkFY+2Pyrzj5awzDmI/Sg xipctebsbmBcqV5LeQNSnlnqgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCmGBfF VZ4HO47Qci53BNQM3VN/MB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsnx/35xxoNchX6y7wE0sKK2yLZnplf53651X65xvwB2o1IkVn5n3WWQ75H9k NVH1AUQ6qhJFunTt7aJNAWHH2UlVbbMT+brDUwqkd1VzXSRIylUpFvqJGdaCShp6 g20bUT6MbOHQhMYG+s9YYx/2UHG00rHFiZ4VLCn31VxdrEWv3iU+FfpncPcH2TpW pk19MZ/oUylYjgQGXC0YyrXJWydQzYkmH458beAf2quKeBHODrPXXicvUnGVrcDA fXhWWLSyOH/bRl0DVQ7kyciAdu4dAFnE+3ByeM9Wvu7T8ntumsd/guf/8HuhGG/9 W9cK17HxTneAftnMZCQ5hwUckg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:10:46 2026 by rpki-client