$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: JBEZdo/CyN3clfl/ngFajUhLGLja9jGkNHw0y6m3LM0= Subject key identifier: 02:F4:77:88:3C:AC:F0:1A:88:D9:B0:90:BE:38:74:70:C6:C5:84:65 Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 0335 Signing time: Mon 02 Mar 2026 00:05:19 +0000 Manifest this update: Mon 02 Mar 2026 00:05:17 +0000 Manifest next update: Mon 09 Mar 2026 00:05:17 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: zNh0gbv1ypNAml3l/IKCqeXh5kGmZJ1Y6O+gUpox1nk=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Mar 2 00:05:17 2026 GMT Not After : Mar 9 00:05:17 2026 GMT Subject: CN=69a4d43e-5230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:ca:4f:7e:b6:85:05:37:9f:5c:ba:87:70: 1b:53:ec:86:a6:69:a9:36:69:46:f4:cb:db:5f:fc: 16:df:f6:bb:cc:82:73:12:39:41:84:0e:54:78:9c: 20:cd:77:95:a4:8d:8f:fd:54:e7:a8:42:16:da:b7: 1d:95:b2:dd:bd:6f:f4:38:aa:4d:8b:4c:b7:39:a6: fd:f5:9c:99:c0:2d:77:9c:c6:46:c7:eb:6b:3f:a6: e9:c8:41:2e:38:23:3a:42:ad:51:fe:04:6d:24:c9: 30:4e:eb:fe:62:b6:75:c1:ab:01:28:79:89:5d:43: 3d:c5:17:c0:6a:ff:a7:73:4e:ed:cd:b4:be:00:7f: 60:06:0f:81:3d:2c:17:6a:72:d2:81:ae:86:8e:45: 17:f9:e7:61:24:fd:3a:97:d4:2a:0f:6c:df:48:79: 21:4f:d0:66:b9:50:0b:24:28:d7:41:20:3b:58:ff: 01:3e:9e:af:5f:98:71:4f:34:71:96:cb:09:0a:66: 78:f2:28:22:70:9b:f3:b9:3f:e2:67:c7:02:75:1f: 3b:25:8b:20:ed:77:59:e8:39:14:d5:4a:10:eb:8c: a3:6a:c9:21:c4:cc:7c:ed:48:2e:e2:88:3b:bb:e0: 73:31:c1:3d:4b:db:df:af:80:f4:c7:1b:5a:d7:f1: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F4:77:88:3C:AC:F0:1A:88:D9:B0:90:BE:38:74:70:C6:C5:84:65 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:f6:11:1e:79:63:72:5c:d9:4c:25:ec:c1:94:15:cc:4c: d2:36:0a:c1:00:9c:bb:22:7f:dd:37:d1:04:c1:b8:9d:1c:51: 4c:5b:2f:19:ed:89:63:0f:3c:c5:a7:d8:5a:a4:d5:2c:a7:3d: 81:22:a9:5d:7a:c3:c2:5f:1c:e8:b4:1d:96:45:da:bc:f8:92: 33:d9:06:eb:10:19:ee:6f:74:ba:c7:4b:71:91:f5:6e:ba:72: 8e:39:e2:f1:40:8d:16:f2:fe:d5:57:ab:67:5d:53:43:a6:6b: 3c:94:fb:3e:d7:a5:c2:7e:b4:3f:9a:10:ab:c6:ce:e5:fd:44: 28:59:9a:a1:90:e5:13:02:e9:c7:73:37:bd:cc:eb:9c:59:4b: 58:71:7c:76:9c:36:c8:b7:9d:98:7d:69:42:e9:74:8e:5c:06: 04:52:bf:68:f2:7d:c2:f1:f2:b5:22:a7:17:5e:be:79:7c:5f: d7:88:04:0a:a7:dc:67:0e:06:67:0e:39:bf:06:84:83:e4:6f: cc:b5:04:36:f2:27:06:71:f5:95:c5:ff:3e:cc:3c:c7:92:61: f1:ab:b7:ab:b4:f3:51:60:83:b3:61:8a:13:dd:ff:b0:58:38: 7c:a5:ca:14:e8:75:30:24:90:39:c7:76:97:ec:55:6a:47:71: 0e:5e:fd:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjYwMzAyMDAwNTE3WhcNMjYwMzA5MDAwNTE3WjAYMRYwFAYD VQQDEw02OWE0ZDQzZS01MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9zKT362hQU3n1y6h3AbU+yGpmmpNmlG9MvbX/wW3/a7zIJzEjlBhA5UeJwg zXeVpI2P/VTnqEIW2rcdlbLdvW/0OKpNi0y3Oab99ZyZwC13nMZGx+trP6bpyEEu OCM6Qq1R/gRtJMkwTuv+YrZ1wasBKHmJXUM9xRfAav+nc07tzbS+AH9gBg+BPSwX anLSga6GjkUX+edhJP06l9QqD2zfSHkhT9BmuVALJCjXQSA7WP8BPp6vX5hxTzRx lssJCmZ48igicJvzuT/iZ8cCdR87JYsg7XdZ6DkU1UoQ64yjaskhxMx87Ugu4og7 u+BzMcE9S9vfr4D0xxta1/F23QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL0d4g8 rPAaiNmwkL44dHDGxYRlMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3/2ER55Y3Jc2Uwl7MGUFcxM0jYKwQCcuyJ/3TfRBMG4nRxRTFsvGe2JYw88 xafYWqTVLKc9gSKpXXrDwl8c6LQdlkXavPiSM9kG6xAZ7m90usdLcZH1brpyjjni 8UCNFvL+1VerZ11TQ6ZrPJT7Ptelwn60P5oQq8bO5f1EKFmaoZDlEwLpx3M3vczr nFlLWHF8dpw2yLedmH1pQul0jlwGBFK/aPJ9wvHytSKnF16+eXxf14gECqfcZw4G Zw45vwaEg+RvzLUENvInBnH1lcX/Psw8x5Jh8au3q7TzUWCDs2GKE93/sFg4fKXK FOh1MCSQOcd2l+xVakdxDl79bA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:50 2026 by rpki-client