$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: aFNioRzNI4rnxf31jn5vUgUNC4+I4GGW3P7DXdj8VIQ= Subject key identifier: C8:79:52:45:6E:21:B3:9A:74:BE:88:72:73:90:44:DD:29:23:5E:33 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: 78 Signing time: Sun 01 Mar 2026 09:10:23 +0000 Manifest this update: Sun 01 Mar 2026 09:10:22 +0000 Manifest next update: Sun 08 Mar 2026 09:10:22 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: AZrbrBW8DmKPfwtgGczE5wMKL3kbSQkDYuqh3lZQCjM=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: O/ttwvSwFeVGz348mgWAK4NKEaNPGiiCj0Dett+ARNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Mar 1 09:10:22 2026 GMT Not After : Mar 8 09:10:22 2026 GMT Subject: CN=69a4027e-7c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:80:1b:8c:fc:1c:ce:0c:36:42:ea:b0:82: d6:b5:0f:22:1a:cd:aa:aa:3b:09:c4:48:62:d0:d0: b5:13:23:d1:2a:a2:2e:5b:8c:cb:bc:25:42:09:81: 9f:9f:2a:33:3c:de:f1:07:fd:fd:84:25:a0:39:6d: 6a:62:2a:b3:4d:8a:43:2b:ee:6c:d6:f3:c8:8f:1a: 85:7b:75:da:46:4c:f7:aa:e2:67:a5:b1:e6:74:f1: 2b:19:52:7c:d1:aa:7b:a0:00:c5:7b:df:50:fc:f6: 54:07:56:c0:25:75:b3:27:9d:d9:b4:5f:a4:94:57: 42:51:5c:c4:c2:82:15:7f:54:15:67:32:32:5c:ad: 32:3f:0b:2c:0b:1b:77:b5:33:82:ae:76:c0:98:72: cf:57:26:73:a9:32:72:04:96:fe:2f:13:4f:56:d6: b4:ec:c7:11:57:db:b2:51:a6:c7:99:bb:32:d8:6a: 27:80:14:df:c5:32:e5:83:b6:8c:4b:1d:ab:01:ef: af:e6:dc:68:de:7b:e2:f0:78:16:16:56:93:6b:02: e2:3c:b7:5f:11:3d:d1:75:c6:8b:21:47:af:4c:77: 3b:e8:bf:ac:94:97:d4:99:f6:8f:1c:07:2a:f7:c1: 9e:b8:bb:23:6c:17:83:1b:7c:01:1a:69:40:46:02: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:79:52:45:6E:21:B3:9A:74:BE:88:72:73:90:44:DD:29:23:5E:33 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e4:cc:94:15:a5:b7:01:de:46:ee:0d:0a:fd:77:c4:58:f8: 9a:5a:06:7a:8d:2d:e1:60:15:5f:e2:35:4f:6c:6c:93:6e:b0: 6d:8b:b7:dd:eb:7f:8f:3e:1e:17:ae:e7:ba:08:03:93:be:25: 15:d2:74:30:81:30:bf:e6:a9:fc:47:54:f7:5b:84:bc:f7:8b: 37:c4:84:b6:e9:08:81:a4:85:05:c0:7b:d7:b3:43:aa:c9:fb: df:ab:70:db:d8:28:23:e5:94:4f:b8:c3:ed:3c:36:56:a2:4d: cf:30:0d:e5:69:4a:fd:09:a3:16:48:65:c0:3e:94:04:87:95: 82:23:8d:d0:68:8c:6a:29:77:72:89:36:0e:e5:45:f4:2c:c0: ab:82:16:6b:0c:77:a4:f6:8a:63:21:bf:cc:ca:8b:ef:af:67: 52:42:b1:09:5f:07:d3:cc:72:cd:8a:aa:2d:89:e3:82:f5:b5: ad:43:00:b7:df:0d:47:85:ee:0b:93:79:75:73:2a:75:97:4a: 02:f6:fd:62:f0:db:6a:8c:50:dd:b0:89:de:c0:ef:c2:2b:15: a9:b5:76:c7:ed:d4:be:82:40:57:01:29:a1:e5:94:9f:22:e4: 88:52:7b:f1:dc:f4:02:86:88:c3:59:83:28:87:f2:69:e9:80: e2:e8:d1:7b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNjAzMDEwOTEwMjJaFw0yNjAzMDgwOTEwMjJaMBgxFjAUBgNV BAMTDTY5YTQwMjdlLTdjM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMqoAbjPwczgw2Quqwgta1DyIazaqqOwnESGLQ0LUTI9Eqoi5bjMu8JUIJgZ+f KjM83vEH/f2EJaA5bWpiKrNNikMr7mzW88iPGoV7ddpGTPeq4melseZ08SsZUnzR qnugAMV731D89lQHVsAldbMnndm0X6SUV0JRXMTCghV/VBVnMjJcrTI/CywLG3e1 M4KudsCYcs9XJnOpMnIElv4vE09W1rTsxxFX27JRpseZuzLYaieAFN/FMuWDtoxL HasB76/m3Gjee+LweBYWVpNrAuI8t18RPdF1xoshR69Mdzvov6yUl9SZ9o8cByr3 wZ64uyNsF4MbfAEaaUBGAt9nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyHlSRW4h s5p0vohyc5BE3SkjXjMwHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RUE0LzI2NERDRjFDNjNBRjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNO LVJVRkZhckFKaXp0WFBQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx5MyUFaW3Ad5G7g0K/XfEWPiaWgZ6jS3hYBVf4jVPbGyTbrBti7fd63+PPh4X rue6CAOTviUV0nQwgTC/5qn8R1T3W4S894s3xIS26QiBpIUFwHvXs0Oqyfvfq3Db 2Cgj5ZRPuMPtPDZWok3PMA3laUr9CaMWSGXAPpQEh5WCI43QaIxqKXdyiTYO5UX0 LMCrghZrDHek9opjIb/Myovvr2dSQrEJXwfTzHLNiqotieOC9bWtQwC33w1Hhe4L k3l1cyp1l0oC9v1i8NtqjFDdsInewO/CKxWptXbH7dS+gkBXASmh5ZSfIuSIUnvx 3PQChojDWYMoh/Jp6YDi6NF7 -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:37 2026 by rpki-client