$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: UoU91S77PxzIbMoNwQP3dIFSh5oftPbe2CVc1OsCZfw= Subject key identifier: A3:C2:C1:CE:D1:42:6F:EF:C7:44:73:69:0A:F2:D1:EC:C0:B1:5A:3E Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 35A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 3561 Signing time: Sat 28 Feb 2026 14:47:03 +0000 Manifest this update: Sat 28 Feb 2026 14:47:03 +0000 Manifest next update: Sat 07 Mar 2026 14:47:03 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: 1GSE52WmTFruhEUukRI6Syr7BACbxcik+mTjQbbqUa0=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: sZVhikXu0+BgylCyd4weUDz3omEWpmI+GLV51J/cwuU=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: q2ExykZAmfzp0xfcMOWOgSv2/3eS55YeYtvtqyJjJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 14:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13736 (0x35a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Feb 28 14:47:03 2026 GMT Not After : Mar 7 14:47:03 2026 GMT Subject: CN=69a2ffe7-a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:ad:7a:75:da:c7:99:81:09:8d:c6:43:02: 1f:53:3d:18:a5:97:7c:52:86:98:76:ba:00:8c:49: 7b:aa:eb:60:79:2f:3d:a4:da:2a:8e:4e:ef:ec:d6: 44:4c:e0:0b:fa:98:65:95:ec:a6:82:9c:cf:45:c7: 39:a4:0c:85:cf:88:ad:c0:25:b2:3f:5d:b9:8a:3a: bb:0b:5e:3f:87:7d:77:eb:c9:6d:1d:4b:4d:8d:23: 18:07:5d:69:f9:73:85:7d:fa:c6:0d:ec:58:df:08: 2f:69:9e:7d:17:a2:3b:34:f8:92:3a:8c:45:7c:f7: bb:5d:d7:89:aa:17:13:20:a9:84:74:22:1e:3b:c4: d9:fe:d9:70:1e:22:74:b8:51:a4:03:53:f0:19:49: 7b:2c:26:c4:ac:dc:57:1c:d5:2d:c1:e7:da:09:ce: d7:23:54:3a:8d:2c:60:3c:67:56:6b:6f:23:2a:19: b1:19:47:60:37:eb:20:97:d2:1d:a4:7b:3c:76:f5: a0:28:e3:b0:47:0c:74:7a:b1:81:90:65:40:9e:18: 8e:b0:26:e4:4e:f7:9d:f4:be:75:48:57:20:11:f7: 94:4b:ea:66:ec:c0:17:ce:27:fd:e6:54:e8:43:10: 2d:a6:75:27:52:65:ab:21:85:8a:f6:4a:14:4f:04: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C2:C1:CE:D1:42:6F:EF:C7:44:73:69:0A:F2:D1:EC:C0:B1:5A:3E X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f4:30:db:96:b8:0f:07:e5:51:7c:90:b4:36:68:46:07:34: f1:92:ed:a3:75:c7:b6:3c:ad:1b:5c:51:f9:d4:70:2e:db:19: 7d:b5:98:45:2c:95:6f:37:82:da:ea:73:ff:2e:cf:8b:ee:40: 7b:f2:2e:de:e8:02:62:a9:3e:1c:24:04:2c:40:86:c3:21:16: bb:91:e1:0d:11:06:91:18:0e:d0:12:78:0c:2b:9c:ac:fa:18: 21:40:03:a9:8a:ab:37:0a:58:58:61:36:eb:3d:79:69:4d:35: d8:7c:3f:d4:80:6c:90:61:41:97:46:22:be:37:1d:b1:5b:ab: 54:90:40:f1:ad:b4:a1:49:8e:b5:bf:74:89:3a:7c:9b:66:85: 7e:0c:9e:78:fd:81:61:70:ff:95:fa:e3:1b:9a:4b:8b:b5:68: 97:d8:59:55:69:ed:0c:fc:30:67:1f:ca:ef:c9:7a:3f:e5:a1: d2:8c:d7:f8:fa:3a:85:fa:71:64:fb:e7:82:ac:b9:03:dc:1d: c5:b4:76:6f:f0:19:7c:f2:3f:7f:aa:3f:39:f6:b3:4d:e5:00: b3:3d:bd:45:15:b4:db:83:a9:88:1b:d7:42:98:29:e5:95:a9: 64:56:60:06:85:be:0f:5f:aa:94:b0:c5:99:af:d7:8e:cf:47: 9a:8f:e3:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwMjI4MTQ0NzAzWhcNMjYwMzA3MTQ0NzAzWjAYMRYwFAYD VQQDDA02OWEyZmZlNy1hMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZetenXax5mBCY3GQwIfUz0YpZd8UoaYdroAjEl7qutgeS89pNoqjk7v7NZE TOAL+phlleymgpzPRcc5pAyFz4itwCWyP125ijq7C14/h31368ltHUtNjSMYB11p +XOFffrGDexY3wgvaZ59F6I7NPiSOoxFfPe7XdeJqhcTIKmEdCIeO8TZ/tlwHiJ0 uFGkA1PwGUl7LCbErNxXHNUtwefaCc7XI1Q6jSxgPGdWa28jKhmxGUdgN+sgl9Id pHs8dvWgKOOwRwx0erGBkGVAnhiOsCbkTved9L51SFcgEfeUS+pm7MAXzif95lTo QxAtpnUnUmWrIYWK9koUTwQRaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPCwc7R Qm/vx0RzaQry0ezAsVo+MB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfQw25a4DwflUXyQtDZoRgc08ZLto3XHtjytG1xR+dRwLtsZfbWYRSyVbzeC 2upz/y7Pi+5Ae/Iu3ugCYqk+HCQELECGwyEWu5HhDREGkRgO0BJ4DCucrPoYIUAD qYqrNwpYWGE26z15aU012Hw/1IBskGFBl0YivjcdsVurVJBA8a20oUmOtb90iTp8 m2aFfgyeeP2BYXD/lfrjG5pLi7Vol9hZVWntDPwwZx/K78l6P+Wh0ozX+Po6hfpx ZPvngqy5A9wdxbR2b/AZfPI/f6o/OfazTeUAsz29RRW024OpiBvXQpgp5ZWpZFZg BoW+D1+qlLDFma/Xjs9Hmo/jWA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:35 2026 by rpki-client