$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: LUwcodXvAeABLaRsK1F0vHx5ITSn+5pQWUAP7youCl0= Subject key identifier: 10:22:DC:56:6C:73:DD:F0:3F:2F:45:C5:36:85:57:74:03:64:75:17 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0224 Signing time: Sun 01 Mar 2026 03:36:05 +0000 Manifest this update: Sun 01 Mar 2026 03:36:05 +0000 Manifest next update: Sun 08 Mar 2026 03:36:05 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: qAf4TEHbe3a5VaBIThes2Youy2sSJBftTWDnZo6xgJo=) 2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) 3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Mar 1 03:36:05 2026 GMT Not After : Mar 8 03:36:05 2026 GMT Subject: CN=69a3b425-c084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:a8:7c:8d:56:45:dd:70:32:05:5a:00:a1: 7e:ed:15:1e:fb:1b:82:f4:67:3f:fe:09:24:96:4a: fe:9e:be:3d:2d:61:95:15:8b:00:0b:3a:5a:c8:ab: 9a:d2:ed:ed:f1:a1:4c:50:d0:f3:c7:7b:e0:de:19: 4e:6d:8d:97:c7:79:07:bd:3d:cb:10:74:ba:43:f8: de:c4:cc:d8:5c:d1:14:22:9a:52:4d:81:9a:62:de: 8a:8e:70:b3:5d:4c:a5:c4:57:12:de:0c:75:41:82: fa:db:e3:ce:1f:79:1a:a4:e8:2c:0d:5d:17:01:12: 35:43:c8:7a:f5:0e:13:e3:9a:bc:72:de:59:e7:42: 33:7c:48:b3:78:08:d5:5c:54:9b:d6:97:f7:c5:92: 50:71:3a:30:9d:6e:c4:91:f9:c4:89:3e:e3:12:c9: d2:38:9a:d3:67:76:f5:ff:35:33:fe:0f:c4:b5:6b: 82:06:1d:c6:18:88:b7:22:ad:1e:e3:5b:ce:7a:0a: c6:a0:4c:bb:57:00:20:5a:77:11:b6:24:7c:6f:19: 7b:2f:3f:dc:52:43:bc:97:09:46:51:fe:c6:da:ea: 30:88:28:8d:44:8c:47:e6:76:38:91:c7:57:a3:3a: e6:44:6f:d0:15:4d:21:00:1c:73:fe:1e:c7:2a:3b: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:22:DC:56:6C:73:DD:F0:3F:2F:45:C5:36:85:57:74:03:64:75:17 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2e:13:74:1d:83:17:14:3b:84:93:78:13:c9:42:06:2f:ef: 9f:bc:1d:08:0a:83:da:20:a4:1c:7d:6f:26:dc:01:6a:15:2d: fe:b3:f1:4c:ff:32:03:bd:b6:49:a1:df:a7:05:78:f4:73:cf: e5:d5:4f:96:b0:4c:a2:8e:9d:e6:34:77:37:63:f7:2c:d9:a6: 26:ba:ef:32:c0:19:5b:98:86:df:1a:97:94:84:2b:c9:02:a9: 77:81:2a:5f:f7:c8:23:d1:25:77:e2:5f:78:d7:10:4a:44:8d: 84:db:ce:88:1e:ae:39:aa:d2:da:13:92:55:9e:58:7d:0d:03: aa:c2:84:cf:1f:fa:6d:24:fb:f3:4c:07:37:91:93:32:94:6b: 9a:2b:35:1b:8a:6e:f9:4d:d3:99:f7:db:fb:37:ff:5a:69:fb: 46:3e:85:f7:16:36:b6:76:b9:d8:35:b3:b2:b0:1c:32:07:5c: d0:3d:d3:03:1f:e8:90:7a:35:f0:1f:34:2a:33:46:58:1f:96: d6:46:41:c3:f2:7f:99:14:b1:2a:74:2e:11:f5:4d:4b:38:f2: d6:66:d6:ba:8d:05:d2:63:32:9a:e0:5d:8d:6d:fe:a6:2e:61: 5b:59:93:75:d6:15:62:74:51:9c:fb:00:97:17:e6:3e:19:94: bd:61:6c:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwMzAxMDMzNjA1WhcNMjYwMzA4MDMzNjA1WjAYMRYwFAYD VQQDDA02OWEzYjQyNS1jMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQeofI1WRd1wMgVaAKF+7RUe+xuC9Gc//gkklkr+nr49LWGVFYsACzpayKua 0u3t8aFMUNDzx3vg3hlObY2Xx3kHvT3LEHS6Q/jexMzYXNEUIppSTYGaYt6KjnCz XUylxFcS3gx1QYL62+POH3kapOgsDV0XARI1Q8h69Q4T45q8ct5Z50IzfEizeAjV XFSb1pf3xZJQcTownW7EkfnEiT7jEsnSOJrTZ3b1/zUz/g/EtWuCBh3GGIi3Iq0e 41vOegrGoEy7VwAgWncRtiR8bxl7Lz/cUkO8lwlGUf7G2uowiCiNRIxH5nY4kcdX ozrmRG/QFU0hABxz/h7HKjuU1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAi3FZs c93wPy9FxTaFV3QDZHUXMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARS4TdB2DFxQ7hJN4E8lCBi/vn7wdCAqD2iCkHH1vJtwBahUt/rPxTP8yA722 SaHfpwV49HPP5dVPlrBMoo6d5jR3N2P3LNmmJrrvMsAZW5iG3xqXlIQryQKpd4Eq X/fII9Eld+JfeNcQSkSNhNvOiB6uOarS2hOSVZ5YfQ0DqsKEzx/6bST780wHN5GT MpRrmis1G4pu+U3Tmffb+zf/Wmn7Rj6F9xY2tna52DWzsrAcMgdc0D3TAx/okHo1 8B80KjNGWB+W1kZBw/J/mRSxKnQuEfVNSzjy1mbWuo0F0mMymuBdjW3+pi5hW1mT ddYVYnRRnPsAlxfmPhmUvWFseQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:05 2026 by rpki-client