$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft File: hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json) Hash identifier: ZSo3Sxv3eghM2QZxjvd4EuL8Hk8QMrId+a1gkpIUvy4= Subject key identifier: 51:81:88:E2:D8:A7:0D:C8:C5:B8:2D:C2:DB:DB:0B:C2:81:57:DB:DC Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4 Certificate issuer: /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:24:27 +0000 Manifest this update: Sun 01 Mar 2026 10:24:26 +0000 Manifest next update: Sun 08 Mar 2026 10:24:26 +0000 Files and hashes: 1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: 7IQPxnl/k/ORVzXD+2Eimy8QYNk8y8AsmLsBLSS4hBM=) 2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4 Validity Not Before: Mar 1 10:24:26 2026 GMT Not After : Mar 8 10:24:26 2026 GMT Subject: CN=69a413da-184a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:1b:2a:e9:e6:2b:c0:91:40:42:b5:ef:a6: a6:f4:33:49:d7:d8:89:d7:8e:0f:0b:c5:5e:47:0c: 60:fe:dd:91:51:7d:d6:14:1f:9d:23:96:f5:6c:36: 51:e4:66:41:16:9b:f5:65:07:b8:e9:cf:db:97:5d: 1d:75:ec:fc:2b:09:9b:6e:51:27:9a:79:ef:3f:3a: a0:5b:9b:73:12:3b:86:9f:99:d9:26:e0:cc:74:43: 69:81:43:bc:f9:b2:63:1f:50:67:b2:c4:0c:c5:93: f6:f0:82:de:c3:88:51:96:5c:ff:4e:54:d6:5a:44: 3b:4e:f2:71:35:99:3c:a0:f7:b4:72:7c:f8:24:7f: be:e4:74:33:25:95:1c:6f:9f:0d:b9:5d:df:5f:27: 02:43:4a:81:3d:c6:c2:c2:0c:a8:eb:e2:65:02:ff: 29:45:9b:5b:92:ba:8e:b8:c1:f2:0d:33:63:b7:33: 52:b2:37:3f:d2:a8:be:f3:6c:9c:f5:8e:a6:d6:54: be:6a:bf:08:1f:43:f5:54:8a:2e:2d:d6:4c:e4:af: 0e:ed:d2:b8:cc:43:28:f8:1f:dd:e8:2f:c2:3b:56: 41:6d:8b:c9:1b:2a:d5:3c:09:0b:85:39:45:2c:ef: 86:59:d9:c5:a1:3f:d6:5a:99:a8:10:0b:05:71:79: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:88:E2:D8:A7:0D:C8:C5:B8:2D:C2:DB:DB:0B:C2:81:57:DB:DC X509v3 Authority Key Identifier: keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:09:41:1e:25:57:8a:dd:ee:b5:04:34:7b:c1:b3:e3:32:b4: 4b:38:ab:a9:b9:9d:b7:1d:d6:17:20:ff:71:78:e2:2f:64:f4: 77:25:2e:38:a1:82:bf:bb:9b:46:39:e4:0f:15:12:56:bd:82: 78:36:79:7f:d3:25:9c:a3:dd:91:50:f5:d4:bb:b9:ed:34:43: 7c:6b:17:2d:72:a6:e7:dc:70:9a:64:55:5a:ee:6a:3f:f1:8c: 07:2f:73:2f:d8:f8:ae:5d:ca:10:a0:0c:a6:26:17:37:f7:28: de:d0:01:24:1c:48:cb:0d:dd:b0:95:ee:8d:cd:20:3d:dc:45: 30:81:79:a9:7b:24:bb:2f:45:46:1c:f5:a9:d7:7e:8e:3a:20: 87:54:9a:3e:45:da:6b:f5:94:ef:c7:44:e1:3e:d3:59:47:42: 24:94:2f:05:28:e2:e6:fa:d9:c9:27:79:b4:4d:fa:27:0f:02: 3d:6f:64:ba:c7:3a:11:da:4c:66:07:cf:aa:4b:61:61:e6:eb: e8:38:39:3e:b6:fd:d4:16:a8:50:0f:e2:c8:5c:46:99:ef:36: 41:a1:fe:ea:80:b0:ff:5f:13:0a:f2:e2:16:54:00:ef:11:5f: b9:f9:2d:8d:e8:d9:56:33:f0:3f:dc:e9:60:96:08:50:d9:aa: f5:8d:30:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjM1ODExMC8GA1UEBRMoODUzOTIyNTFDOTIxQ0E5RjUxOURCOTExQzVBODBBNzdE RkUzNTRDNDAeFw0yNjAzMDExMDI0MjZaFw0yNjAzMDgxMDI0MjZaMBgxFjAUBgNV BAMTDTY5YTQxM2RhLTE4NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6shsq6eYrwJFAQrXvpqb0M0nX2InXjg8LxV5HDGD+3ZFRfdYUH50jlvVsNlHk ZkEWm/VlB7jpz9uXXR117PwrCZtuUSeaee8/OqBbm3MSO4afmdkm4Mx0Q2mBQ7z5 smMfUGeyxAzFk/bwgt7DiFGWXP9OVNZaRDtO8nE1mTyg97RyfPgkf77kdDMllRxv nw25Xd9fJwJDSoE9xsLCDKjr4mUC/ylFm1uSuo64wfINM2O3M1KyNz/SqL7zbJz1 jqbWVL5qvwgfQ/VUii4t1kzkrw7t0rjMQyj4H93oL8I7VkFti8kbKtU8CQuFOUUs 74ZZ2cWhP9ZamagQCwVxedSNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUYGI4tin DcjFuC3C29sLwoFX29wwHwYDVR0jBBgwFoAUhTkiUckhyp9RnbkRxagKd9/jVMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0NFN0Y4RUU0RjEx NDExRjA5NkNENTU0RDRCNkY1NkJDL2hUa2lVY2toeXA5Um5ia1J4YWdLZDlfalZN US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFRraVVja2h5cDlSbmJrUnhhZ0tkOV9qVk1RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC MzU4L0NFN0Y4RUU0RjExNDExRjA5NkNENTU0RDRCNkY1NkJDL2hUa2lVY2toeXA5 Um5ia1J4YWdLZDlfalZNUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAECUEeJVeK3e61BDR7wbPjMrRLOKupuZ23HdYXIP9xeOIvZPR3JS44oYK/u5tG OeQPFRJWvYJ4Nnl/0yWco92RUPXUu7ntNEN8axctcqbn3HCaZFVa7mo/8YwHL3Mv 2PiuXcoQoAymJhc39yje0AEkHEjLDd2wle6NzSA93EUwgXmpeyS7L0VGHPWp136O OiCHVJo+Rdpr9ZTvx0ThPtNZR0IklC8FKOLm+tnJJ3m0TfonDwI9b2S6xzoR2kxm B8+qS2Fh5uvoODk+tv3UFqhQD+LIXEaZ7zZBof7qgLD/XxMK8uIWVADvEV+5+S2N 6NlWM/A/3OlglghQ2ar1jTCq -----END CERTIFICATE-----Generated at Mon Mar 2 01:28:44 2026 by rpki-client