$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: aWvGMsELk9ofoTKDA7JL+GyG1hDbT2/ASeYEiM+4UG8= Subject key identifier: 9C:7A:04:FD:DB:C0:E3:59:90:3D:66:29:A4:98:4C:5A:7C:8A:DD:66 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 0221 Signing time: Sun 01 Mar 2026 03:32:58 +0000 Manifest this update: Sun 01 Mar 2026 03:32:57 +0000 Manifest next update: Sun 08 Mar 2026 03:32:57 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: GJQ4lc2WjcNwcQN1yE4vpmkdhRvTEx1sDiiNyvbHgiI=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Mar 1 03:32:57 2026 GMT Not After : Mar 8 03:32:57 2026 GMT Subject: CN=69a3b36a-ee44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:bc:53:dc:cd:4a:b4:88:94:2d:94:8d:99: 81:91:1a:5d:db:ae:d0:7e:60:b0:70:cb:cb:34:b9: fc:71:4b:16:41:d8:3c:0f:70:1f:6d:5d:f3:0e:0f: 24:1f:30:af:f8:2f:09:5b:17:c2:bc:36:76:15:67: 58:b1:16:d9:59:4f:2f:13:59:8b:70:39:e3:db:bd: 66:fe:c8:9e:a4:e9:ca:31:1c:1a:49:ed:25:72:a0: d3:b8:63:d2:95:84:27:5c:d8:80:6b:1c:f1:e2:df: 81:bc:f7:3b:2d:5c:32:9f:70:ed:40:4b:b1:de:5b: cf:0e:97:e3:12:1c:34:2a:8d:dc:3b:5d:8f:2b:eb: 36:03:ea:54:90:d0:b8:08:8e:3e:de:fd:89:fe:59: 54:11:37:63:db:d9:9a:46:cd:99:db:db:d9:f2:74: 57:b6:b8:1c:d5:25:13:72:52:94:7d:43:00:e2:fe: 23:b9:4a:c8:74:34:88:a1:51:98:56:24:d2:f7:0a: a7:2d:72:9e:cb:22:49:b8:95:aa:d8:75:60:97:b1: 94:77:64:48:a3:b1:91:60:22:29:c2:af:e8:d6:a1: 1c:c6:43:37:2f:57:02:f0:04:66:4d:a3:7a:20:8f: a1:12:3d:fc:29:54:d3:57:e1:4d:d6:21:49:a1:24: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7A:04:FD:DB:C0:E3:59:90:3D:66:29:A4:98:4C:5A:7C:8A:DD:66 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:e5:78:3f:02:07:1b:49:30:5c:99:4e:7b:7c:2b:c6:02: 71:77:6a:7a:14:c6:6b:c5:fa:ff:8d:68:59:b7:ea:4b:be:56: a4:ad:94:fd:e7:38:fd:44:33:a0:79:4f:db:09:18:61:ba:74: 2f:c5:f0:95:25:97:d1:70:79:1e:e4:65:3e:db:28:68:de:28: 9c:17:db:19:21:67:1b:d3:58:ba:d6:d5:3d:9a:97:9b:af:da: 1f:87:f2:fd:84:d4:a7:79:06:4b:8e:ab:54:7b:06:45:83:e5: a8:95:43:eb:d3:f1:08:4c:ad:a2:0f:70:5e:27:2f:3b:94:d2: cd:fa:be:d3:6e:68:b0:0c:5a:51:01:20:71:ba:75:d9:13:0c: 59:1f:69:a2:9a:b8:2b:f6:14:1d:c8:4c:95:45:06:b4:3d:25: 00:46:5a:ec:3a:a2:2c:07:1b:5e:2a:37:fc:ec:d5:02:a0:ec: 39:73:74:b3:11:b2:43:36:40:4b:74:02:a3:8e:08:46:ee:30: fa:14:84:e4:a6:24:55:86:d1:8c:75:98:bc:03:19:e8:11:e0: bc:11:84:1a:3d:cf:d9:62:5e:69:da:82:94:0f:48:e3:f6:32: b5:f6:26:29:47:5e:dc:47:29:ad:a0:e2:5e:a2:65:61:20:d6: 15:70:fd:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjYwMzAxMDMzMjU3WhcNMjYwMzA4MDMzMjU3WjAYMRYwFAYD VQQDDA02OWEzYjM2YS1lZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4C8U9zNSrSIlC2UjZmBkRpd267QfmCwcMvLNLn8cUsWQdg8D3AfbV3zDg8k HzCv+C8JWxfCvDZ2FWdYsRbZWU8vE1mLcDnj271m/siepOnKMRwaSe0lcqDTuGPS lYQnXNiAaxzx4t+BvPc7LVwyn3DtQEux3lvPDpfjEhw0Ko3cO12PK+s2A+pUkNC4 CI4+3v2J/llUETdj29maRs2Z29vZ8nRXtrgc1SUTclKUfUMA4v4juUrIdDSIoVGY ViTS9wqnLXKeyyJJuJWq2HVgl7GUd2RIo7GRYCIpwq/o1qEcxkM3L1cC8ARmTaN6 II+hEj38KVTTV+FN1iFJoSQ6MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx6BP3b wONZkD1mKaSYTFp8it1mMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiPbleD8CBxtJMFyZTnt8K8YCcXdqehTGa8X6/41oWbfqS75WpK2U/ec4/UQz oHlP2wkYYbp0L8XwlSWX0XB5HuRlPtsoaN4onBfbGSFnG9NYutbVPZqXm6/aH4fy /YTUp3kGS46rVHsGRYPlqJVD69PxCEytog9wXicvO5TSzfq+025osAxaUQEgcbp1 2RMMWR9popq4K/YUHchMlUUGtD0lAEZa7DqiLAcbXio3/OzVAqDsOXN0sxGyQzZA S3QCo44IRu4w+hSE5KYkVYbRjHWYvAMZ6BHgvBGEGj3P2WJeadqClA9I4/YytfYm KUde3EcpraDiXqJlYSDWFXD9SQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:13 2026 by rpki-client