$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: 16MqQ5wEdGL+dgz5FegCzQYaqEb4M+M5DkPAPl9UUFM= Subject key identifier: B7:69:D2:D1:3C:F7:FB:00:D8:2B:3D:2A:0C:4F:8F:00:A5:54:96:98 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 03E9 Signing time: Sun 01 Mar 2026 01:22:35 +0000 Manifest this update: Sun 01 Mar 2026 01:22:34 +0000 Manifest next update: Sun 08 Mar 2026 01:22:34 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: OPtfgk9ruZn9ry/wCb9m6t6dKuN2EbglfhCvgrSF7dk=) 2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=) 3: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=) 4: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Mar 1 01:22:34 2026 GMT Not After : Mar 8 01:22:34 2026 GMT Subject: CN=69a394db-0f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:41:65:e6:28:50:6b:51:94:18:45:f2:e6: 39:8b:05:ca:15:95:ca:f7:82:b5:3d:1d:c0:ba:13: c1:9a:c0:ba:36:76:f2:ad:2d:7e:ba:4d:e0:1a:8f: f9:10:61:ce:48:6e:3e:de:75:e5:2b:8f:e9:03:32: 22:f7:79:63:51:64:5e:55:64:f1:50:3c:bb:ad:19: 8f:45:68:a2:1c:fc:97:66:fa:b3:df:bf:03:93:8d: e0:e7:ed:d0:67:fe:93:4e:6e:81:0a:de:dd:00:52: 2b:4f:ed:74:45:2b:05:72:7a:bc:fa:67:d5:e8:d3: b1:7e:5b:b2:13:94:73:1f:61:c9:10:7f:ae:09:25: ab:bd:df:bf:64:a2:64:6c:80:9e:bf:61:48:63:7a: 1e:14:57:31:8f:c8:9d:3c:bd:f0:fb:10:9b:48:03: c6:32:74:b4:14:ca:2e:f3:c2:f6:fb:51:e1:5b:d8: ed:49:fa:b3:28:2b:24:85:92:de:2b:5d:94:e4:16: 6d:9e:3b:79:a1:8f:1b:9e:4e:a0:35:ed:e4:d6:3b: 3f:19:ab:99:2b:15:f8:da:c9:c9:eb:6d:d9:69:ca: 7f:f2:42:e1:33:62:f0:f8:e7:6f:45:94:ba:d6:1e: c5:d9:76:bb:25:14:e3:fd:1a:9f:d5:56:70:48:7b: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:D2:D1:3C:F7:FB:00:D8:2B:3D:2A:0C:4F:8F:00:A5:54:96:98 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:04:50:af:35:5f:ca:0a:5f:83:86:f5:6e:61:3a:28:84:0c: 4d:16:79:fd:fd:57:26:0c:d5:e5:65:08:90:bc:28:0f:18:25: 4d:f1:5c:a5:d4:d4:23:ce:b8:97:4e:a9:ac:8c:1a:fb:b3:05: 8f:ba:11:d6:4b:49:ba:b6:75:0d:5b:ac:65:92:34:68:b2:ca: 78:ef:51:0d:e2:88:69:db:bc:54:21:c5:03:f7:26:00:4f:42: a5:3c:6c:23:fa:a7:ee:cd:f0:ac:78:a1:c8:15:2f:f1:96:4b: ef:e0:53:f9:37:9a:bb:9e:d4:8d:bd:21:83:79:96:31:1a:7d: 7d:cd:5a:0a:c7:e0:6e:34:22:58:82:d0:d5:19:a6:42:df:a3: d7:51:99:e5:51:e5:c6:f0:ee:4d:99:b4:20:54:3e:4f:cf:07: d0:75:16:6d:54:8b:61:c0:bd:ce:d3:64:7d:76:52:b0:5b:43: 9f:73:fa:d7:ac:50:1e:db:ec:53:10:b3:33:e7:7f:7f:ee:b0: b9:38:0b:99:bb:32:49:64:95:64:de:1c:99:61:47:87:6b:f6: f1:e3:68:a1:32:09:82:07:45:9e:9a:bd:84:87:cc:b4:7d:05: 8b:c0:4b:e4:42:d3:d3:fa:59:b8:75:1d:8b:11:00:db:7c:4f: 5a:0e:8b:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwMzAxMDEyMjM0WhcNMjYwMzA4MDEyMjM0WjAYMRYwFAYD VQQDDA02OWEzOTRkYi0wZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZBBZeYoUGtRlBhF8uY5iwXKFZXK94K1PR3AuhPBmsC6NnbyrS1+uk3gGo/5 EGHOSG4+3nXlK4/pAzIi93ljUWReVWTxUDy7rRmPRWiiHPyXZvqz378Dk43g5+3Q Z/6TTm6BCt7dAFIrT+10RSsFcnq8+mfV6NOxfluyE5RzH2HJEH+uCSWrvd+/ZKJk bICev2FIY3oeFFcxj8idPL3w+xCbSAPGMnS0FMou88L2+1HhW9jtSfqzKCskhZLe K12U5BZtnjt5oY8bnk6gNe3k1js/GauZKxX42snJ623Zacp/8kLhM2Lw+OdvRZS6 1h7F2Xa7JRTj/Rqf1VZwSHvkuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdp0tE8 9/sA2Cs9KgxPjwClVJaYMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZwRQrzVfygpfg4b1bmE6KIQMTRZ5/f1XJgzV5WUIkLwoDxglTfFcpdTUI864 l06prIwa+7MFj7oR1ktJurZ1DVusZZI0aLLKeO9RDeKIadu8VCHFA/cmAE9CpTxs I/qn7s3wrHihyBUv8ZZL7+BT+Teau57Ujb0hg3mWMRp9fc1aCsfgbjQiWILQ1Rmm Qt+j11GZ5VHlxvDuTZm0IFQ+T88H0HUWbVSLYcC9ztNkfXZSsFtDn3P616xQHtvs UxCzM+d/f+6wuTgLmbsySWSVZN4cmWFHh2v28eNooTIJggdFnpq9hIfMtH0Fi8BL 5ELT0/pZuHUdixEA23xPWg6Lmw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:15:21 2026 by rpki-client