$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: pS9k4VCM8PH+j5cuNKtFFP4cIt7n/XiDhfelA+QjXMw= Subject key identifier: E8:3F:DE:06:86:5E:58:7C:DD:2A:D5:2F:42:65:A7:C9:0E:E8:31:B7 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 0210 Signing time: Sun 01 Mar 2026 22:21:57 +0000 Manifest this update: Sun 01 Mar 2026 22:21:57 +0000 Manifest next update: Sun 08 Mar 2026 22:21:57 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: 3ieredhjg6fFyPBnxLz0OzeYUuEpEjBjiX3zt9MB9rM=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: gwP3PNE674NeJVzpcX/6dV+VmggMeTrL/+BFEHoqdPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Mar 1 22:21:57 2026 GMT Not After : Mar 8 22:21:57 2026 GMT Subject: CN=69a4bc05-116f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:d2:1c:b5:58:46:3e:36:0f:eb:06:38:b7: 29:5e:c9:a7:4f:8c:fa:85:56:be:82:c8:f2:b9:db: 74:e2:78:7e:e3:e6:db:b7:31:11:13:90:46:03:62: 94:2c:3e:fc:43:87:8e:06:37:28:2e:a5:f7:6b:02: 88:fe:3e:de:26:cb:2b:bd:22:47:67:a5:42:41:8f: 07:18:90:f0:a8:2d:93:4c:72:4d:51:e7:05:61:a7: a7:c8:a0:8e:1e:c9:b0:d6:a0:a9:d3:30:74:b4:d8: eb:0d:5a:cc:8d:0f:71:7b:58:9d:bb:ea:3d:56:78: 5f:9f:4e:3e:46:fa:62:75:00:e4:20:4d:60:7f:9c: c9:10:10:b7:33:e6:d0:24:c8:ac:d1:f0:26:86:0e: 4b:d4:9b:ef:cb:c7:a2:bb:d9:73:49:1b:87:71:63: d6:c0:43:19:86:b5:c4:30:11:85:cb:10:86:b3:65: ba:54:68:17:85:e3:ff:56:3a:26:07:55:bd:89:a4: 80:e1:23:d4:3a:f8:a4:72:d1:51:ed:c2:50:a6:45: 4d:c6:b3:ad:bf:59:33:90:41:1e:68:7d:6c:73:ba: d9:b1:26:52:16:24:4d:b7:61:dd:78:26:2e:bb:fb: f7:fb:88:28:8b:bb:a7:80:68:cb:49:06:22:22:af: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:DE:06:86:5E:58:7C:DD:2A:D5:2F:42:65:A7:C9:0E:E8:31:B7 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:6a:11:ab:0f:73:55:95:00:3b:ea:1e:69:1f:84:95:fc: c2:e1:14:6b:ae:3f:68:1e:4f:12:62:2f:73:e2:a1:c9:92:1e: 05:eb:59:88:fb:c9:ad:21:34:a7:50:d2:f0:23:5c:95:40:bb: 07:dd:47:fc:57:dd:02:03:b0:df:10:a2:c8:94:01:8d:8b:e9: 93:1d:0d:64:92:bc:10:46:7a:7f:0d:0e:57:25:72:4e:80:de: 7e:e6:9c:87:e8:aa:f8:38:68:56:f9:54:0e:d1:43:be:75:58: 11:ae:bb:1e:d4:48:1a:c9:22:c6:89:86:7c:b5:3f:c5:e4:71: a7:59:eb:f0:13:af:f3:63:60:8e:37:48:c0:5d:73:52:9d:81: 48:95:5b:52:f8:4d:c3:31:87:a7:c1:94:ec:80:a3:53:de:ca: 77:e7:74:98:22:b7:bc:86:74:9c:4d:63:cf:c5:90:36:4b:ce: 32:8f:98:44:14:75:b3:73:9d:c6:c0:a2:0f:d8:c3:2a:10:3c: 6d:59:f1:08:bb:81:13:52:70:33:5b:88:ff:19:c5:bb:ec:14: ac:d0:6f:3b:36:1b:29:cb:fb:28:ae:24:8c:2e:5e:73:4b:bd: 0e:7f:26:f1:4e:f0:ca:a0:00:9e:d3:7a:39:71:2d:01:54:5d: c5:c6:85:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwMzAxMjIyMTU3WhcNMjYwMzA4MjIyMTU3WjAYMRYwFAYD VQQDEw02OWE0YmMwNS0xMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArivSHLVYRj42D+sGOLcpXsmnT4z6hVa+gsjyudt04nh+4+bbtzERE5BGA2KU LD78Q4eOBjcoLqX3awKI/j7eJssrvSJHZ6VCQY8HGJDwqC2TTHJNUecFYaenyKCO Hsmw1qCp0zB0tNjrDVrMjQ9xe1idu+o9Vnhfn04+RvpidQDkIE1gf5zJEBC3M+bQ JMis0fAmhg5L1Jvvy8eiu9lzSRuHcWPWwEMZhrXEMBGFyxCGs2W6VGgXheP/Vjom B1W9iaSA4SPUOvikctFR7cJQpkVNxrOtv1kzkEEeaH1sc7rZsSZSFiRNt2HdeCYu u/v3+4goi7ungGjLSQYiIq88pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOg/3gaG Xlh83SrVL0Jlp8kO6DG3MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf/NqEasPc1WVADvqHmkfhJX8wuEUa64/aB5PEmIvc+KhyZIeBetZiPvJrSE0 p1DS8CNclUC7B91H/FfdAgOw3xCiyJQBjYvpkx0NZJK8EEZ6fw0OVyVyToDefuac h+iq+DhoVvlUDtFDvnVYEa67HtRIGskixomGfLU/xeRxp1nr8BOv82NgjjdIwF1z Up2BSJVbUvhNwzGHp8GU7ICjU97Kd+d0mCK3vIZ0nE1jz8WQNkvOMo+YRBR1s3Od xsCiD9jDKhA8bVnxCLuBE1JwM1uI/xnFu+wUrNBvOzYbKcv7KK4kjC5ec0u9Dn8m 8U7wyqAAntN6OXEtAVRdxcaFVw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:04 2026 by rpki-client