$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: k4Vh15FIlXhUPdZtQ/5T9cpwml0N/VZI+crBwjYt3SE= Subject key identifier: 4C:E2:68:62:32:D2:61:E1:26:5B:EB:96:FA:6D:EE:1D:36:F7:32:67 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 020E Signing time: Sun 01 Mar 2026 03:46:26 +0000 Manifest this update: Sun 01 Mar 2026 03:46:25 +0000 Manifest next update: Sun 08 Mar 2026 03:46:25 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: siSQOAg4BFFl9RczTMEuVoG+ny5u90LlfZnoRKTB3bM=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: +QRSAMg8DIUI5aQ7DyAStghs3PnHAxHMHNPnVjOVkqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Mar 1 03:46:25 2026 GMT Not After : Mar 8 03:46:25 2026 GMT Subject: CN=69a3b691-3ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:5e:60:ff:58:9e:99:d6:a7:25:e8:00:33: ed:86:64:e6:7d:11:84:18:f1:4b:dd:fd:69:b4:2d: 29:4b:67:b6:28:84:e3:31:44:f4:97:0b:95:d5:c8: 27:3c:00:c1:6d:df:f7:53:77:e5:ea:2e:4b:75:0e: 1f:1b:fb:2b:98:56:8d:ec:ad:e9:74:2b:ac:d8:e4: 82:97:bc:f9:85:14:83:48:b0:5e:98:6e:2e:14:cc: 9b:76:93:44:e3:1f:6b:15:f1:67:a1:70:79:9f:0a: 3e:2e:43:7a:70:a3:32:56:7c:a0:0c:5e:32:90:62: 14:c9:bc:53:16:16:5e:0a:cf:0d:6c:c3:8f:4a:aa: 02:b1:4d:c4:a8:f4:ef:4e:43:4f:51:8c:e5:7d:e9: 55:03:38:76:19:fa:c8:ef:4e:94:c7:e7:3f:f1:e4: 26:1b:d1:10:b5:2d:14:a5:af:6a:a1:be:a1:b2:61: 28:ee:78:3b:e3:6d:20:0b:e7:1c:cb:6e:5d:c8:1a: ce:03:0a:bf:e8:eb:0b:37:32:dc:43:b7:11:a7:c3: 61:24:22:8d:93:fa:34:f7:1e:d2:c7:e3:e5:fd:c5: e3:1a:7f:5b:b6:22:5c:d2:38:be:e0:f6:96:d8:73: 4f:57:13:4a:2c:33:4a:ce:1b:42:ec:9f:3f:5b:20: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E2:68:62:32:D2:61:E1:26:5B:EB:96:FA:6D:EE:1D:36:F7:32:67 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:5c:dd:d6:bc:f9:5d:7a:58:36:bb:21:fe:68:9f:e7:c6: b2:41:5d:60:80:d0:ac:65:59:37:dd:70:86:99:bd:f9:06:89: a0:c2:42:ea:91:ad:c3:81:38:3a:b0:b5:17:17:5c:1c:fd:e9: 0d:ab:b1:2b:d3:43:98:32:c6:38:4d:38:eb:c6:d9:6a:3f:7c: 8d:4c:f2:93:e1:fe:ae:cb:a7:82:4d:9b:5a:fc:dd:e9:a1:ff: 15:22:c2:e5:b1:56:71:b4:1d:9a:e5:0e:97:42:a0:04:86:c9: 46:bd:d7:45:86:20:a7:34:76:52:62:b9:e8:1e:cb:87:83:1b: 59:56:30:f7:96:8b:c4:0f:62:66:87:b2:dd:db:20:14:2b:bb: 7d:73:32:de:68:57:ea:47:38:6a:db:8f:4f:a6:45:70:30:ce: 1c:8d:63:77:53:1a:0c:55:d4:e7:09:70:a3:98:87:aa:3c:8d: 37:02:26:6f:f1:20:cc:ca:4b:88:d7:d1:28:b6:00:7f:0f:4c: 60:41:ce:14:ff:60:9e:7b:88:53:3a:03:9f:15:b3:bb:1f:40: 8e:ca:1d:7b:ee:fd:dc:07:37:4f:87:3a:64:32:bc:0c:82:25: fe:06:69:df:b7:49:4c:27:15:29:0b:c4:aa:12:6c:50:69:b1: 47:ad:21:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwMzAxMDM0NjI1WhcNMjYwMzA4MDM0NjI1WjAYMRYwFAYD VQQDDA02OWEzYjY5MS0zYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGZeYP9YnpnWpyXoADPthmTmfRGEGPFL3f1ptC0pS2e2KITjMUT0lwuV1cgn PADBbd/3U3fl6i5LdQ4fG/srmFaN7K3pdCus2OSCl7z5hRSDSLBemG4uFMybdpNE 4x9rFfFnoXB5nwo+LkN6cKMyVnygDF4ykGIUybxTFhZeCs8NbMOPSqoCsU3EqPTv TkNPUYzlfelVAzh2GfrI706Ux+c/8eQmG9EQtS0Upa9qob6hsmEo7ng7420gC+cc y25dyBrOAwq/6OsLNzLcQ7cRp8NhJCKNk/o09x7Sx+Pl/cXjGn9btiJc0ji+4PaW 2HNPVxNKLDNKzhtC7J8/WyDY8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEziaGIy 0mHhJlvrlvpt7h029zJnMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqCFc3da8+V16WDa7If5on+fGskFdYIDQrGVZN91whpm9+QaJoMJC6pGtw4E4 OrC1FxdcHP3pDauxK9NDmDLGOE0468bZaj98jUzyk+H+rsungk2bWvzd6aH/FSLC 5bFWcbQdmuUOl0KgBIbJRr3XRYYgpzR2UmK56B7Lh4MbWVYw95aLxA9iZoey3dsg FCu7fXMy3mhX6kc4atuPT6ZFcDDOHI1jd1MaDFXU5wlwo5iHqjyNNwImb/EgzMpL iNfRKLYAfw9MYEHOFP9gnnuIUzoDnxWzux9Ajsode+793Ac3T4c6ZDK8DIIl/gZp 37dJTCcVKQvEqhJsUGmxR60hxg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:20 2026 by rpki-client