$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: +mPVcVIAj3mxyxvSEsXCl2bnRTyHBZHXZSdqIuGrqjs= Subject key identifier: 81:F7:DC:15:6B:32:61:CE:E5:6E:B3:EE:C7:0E:B4:78:80:7C:EE:4F Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 03EF Signing time: Sun 01 Mar 2026 01:20:20 +0000 Manifest this update: Sun 01 Mar 2026 01:20:20 +0000 Manifest next update: Sun 08 Mar 2026 01:20:20 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: XNI73gSglam8dERetbyW9ziEi6ln0Yb/oBwqKCfTCis=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: 0qc9Na2OvLZYcKXLvd9dsJVUFpfYckfyCcMjSKeI7u0=) 3: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: cpyYSgSRF4bjpjS+2ofJBrwWpmi/ywBdXagvVulUyRQ=) 4: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: F0S15cw+jaynWqIGufdsuY1fwhWKiubFPlEVsSQvHrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Mar 1 01:20:20 2026 GMT Not After : Mar 8 01:20:20 2026 GMT Subject: CN=69a39454-26ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:f8:c7:41:f7:64:f9:aa:ad:a2:00:6d:18: d5:a3:21:58:45:09:d5:db:95:3c:8f:ea:2a:01:a0: 07:9f:93:6c:ad:e3:bf:66:73:4f:88:63:b1:e1:e2: 90:0e:80:e1:31:4d:0e:c7:db:1e:dc:e3:e5:f5:d0: 8e:00:89:39:ae:38:2f:8f:f4:9e:a1:0e:bc:77:9b: 35:bb:a2:c1:cb:5d:98:9d:14:23:75:b8:3a:c1:2a: 35:8d:ef:2b:c1:89:65:c4:8f:84:6b:5d:85:e2:5f: b4:75:be:68:4d:01:ca:12:f1:18:d4:c8:3a:2e:f8: 1f:dd:c5:6d:9d:f2:f9:f3:66:b2:7c:12:c2:9c:2c: 09:6d:98:40:79:1a:c7:a2:6a:63:d9:39:81:32:76: 23:f3:1e:c8:2f:a9:74:2b:43:aa:5c:ce:9c:83:ee: a0:01:87:ec:30:7e:a1:8c:3d:07:b3:44:c3:31:20: 4b:29:28:06:f3:94:93:b4:4c:96:05:42:e4:b2:f4: f5:a8:9c:79:2a:80:9e:6f:8c:bb:8b:61:29:62:b4: 1f:32:24:f5:8e:fd:75:9b:f7:cd:d6:55:05:58:27: 47:01:be:d2:49:bb:6b:85:03:77:6f:db:db:e6:49: 37:29:25:a1:a3:fc:ca:8a:6a:76:41:06:c3:39:0f: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F7:DC:15:6B:32:61:CE:E5:6E:B3:EE:C7:0E:B4:78:80:7C:EE:4F X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:56:7a:08:6c:f2:d8:2b:6f:90:c1:8f:7b:3b:59:ec:61: 46:3e:f4:1a:36:0f:c6:a5:d0:4d:e8:a7:78:3f:fe:56:fc:20: 3d:2f:3c:4e:26:14:eb:fa:c5:ed:b7:ed:85:ac:eb:f6:3e:25: 13:17:5f:0f:f6:0c:41:38:ad:f8:55:0b:de:67:3b:77:14:6f: 11:6a:67:25:01:5f:4c:08:51:09:fb:87:9a:6e:be:a9:2b:bf: e4:3e:0c:81:7b:b6:9b:f3:5b:fd:fb:71:c9:fa:e1:5b:96:de: be:ef:aa:d3:33:63:03:1f:3d:8d:5b:b6:e4:c8:cf:f6:ee:2d: 8b:1e:f8:eb:83:2c:ca:10:08:a2:9e:42:9f:f6:e5:db:9f:55: cf:79:75:94:94:11:67:c0:9b:11:60:79:11:55:4b:70:14:20: d4:28:f1:76:33:e7:4a:39:8f:0b:31:6e:46:13:59:e6:14:d9: 30:29:e0:5a:6e:6b:85:5e:c7:fa:97:dd:59:63:ad:6a:75:96: b3:46:70:c3:9d:64:02:7c:f4:c0:14:2f:8c:b7:cf:9b:dc:20: 93:f1:be:22:39:a0:3f:3d:6a:78:ac:5e:1a:3b:af:3e:97:1d: d6:14:27:6c:8d:2e:80:e9:42:46:51:fc:0f:a4:8e:90:c0:81: 8a:3b:f8:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwMzAxMDEyMDIwWhcNMjYwMzA4MDEyMDIwWjAYMRYwFAYD VQQDDA02OWEzOTQ1NC0yNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gL4x0H3ZPmqraIAbRjVoyFYRQnV25U8j+oqAaAHn5NsreO/ZnNPiGOx4eKQ DoDhMU0Ox9se3OPl9dCOAIk5rjgvj/SeoQ68d5s1u6LBy12YnRQjdbg6wSo1je8r wYllxI+Ea12F4l+0db5oTQHKEvEY1Mg6Lvgf3cVtnfL582ayfBLCnCwJbZhAeRrH ompj2TmBMnYj8x7IL6l0K0OqXM6cg+6gAYfsMH6hjD0Hs0TDMSBLKSgG85STtEyW BULksvT1qJx5KoCeb4y7i2EpYrQfMiT1jv11m/fN1lUFWCdHAb7SSbtrhQN3b9vb 5kk3KSWho/zKimp2QQbDOQ9vqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIH33BVr MmHO5W6z7scOtHiAfO5PMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYexWeghs8tgrb5DBj3s7WexhRj70GjYPxqXQTeineD/+VvwgPS88TiYU6/rF 7bfthazr9j4lExdfD/YMQTit+FUL3mc7dxRvEWpnJQFfTAhRCfuHmm6+qSu/5D4M gXu2m/Nb/ftxyfrhW5bevu+q0zNjAx89jVu25MjP9u4tix7464MsyhAIop5Cn/bl 259Vz3l1lJQRZ8CbEWB5EVVLcBQg1CjxdjPnSjmPCzFuRhNZ5hTZMCngWm5rhV7H +pfdWWOtanWWs0Zww51kAnz0wBQvjLfPm9wgk/G+IjmgPz1qeKxeGjuvPpcd1hQn bI0ugOlCRlH8D6SOkMCBijv4UQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:21 2026 by rpki-client