$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: jI/2uJL/TxYvJuuGRMb0FTEqbOQ+UYoM7JjV4rRTe2w= Subject key identifier: 99:0D:51:CD:6E:4A:7A:86:8B:59:56:59:CF:88:0A:CC:AC:12:A0:DF Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: F9 Signing time: Sun 01 Mar 2026 07:17:48 +0000 Manifest this update: Sun 01 Mar 2026 07:17:47 +0000 Manifest next update: Sun 08 Mar 2026 07:17:47 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: w4oDAXpFZHXFAFj+cTInowWeK9WPbJOeCzkTeJwVyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Mar 1 07:17:47 2026 GMT Not After : Mar 8 07:17:47 2026 GMT Subject: CN=69a3e81c-c76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:86:d8:54:af:2c:82:b7:ae:2e:60:11:c8: 3f:cd:33:ab:8c:2e:04:a6:98:4b:1c:4e:b7:c1:a3: 8e:02:d6:03:4d:3e:3a:d6:1c:33:c4:a3:7c:9e:79: b5:a5:69:ee:c3:c6:d7:ef:96:5c:ec:33:07:58:66: c8:c7:d9:2e:53:4b:24:74:cb:9e:4b:96:e5:90:36: 57:b4:25:ca:98:6c:c0:0e:47:ba:f3:70:f2:e9:64: 79:62:dd:42:89:d3:58:db:5d:dc:80:97:ad:15:c4: 7e:84:c1:14:d4:25:82:db:ca:af:09:a7:c6:1a:ed: 44:2c:ca:50:58:33:10:b4:f7:fe:bf:e6:de:47:9e: 2a:11:57:c3:16:ca:2d:88:46:97:32:51:7d:2a:55: 41:e9:72:1d:35:ed:cf:16:ad:36:8e:0a:d0:f9:be: ad:b4:e0:e7:3a:a7:bd:0a:81:16:1e:94:c3:20:76: 80:d2:24:9c:9b:ea:45:09:f1:b2:4b:de:a3:f8:6c: 75:fd:c1:84:d2:f3:b9:09:0f:ea:ba:24:5c:63:74: 0d:eb:ce:23:44:c0:90:e1:d6:9a:eb:65:9c:42:5c: d7:07:90:9c:1b:64:87:e6:51:18:55:a4:bf:0c:61: 06:d5:36:6b:34:10:51:d7:4f:96:d4:4d:54:f9:00: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:51:CD:6E:4A:7A:86:8B:59:56:59:CF:88:0A:CC:AC:12:A0:DF X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:c2:2a:f7:fe:64:d2:af:9e:b9:98:8c:4b:58:66:77:2c: 23:7c:62:4f:9a:50:fd:4e:da:fa:5c:14:b1:ab:20:ed:ca:90: 54:7c:9e:16:7d:9c:5b:6b:ef:a6:66:c0:aa:cf:c4:be:17:f8: 91:ca:08:39:4d:9b:4b:43:c7:c4:2f:4a:18:49:45:8e:71:29: 73:1d:47:69:99:00:81:38:aa:1b:f3:b9:05:a8:51:cf:16:6b: be:8f:e8:96:fe:2e:0e:b5:03:c5:41:91:db:f6:a0:bc:09:51: d7:ac:04:6b:db:c0:5b:ea:48:ff:30:ed:31:34:a4:76:13:39: 60:2f:39:04:09:10:00:9f:a8:e1:46:b6:3c:ff:f2:f5:13:7f: ad:ce:14:42:dc:b5:57:c6:4b:f3:c7:2d:87:16:65:51:32:80: d6:51:d2:9d:7f:65:76:bb:d5:09:59:6b:a7:74:2a:05:91:2b: 6a:4d:e9:7f:1c:09:2e:3d:0a:92:06:d5:1b:b0:88:3e:59:b6: 7c:17:ae:f0:86:18:09:51:7b:e3:03:e6:8f:c7:d0:ef:51:43: b2:7d:8f:a5:fb:e9:54:83:1b:16:1c:cd:57:79:e8:a5:35:41: df:92:b4:b3:f4:b1:fb:96:5f:f6:1c:67:a0:92:be:74:a7:a8: 91:8d:0f:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwRTQxMTAvBgNVBAUTKDg2Nzc5OTA1M0VDOTE3NEIxMTFDQkI0NkIyOTdGQTY0 N0U5ODJBQTUwHhcNMjYwMzAxMDcxNzQ3WhcNMjYwMzA4MDcxNzQ3WjAYMRYwFAYD VQQDEw02OWEzZTgxYy1jNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/eG2FSvLIK3ri5gEcg/zTOrjC4EpphLHE63waOOAtYDTT461hwzxKN8nnm1 pWnuw8bX75Zc7DMHWGbIx9kuU0skdMueS5blkDZXtCXKmGzADke683Dy6WR5Yt1C idNY213cgJetFcR+hMEU1CWC28qvCafGGu1ELMpQWDMQtPf+v+beR54qEVfDFsot iEaXMlF9KlVB6XIdNe3PFq02jgrQ+b6ttODnOqe9CoEWHpTDIHaA0iScm+pFCfGy S96j+Gx1/cGE0vO5CQ/quiRcY3QN684jRMCQ4daa62WcQlzXB5CcG2SH5lEYVaS/ DGEG1TZrNBBR10+W1E1U+QD4hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkNUc1u SnqGi1lWWc+ICsysEqDfMB8GA1UdIwQYMBaAFIZ3mQU+yRdLERy7RrKX+mR+mCql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDBFNC81NjA4QTQ5ODlB NjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYwc1JITHRHc3BmNlpINllL cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDBFNC81NjA4QTQ5ODlBNjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYw c1JITHRHc3BmNlpINllLcVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXB7CKvf+ZNKvnrmYjEtYZncsI3xiT5pQ/U7a+lwUsasg7cqQVHyeFn2cW2vv pmbAqs/Evhf4kcoIOU2bS0PHxC9KGElFjnEpcx1HaZkAgTiqG/O5BahRzxZrvo/o lv4uDrUDxUGR2/agvAlR16wEa9vAW+pI/zDtMTSkdhM5YC85BAkQAJ+o4Ua2PP/y 9RN/rc4UQty1V8ZL88cthxZlUTKA1lHSnX9ldrvVCVlrp3QqBZErak3pfxwJLj0K kgbVG7CIPlm2fBeu8IYYCVF74wPmj8fQ71FDsn2PpfvpVIMbFhzNV3nopTVB35K0 s/Sx+5Zf9hxnoJK+dKeokY0PuQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:23 2026 by rpki-client