$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: sQ9K/QSeDsJe4dxwO1WgUOdFW5qj3NkdTGQ9q/KkNK0= Subject key identifier: FF:FF:DA:4F:FD:FF:BF:2E:04:30:49:3A:AA:7A:1E:A2:00:C5:B3:D5 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 3569 Signing time: Mon 02 Mar 2026 00:52:52 +0000 Manifest this update: Mon 02 Mar 2026 00:52:51 +0000 Manifest next update: Mon 09 Mar 2026 00:52:51 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: UqlFjMrC8BdcqCgrHOqKhS4c+K1SeDFMmCwXuiiAkXA=) 2: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: ASkZLn/NWBAwVh59cVjcukQp4AEdjyXM88LF9t8bVkY=) 3: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: 1QTKJD4vqX7bem3GLJ46R87e+RPm3/ksMd9HYKhn61A=) 4: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: yHM3DnwjT+cPJR9y5D69EEWvn7HmBwkRwxEMyaTJ7Sc=) 5: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: KXODx+nI9I+IBelGkGtFFlSKzu6f9jybWi8Lv3W1Fu8=) 6: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: C9kDwfmBiY6vCRGQDDyB4fRaHn0qARnsMTPVrfiPE3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13751 (0x35b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Mar 2 00:52:51 2026 GMT Not After : Mar 9 00:52:51 2026 GMT Subject: CN=69a4df64-b10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:a7:b9:16:48:dd:33:0b:4c:c1:a3:7a:f2: ba:25:b0:d2:6b:20:ee:a3:99:1e:5b:ea:60:8a:0d: d2:f2:1c:40:36:01:52:d5:1d:f2:e0:f8:77:d3:79: 08:ec:39:2d:54:66:36:57:7a:0f:0c:9c:06:32:67: 6d:a2:2e:53:db:93:0e:00:86:d5:15:1c:18:7a:31: b1:62:61:81:1d:0f:2d:f0:6c:3e:83:e8:2c:a0:61: ad:cb:be:2d:58:37:e4:88:32:f7:32:6d:58:d7:14: 69:e3:e4:5c:13:74:49:11:94:ea:83:b8:09:64:17: 78:66:a8:d5:a2:bf:d5:bb:75:3d:49:73:6e:86:b5: fc:98:e8:06:02:04:02:10:c1:05:d1:b9:40:eb:4b: d8:37:74:bc:65:b9:ec:53:c3:63:82:25:25:1b:2d: 39:28:26:46:46:8a:32:9a:3e:da:3e:2c:46:f1:f5: 7e:78:f4:f9:73:52:77:22:1e:ee:f2:5e:e7:ca:5a: 1e:dc:95:cb:7b:88:13:c7:89:25:9a:ef:1b:cb:b1: 50:ed:21:59:77:b4:e5:0e:85:89:21:a2:4b:cc:db: 58:85:d7:1f:7a:ed:ba:6c:b5:0a:78:63:5e:2d:6a: 00:df:70:90:d2:e2:88:1a:73:ae:ea:9e:69:6a:d3: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:DA:4F:FD:FF:BF:2E:04:30:49:3A:AA:7A:1E:A2:00:C5:B3:D5 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:44:ee:9b:57:c6:ae:b8:ae:97:49:bc:5d:a2:d3:27:ba:4a: 29:d3:e9:88:f7:98:35:ae:c5:1c:34:32:2a:1a:83:d7:8b:74: 5a:08:c0:6a:94:68:06:e9:ce:ec:db:da:4d:f5:0c:c2:f9:e7: 34:37:19:65:f1:78:08:5c:a7:a2:93:0f:ad:f3:10:bc:6a:37: b8:93:88:32:83:c4:db:0c:bc:6e:63:fe:16:1b:a0:94:0b:b8: b1:ab:38:14:0c:92:56:e5:86:26:b0:5f:6c:49:6a:ab:3e:d8: 8f:7e:57:70:09:d7:97:59:4d:26:77:63:81:28:e7:03:1c:0f: 50:9e:0e:9a:a5:2f:a4:f3:6b:94:61:e0:e1:f8:f6:5e:a5:1f: ae:e2:95:f7:d4:ab:85:3d:38:8e:32:1c:3a:00:53:32:17:91: 0f:ac:38:d6:8c:a1:1f:8d:87:8b:80:27:7c:e1:37:5a:4e:aa: 8c:fb:f7:13:10:b0:25:51:77:5e:ee:25:24:00:86:ce:8c:bf: ae:65:86:be:9f:e8:ac:a0:df:36:6f:5f:0c:89:a5:86:72:32: b4:5d:31:4f:15:f8:5f:f5:2b:9c:f5:21:c2:9e:c9:32:3c:fb: bc:c2:59:1f:b9:31:4f:5b:ed:1b:f4:4f:da:00:b8:c2:46:38: 00:7d:a1:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwMzAyMDA1MjUxWhcNMjYwMzA5MDA1MjUxWjAYMRYwFAYD VQQDEw02OWE0ZGY2NC1iMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxunuRZI3TMLTMGjevK6JbDSayDuo5keW+pgig3S8hxANgFS1R3y4Ph303kI 7DktVGY2V3oPDJwGMmdtoi5T25MOAIbVFRwYejGxYmGBHQ8t8Gw+g+gsoGGty74t WDfkiDL3Mm1Y1xRp4+RcE3RJEZTqg7gJZBd4ZqjVor/Vu3U9SXNuhrX8mOgGAgQC EMEF0blA60vYN3S8ZbnsU8NjgiUlGy05KCZGRooymj7aPixG8fV+ePT5c1J3Ih7u 8l7nyloe3JXLe4gTx4klmu8by7FQ7SFZd7TlDoWJIaJLzNtYhdcfeu26bLUKeGNe LWoA33CQ0uKIGnOu6p5patP5sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP//2k/9 /78uBDBJOqp6HqIAxbPVMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApkTum1fGrriul0m8XaLTJ7pKKdPpiPeYNa7FHDQyKhqD14t0WgjAapRoBunO 7NvaTfUMwvnnNDcZZfF4CFynopMPrfMQvGo3uJOIMoPE2wy8bmP+FhuglAu4sas4 FAySVuWGJrBfbElqqz7Yj35XcAnXl1lNJndjgSjnAxwPUJ4OmqUvpPNrlGHg4fj2 XqUfruKV99SrhT04jjIcOgBTMheRD6w41oyhH42Hi4AnfOE3Wk6qjPv3ExCwJVF3 Xu4lJACGzoy/rmWGvp/orKDfNm9fDImlhnIytF0xTxX4X/UrnPUhwp7JMjz7vMJZ H7kxT1vtG/RP2gC4wkY4AH2hcw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:00 2026 by rpki-client