$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: /TJf2Xz5s4FFMtjvvT8ionERqTX8cMz0jooG/12ai28= Subject key identifier: FC:8F:1F:33:1D:84:94:9D:0D:76:63:50:23:29:8D:13:6C:2F:1A:15 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CD7 Signing time: Sun 01 Mar 2026 23:28:17 +0000 Manifest this update: Sun 01 Mar 2026 23:28:16 +0000 Manifest next update: Sun 08 Mar 2026 23:28:16 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: ty/PQFV13kZeieTpnR2tXznYzzqhV9ucghGqvP77dYg=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Mar 1 23:28:16 2026 GMT Not After : Mar 8 23:28:16 2026 GMT Subject: CN=69a4cb91-1031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:41:5f:28:71:32:a6:20:de:95:98:4d:c8: e4:a0:c7:3b:11:2f:b5:8d:8a:62:38:45:54:4e:65: 07:17:cf:e1:1b:f7:df:30:59:de:df:5c:2b:57:dc: 36:23:d5:ae:d7:90:b5:a1:52:c7:df:20:78:33:3e: 6f:e2:30:45:b2:ac:a7:0b:7d:6d:61:c3:67:39:7b: 71:aa:1f:ba:72:d3:3c:08:42:4a:90:dc:0c:67:80: e9:d6:d3:b4:b4:d8:e5:19:60:da:58:c4:e7:87:0c: fa:5a:7a:8e:9b:57:32:c5:a7:f7:9f:09:87:ce:1c: df:04:85:cb:ba:93:65:61:8b:74:97:07:61:07:65: b2:bf:e4:2a:fe:a9:5d:e7:38:c5:4a:97:4b:1d:60: c6:98:2c:d6:86:73:09:63:24:ef:eb:01:85:a3:1e: 04:f5:bc:ed:92:7d:11:9c:20:ca:b1:88:91:20:9c: 03:19:80:34:ab:94:4b:f6:b0:d8:f7:6f:cf:96:74: d1:de:c5:ac:e2:2e:6b:d8:f9:56:9d:56:28:cc:2f: 71:a5:29:17:79:44:19:8e:40:98:fe:ce:01:0b:a9: df:28:86:53:c5:4f:8c:62:50:78:c0:53:71:49:d4: cc:c5:0a:c1:a6:01:64:25:e3:ef:0b:38:a4:e8:76: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:1F:33:1D:84:94:9D:0D:76:63:50:23:29:8D:13:6C:2F:1A:15 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:92:c4:b1:15:26:72:24:d8:da:b7:af:0c:ea:d4:51:17:60: e5:81:e7:ba:cd:31:56:9e:aa:1a:f8:40:c8:bf:75:c8:f2:41: a8:6d:7b:4c:66:b0:dd:6a:e8:82:65:ad:f7:e5:3b:aa:be:cf: fe:01:cf:4d:57:55:cb:6b:ec:2a:24:da:79:22:b6:8b:4c:78: 57:06:32:03:fe:ac:d7:54:a2:4d:5d:cb:0e:84:11:e4:c6:37: 42:45:1b:40:00:82:35:fe:05:07:17:a0:80:56:f5:64:d3:ff: 06:ad:df:ec:29:d0:77:51:b4:a6:a0:7d:78:09:a3:e9:a3:2d: 16:26:b2:50:c3:d5:28:e7:8e:68:36:a0:97:12:23:ab:f0:cc: b5:b4:00:76:ea:09:c9:c0:3c:ce:21:1f:97:57:18:b5:23:2a: 94:e2:67:07:f2:a2:bb:55:b1:ae:bb:54:d7:77:b1:88:a4:5f: 0f:61:10:0a:d8:dd:b1:41:03:f2:ea:77:e6:57:e9:a8:8a:99: 7c:8e:9f:4c:18:bf:b5:1c:6a:9a:76:79:68:10:88:e3:53:2f: 2b:b7:8c:85:1f:92:b4:20:14:05:73:48:7b:0a:c3:3b:b1:d2: 6e:95:2b:94:83:45:b2:38:a6:91:d4:3b:43:8a:97:6e:c2:63: 61:fc:7e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwMzAxMjMyODE2WhcNMjYwMzA4MjMyODE2WjAYMRYwFAYD VQQDEw02OWE0Y2I5MS0xMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8NBXyhxMqYg3pWYTcjkoMc7ES+1jYpiOEVUTmUHF8/hG/ffMFne31wrV9w2 I9Wu15C1oVLH3yB4Mz5v4jBFsqynC31tYcNnOXtxqh+6ctM8CEJKkNwMZ4Dp1tO0 tNjlGWDaWMTnhwz6WnqOm1cyxaf3nwmHzhzfBIXLupNlYYt0lwdhB2Wyv+Qq/qld 5zjFSpdLHWDGmCzWhnMJYyTv6wGFox4E9bztkn0RnCDKsYiRIJwDGYA0q5RL9rDY 92/PlnTR3sWs4i5r2PlWnVYozC9xpSkXeUQZjkCY/s4BC6nfKIZTxU+MYlB4wFNx SdTMxQrBpgFkJePvCzik6HbQBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyPHzMd hJSdDXZjUCMpjRNsLxoVMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANZLEsRUmciTY2revDOrUURdg5YHnus0xVp6qGvhAyL91yPJBqG17TGaw3Wro gmWt9+U7qr7P/gHPTVdVy2vsKiTaeSK2i0x4VwYyA/6s11SiTV3LDoQR5MY3QkUb QACCNf4FBxeggFb1ZNP/Bq3f7CnQd1G0pqB9eAmj6aMtFiayUMPVKOeOaDaglxIj q/DMtbQAduoJycA8ziEfl1cYtSMqlOJnB/Kiu1WxrrtU13exiKRfD2EQCtjdsUED 8up35lfpqIqZfI6fTBi/tRxqmnZ5aBCI41MvK7eMhR+StCAUBXNIewrDO7HSbpUr lINFsjimkdQ7Q4qXbsJjYfx+Sw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:45:04 2026 by rpki-client