$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: GWI9DDvcGeIs+6hseoumwqogZeDaUOKY5hN45eixGOA= Subject key identifier: B8:98:05:F0:54:DB:40:3C:8A:93:40:BD:15:D3:0F:AB:2E:E8:AB:73 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 34 Signing time: Sun 01 Mar 2026 10:00:32 +0000 Manifest this update: Sun 01 Mar 2026 10:00:31 +0000 Manifest next update: Sun 08 Mar 2026 10:00:31 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: KoGkmXgEM5ekExDvh5z/Irqx1XrhJ/+AzjIVlUyBQCc=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Mar 1 10:00:31 2026 GMT Not After : Mar 8 10:00:31 2026 GMT Subject: CN=69a40e40-1af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:4d:15:e0:2a:14:e6:39:99:b3:39:1f:f5: 1f:97:f6:5d:04:15:d5:00:ca:2e:1b:4f:39:8f:6c: 4c:03:a9:e5:c7:93:fe:8e:66:18:5f:e2:58:40:17: 94:0e:ee:8f:57:60:08:27:f2:7c:94:99:d2:d3:87: aa:96:9b:46:cd:60:ed:aa:2f:be:d2:0f:f1:e7:df: 83:a1:80:e0:dd:6d:5c:1c:62:37:b0:30:b6:4b:c0: 87:a4:4e:d2:16:03:36:c2:6c:18:9d:75:73:1c:2c: 3d:9a:d1:f2:49:bb:c7:b3:9c:7f:ff:2f:f3:ff:ad: c6:23:6d:28:18:46:35:24:12:76:a7:83:a7:a7:80: 54:2b:c0:b0:f9:48:f2:62:05:f3:bc:b1:39:45:44: bb:41:46:45:f2:8f:71:70:12:b1:88:4a:bf:80:91: 2a:55:e8:fc:83:66:7e:ac:6d:23:7b:15:8d:e8:6a: 70:cd:42:a0:d2:b3:f1:a7:33:f2:97:75:00:a4:e0: fa:53:8b:53:75:86:4a:45:d8:6b:c0:1e:18:25:38: dd:43:52:60:22:28:6b:0b:29:51:68:62:9a:36:99: f3:2e:57:a6:5a:75:35:22:6b:75:2b:10:c2:a2:ce: a8:8e:6c:6f:7a:fa:9b:eb:e7:0c:41:f2:35:2b:42: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:05:F0:54:DB:40:3C:8A:93:40:BD:15:D3:0F:AB:2E:E8:AB:73 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5c:49:c2:f6:db:9a:fc:98:2f:b3:92:f0:3e:1a:2f:35:f8: cd:4a:39:f0:e4:02:82:18:b0:92:f6:84:bf:ff:7d:5d:d9:14: 69:7f:dd:90:c2:f2:ce:e2:23:8e:c3:01:d6:60:4c:47:22:5e: e1:5e:87:e6:85:8d:d9:22:00:13:8b:ae:da:a5:27:65:4a:80: 51:c3:67:09:b9:74:c6:40:bc:c7:f5:c7:18:ea:87:a3:b1:b4: 4e:2f:e0:2d:56:ec:b7:d2:8e:5e:00:ca:cb:ea:4e:3a:41:5e: db:40:eb:50:b4:3c:c0:8a:8d:a2:d4:1a:9a:68:ca:4f:c9:43: 00:e9:87:69:df:1a:8d:d8:5d:c8:73:08:99:d2:1c:49:c3:fe: a3:99:81:d6:f8:6d:5a:dd:2b:e9:39:da:42:77:b0:39:25:54: c5:c1:48:31:75:5f:8c:33:ad:8c:5a:49:6a:d9:c7:de:22:05: 74:58:c6:64:15:da:f2:74:1a:29:a9:73:61:0d:a7:99:64:98: 78:db:24:27:3f:b2:02:aa:ca:77:92:7f:89:ce:15:f8:77:27: 9e:87:87:19:74:74:2a:fc:40:03:3c:6c:d7:99:41:62:92:41: eb:3d:04:3e:28:20:72:44:7d:aa:f5:87:56:c0:f4:0e:f3:53: bb:b7:b7:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4 REVGNTE4QjAeFw0yNjAzMDExMDAwMzFaFw0yNjAzMDgxMDAwMzFaMBgxFjAUBgNV BAMTDTY5YTQwZTQwLTFhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF9E0V4CoU5jmZszkf9R+X9l0EFdUAyi4bTzmPbEwDqeXHk/6OZhhf4lhAF5QO 7o9XYAgn8nyUmdLTh6qWm0bNYO2qL77SD/Hn34OhgODdbVwcYjewMLZLwIekTtIW AzbCbBiddXMcLD2a0fJJu8eznH//L/P/rcYjbSgYRjUkEnang6engFQrwLD5SPJi BfO8sTlFRLtBRkXyj3FwErGISr+AkSpV6PyDZn6sbSN7FY3oanDNQqDSs/GnM/KX dQCk4PpTi1N1hkpF2GvAHhglON1DUmAiKGsLKVFoYpo2mfMuV6ZadTUia3UrEMKi zqiObG96+pvr5wxB8jUrQgvVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuJgF8FTb QDyKk0C9FdMPqy7oq3MwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoy YVlwZFprS2NkbVkzdlVZcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyXEnC9tua/Jgvs5LwPhovNfjNSjnw5AKCGLCS9oS//31d2RRpf92QwvLO4iOO wwHWYExHIl7hXofmhY3ZIgATi67apSdlSoBRw2cJuXTGQLzH9ccY6oejsbROL+At Vuy30o5eAMrL6k46QV7bQOtQtDzAio2i1BqaaMpPyUMA6Ydp3xqN2F3IcwiZ0hxJ w/6jmYHW+G1a3SvpOdpCd7A5JVTFwUgxdV+MM62MWklq2cfeIgV0WMZkFdrydBop qXNhDaeZZJh42yQnP7ICqsp3kn+JzhX4dyeeh4cZdHQq/EADPGzXmUFikkHrPQQ+ KCByRH2q9YdWwPQO81O7t7eB -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:29 2026 by rpki-client