$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: PtdtQxNA4JTvFbGjKI20+qaqNFhWgTMA7cmKCQpZPtM= Subject key identifier: 97:85:E8:4E:60:B3:4A:BB:AF:09:16:62:C1:0E:50:D8:DD:1B:48:7C Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 029D Signing time: Sun 01 Mar 2026 02:32:39 +0000 Manifest this update: Sun 01 Mar 2026 02:32:38 +0000 Manifest next update: Sun 08 Mar 2026 02:32:38 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: hxJTfFRK95e4wwOZOcG0V3deEhJ69eVpc+CMUcwrn0I=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: Gu/kywKpuic7wgF2QL39qaRHTk8r7+a6HC5vsZOxOeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Mar 1 02:32:38 2026 GMT Not After : Mar 8 02:32:38 2026 GMT Subject: CN=69a3a547-150b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:6f:d4:2f:b7:11:e7:80:ce:0b:02:34:f3: 3c:72:58:da:f1:1e:c9:19:90:77:d8:5e:88:35:a8: 24:b4:e8:c8:09:37:28:16:fd:62:f2:e9:2e:51:9b: 9f:22:13:a7:82:e1:2e:b3:bd:a6:51:26:21:ac:d1: 9b:25:2a:4f:aa:70:95:b3:5f:87:53:65:a8:43:1b: 28:56:a1:2e:6f:57:a1:9e:48:a3:ab:c2:0e:04:5e: 90:99:f9:80:64:13:86:9f:6d:09:8c:b9:d3:6b:83: fd:e2:ae:01:3d:ab:9d:6d:b5:66:45:21:28:e5:37: 0c:55:55:42:c2:a0:c0:e5:7f:42:b8:59:cb:84:cc: b8:ce:ba:bc:b8:04:8e:8a:b9:36:ed:b0:6e:18:b9: da:d4:b8:fa:af:12:4f:b5:72:88:31:31:d5:45:6a: 5f:b4:3e:75:d4:8a:2b:14:4c:0c:2e:8a:7d:3a:a8: 63:cc:e5:e2:ac:a7:d5:0b:18:d7:49:32:40:77:5e: b3:d7:8e:14:e6:db:bb:1e:20:e3:d9:7d:f7:4e:fa: 96:ac:9f:54:d3:66:81:0c:2a:fc:99:1c:37:b1:97: 47:1a:11:a2:d3:69:f1:57:db:c6:87:8f:a9:9c:c1: 0e:62:e9:5a:30:88:35:79:39:52:c9:1b:94:12:b6: 13:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:E8:4E:60:B3:4A:BB:AF:09:16:62:C1:0E:50:D8:DD:1B:48:7C X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b6:dd:aa:be:18:c1:82:b7:61:2d:dc:22:75:a9:de:66:e2: d0:86:01:73:47:a4:e7:fa:dd:72:4e:ab:71:a9:5a:21:76:d2: 16:40:cf:8d:0e:06:9a:8b:55:08:98:21:9f:67:1e:3c:d3:ad: 76:a5:0d:4a:65:d2:4a:d5:25:d0:58:d9:30:81:9c:e9:93:aa: 6e:35:2c:56:27:fa:88:49:7d:3d:df:04:1b:cd:e1:82:de:f8: b9:16:3c:32:fe:b2:10:69:0a:91:b9:3b:3a:d8:da:56:c3:8b: 7c:65:21:72:95:41:a1:0b:3e:78:99:de:ad:ae:03:dc:1b:ed: ef:3f:29:76:06:99:04:ea:bd:a8:0c:16:8f:21:00:6b:f8:97: e2:ab:5b:85:49:57:d7:63:3a:ef:d6:df:08:0a:be:b7:0d:ca: a3:a8:2a:3a:07:b0:74:3a:14:4b:a6:52:9b:13:d7:3b:63:53: 9c:62:8c:52:f6:36:b1:06:55:3e:ca:fc:82:77:a8:e5:8f:5e: 1a:be:9e:7a:a1:ff:2e:0f:84:2e:1b:71:1e:c1:85:23:a2:3c: 4b:84:e9:a4:33:c6:49:d5:e9:cf:b2:ed:5a:b5:6f:f2:72:9e: f1:5c:3d:ef:ad:85:09:7e:5c:3f:b3:ff:92:2c:fb:4a:58:b7: 6a:7b:5e:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjYwMzAxMDIzMjM4WhcNMjYwMzA4MDIzMjM4WjAYMRYwFAYD VQQDDA02OWEzYTU0Ny0xNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8lv1C+3EeeAzgsCNPM8clja8R7JGZB32F6INagktOjICTcoFv1i8ukuUZuf IhOnguEus72mUSYhrNGbJSpPqnCVs1+HU2WoQxsoVqEub1ehnkijq8IOBF6QmfmA ZBOGn20JjLnTa4P94q4BPaudbbVmRSEo5TcMVVVCwqDA5X9CuFnLhMy4zrq8uASO irk27bBuGLna1Lj6rxJPtXKIMTHVRWpftD511IorFEwMLop9OqhjzOXirKfVCxjX STJAd16z144U5tu7HiDj2X33TvqWrJ9U02aBDCr8mRw3sZdHGhGi02nxV9vGh4+p nMEOYulaMIg1eTlSyRuUErYTjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeF6E5g s0q7rwkWYsEOUNjdG0h8MB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj7bdqr4YwYK3YS3cInWp3mbi0IYBc0ek5/rdck6rcalaIXbSFkDPjQ4GmotV CJghn2cePNOtdqUNSmXSStUl0FjZMIGc6ZOqbjUsVif6iEl9Pd8EG83hgt74uRY8 Mv6yEGkKkbk7OtjaVsOLfGUhcpVBoQs+eJnera4D3Bvt7z8pdgaZBOq9qAwWjyEA a/iX4qtbhUlX12M679bfCAq+tw3Ko6gqOgewdDoUS6ZSmxPXO2NTnGKMUvY2sQZV Psr8gneo5Y9eGr6eeqH/Lg+ELhtxHsGFI6I8S4TppDPGSdXpz7LtWrVv8nKe8Vw9 762FCX5cP7P/kiz7Sli3ante2g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:50 2026 by rpki-client