$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: TegtOFmS0kb11w95JjxQKyq0ZUcE4glCCmqdVFBFjuk= Subject key identifier: 41:A6:28:19:5F:32:95:52:1B:D2:8A:70:89:85:1A:73:8B:16:82:6D Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 034D Signing time: Sun 01 Mar 2026 23:23:44 +0000 Manifest this update: Sun 01 Mar 2026 23:23:43 +0000 Manifest next update: Sun 08 Mar 2026 23:23:43 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: XKGSewB35NK9JlZ41+QHDgret3tkV2NiJxzK6UG9Rpk=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: nkQmNKNtDWtkko/kc3lrW6+9g0X+EY77aB0EFy2ZQ0I=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: VSmy2GGy/MUnJpKHQqfyFcFHs7o9CbczIhcZ8oDgTIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Mar 1 23:23:43 2026 GMT Not After : Mar 8 23:23:43 2026 GMT Subject: CN=69a4ca80-b98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:d8:13:5f:ad:63:94:2e:b6:ad:e3:e3:78: a6:d5:22:4f:b9:e2:60:48:79:6e:04:fc:97:62:00: 31:86:e7:ba:93:fd:fa:ee:17:b4:c5:4f:1b:e5:53: 31:e0:12:0b:84:5b:82:26:c7:b7:e5:04:7e:72:9e: cc:7f:07:70:34:b6:42:d8:40:50:81:51:f5:cc:63: bc:0e:51:14:31:e4:d6:5f:b9:0b:46:4b:0b:2c:e7: 21:f9:aa:be:9a:ee:af:97:09:29:8f:a9:74:bd:c2: 8e:25:8c:b3:4d:94:e5:77:ef:2f:db:a2:f1:ee:0b: 5b:53:fa:95:0b:80:b2:5c:09:0a:21:12:ba:34:3a: 35:98:88:01:86:18:cd:d4:5b:a8:f7:23:b0:06:42: 28:9b:d8:ff:42:b9:63:ae:2d:76:db:28:61:86:81: 17:5e:f5:31:78:2e:59:f9:7c:64:c0:d6:4f:76:f9: 74:b1:f1:2a:4a:db:df:bd:90:9f:ac:39:a7:90:a1: 63:c1:6e:59:fa:9f:7a:29:f0:5d:d0:d5:ac:65:e7: ca:a8:6e:8d:6d:9e:1a:0a:e1:eb:aa:e3:a0:b6:c5: 7a:ac:64:00:4f:79:92:8f:1b:0a:10:e1:4c:03:2a: 23:c6:ee:03:26:02:92:68:92:30:1d:0f:eb:6d:7f: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:28:19:5F:32:95:52:1B:D2:8A:70:89:85:1A:73:8B:16:82:6D X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ff:aa:39:75:66:0f:8f:ee:8c:95:6e:44:84:99:53:04:fc: a0:c1:dc:ca:82:ae:e1:f8:2e:d1:aa:11:cc:a2:08:ea:fa:44: 4c:65:3b:82:ba:31:c3:84:e9:0d:b0:56:04:88:3b:05:6a:13: a3:ec:a7:fc:75:8d:ba:17:35:19:75:fb:cc:75:18:13:d2:8f: 31:b3:b4:fd:6e:e1:ee:18:aa:be:30:92:e3:43:31:80:8b:f2: 5e:91:dd:96:93:29:ee:4e:84:36:8c:dc:e0:2a:b7:ce:93:56: 6e:77:e8:08:3a:44:c2:5d:a7:c2:8f:71:8f:d5:af:7b:25:4c: ef:7b:03:0c:53:6d:47:4c:12:e5:0e:32:6d:ab:f6:76:0a:59: 15:ea:66:e1:ba:a5:02:a7:e9:35:fd:65:a6:70:ae:df:37:50: 83:90:73:38:8a:00:93:33:7f:dc:ec:75:89:19:50:6e:99:84: 8b:61:c8:25:8d:b0:9f:e5:d1:50:f7:eb:83:b0:54:e1:e9:92: d6:db:17:99:65:5c:20:2c:7f:5b:93:52:ba:58:ff:f5:42:8a: cd:8d:b4:1b:9b:20:12:af:b6:44:f1:d7:14:7f:cf:17:67:1d: c3:66:6b:90:20:f9:99:26:5a:44:b6:04:39:b1:9f:df:36:03: 30:b6:9c:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjYwMzAxMjMyMzQzWhcNMjYwMzA4MjMyMzQzWjAYMRYwFAYD VQQDEw02OWE0Y2E4MC1iOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSHYE1+tY5Qutq3j43im1SJPueJgSHluBPyXYgAxhue6k/367he0xU8b5VMx 4BILhFuCJse35QR+cp7MfwdwNLZC2EBQgVH1zGO8DlEUMeTWX7kLRksLLOch+aq+ mu6vlwkpj6l0vcKOJYyzTZTld+8v26Lx7gtbU/qVC4CyXAkKIRK6NDo1mIgBhhjN 1Fuo9yOwBkIom9j/Qrljri122yhhhoEXXvUxeC5Z+XxkwNZPdvl0sfEqStvfvZCf rDmnkKFjwW5Z+p96KfBd0NWsZefKqG6NbZ4aCuHrquOgtsV6rGQAT3mSjxsKEOFM Ayojxu4DJgKSaJIwHQ/rbX8iWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGmKBlf MpVSG9KKcImFGnOLFoJtMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyP+qOXVmD4/ujJVuRISZUwT8oMHcyoKu4fgu0aoRzKII6vpETGU7groxw4Tp DbBWBIg7BWoTo+yn/HWNuhc1GXX7zHUYE9KPMbO0/W7h7hiqvjCS40MxgIvyXpHd lpMp7k6ENozc4Cq3zpNWbnfoCDpEwl2nwo9xj9WveyVM73sDDFNtR0wS5Q4ybav2 dgpZFepm4bqlAqfpNf1lpnCu3zdQg5BzOIoAkzN/3Ox1iRlQbpmEi2HIJY2wn+XR UPfrg7BU4emS1tsXmWVcICx/W5NSulj/9UKKzY20G5sgEq+2RPHXFH/PF2cdw2Zr kCD5mSZaRLYEObGf3zYDMLac2A== -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:55 2026 by rpki-client