$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: Hm5dSjYQa1vDzIZvkXKyH/V1bHMf7WcXYUbuPn2h9RM= Subject key identifier: 6E:FB:83:E3:63:E2:4A:4F:B7:DE:75:16:84:69:70:54:1E:43:05:2E Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 04BA Signing time: Mon 02 Mar 2026 00:21:45 +0000 Manifest this update: Mon 02 Mar 2026 00:21:44 +0000 Manifest next update: Mon 09 Mar 2026 00:21:44 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: wXk1OKh9OxmZywguungv2qt5WYmVGtvCqMTUG5zSCSU=) 2: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=) 3: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Mar 2 00:21:44 2026 GMT Not After : Mar 9 00:21:44 2026 GMT Subject: CN=69a4d819-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:a8:16:2b:5a:c1:62:1f:d0:c2:86:df:05: 12:b4:85:8a:51:61:27:e6:ff:b3:f9:d8:82:cf:e5: d8:b6:9d:94:4a:29:95:3f:73:50:0c:53:0e:9a:de: 2e:a8:06:58:42:20:fd:21:45:ee:0d:d9:2c:d6:97: 66:6e:81:89:bc:3c:43:2a:c1:c7:47:47:00:8e:65: 19:db:2f:25:e1:c6:df:d4:e2:75:1b:6c:9f:37:1f: fc:b9:98:e7:d5:5b:58:38:d0:10:ce:5b:6d:c4:c0: 9d:d0:6d:91:9d:86:26:0a:12:07:89:d8:5e:38:fa: a0:41:52:1a:8a:24:7f:c6:40:d2:b0:6f:74:7a:63: f7:08:41:32:68:da:fb:20:b5:e7:d1:73:68:c8:ae: 8c:e2:ac:bb:60:f6:07:8b:96:93:a6:ea:df:a1:38: e4:fa:6a:41:e9:31:a3:49:a2:20:c9:cc:3d:a2:e7: 7b:ef:9b:bc:16:82:75:c5:96:20:d7:1f:04:b7:b7: eb:c9:cf:f0:16:05:24:4c:62:6b:96:df:95:4b:30: 55:27:4d:4e:77:1b:76:a5:06:cc:0e:49:5f:13:22: ca:9c:f2:3f:fc:2a:a5:f1:a8:ac:63:ae:08:aa:64: 11:66:a9:af:85:ad:fb:ff:9d:e3:7c:a4:be:ba:bd: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FB:83:E3:63:E2:4A:4F:B7:DE:75:16:84:69:70:54:1E:43:05:2E X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:78:2c:3c:0b:30:fd:19:59:79:ed:f4:e7:14:10:63:1a:22: 31:7f:eb:03:fd:30:91:87:5f:44:38:e7:fe:85:52:cf:dd:72: 7e:43:fb:7e:66:ef:50:e5:87:2b:10:14:b0:6a:8b:24:5a:01: e0:dc:3d:c9:b7:0e:6b:b9:84:46:0a:81:23:5c:33:92:bc:f7: 69:68:ab:3f:e8:d1:f6:71:ae:1d:20:9a:a4:97:0c:fd:41:c1: 80:5a:bb:7e:48:28:f8:00:d3:5f:4c:a1:fd:a2:63:43:39:28: 50:ca:c1:d8:50:15:5f:ef:31:9c:c6:ff:91:05:7d:da:23:88: 01:3e:27:d5:f1:52:23:6f:d9:77:ed:14:0c:44:f8:7d:11:45: 8e:8d:dc:d4:28:96:ed:15:c2:f4:98:2f:b8:0a:a2:7e:6b:a1: ea:53:71:68:90:2a:3e:ed:5d:e5:4d:3f:d0:9b:ca:5f:ca:6b: 71:84:9d:f3:63:d8:d0:2c:fa:ec:3e:b1:25:93:89:d6:e9:47: f6:ef:7d:33:8b:dc:2d:65:37:ca:1b:ad:8b:90:45:2b:df:59: 6b:07:7b:ef:93:77:20:ab:e2:9b:4b:2f:1e:4f:af:4d:33:c0: 31:a4:3d:66:ca:fd:ad:17:24:90:b9:11:44:d0:16:ba:f4:cb: 6c:f8:64:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjYwMzAyMDAyMTQ0WhcNMjYwMzA5MDAyMTQ0WjAYMRYwFAYD VQQDEw02OWE0ZDgxOS03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrKoFitawWIf0MKG3wUStIWKUWEn5v+z+diCz+XYtp2USimVP3NQDFMOmt4u qAZYQiD9IUXuDdks1pdmboGJvDxDKsHHR0cAjmUZ2y8l4cbf1OJ1G2yfNx/8uZjn 1VtYONAQzlttxMCd0G2RnYYmChIHidheOPqgQVIaiiR/xkDSsG90emP3CEEyaNr7 ILXn0XNoyK6M4qy7YPYHi5aTpurfoTjk+mpB6TGjSaIgycw9oud775u8FoJ1xZYg 1x8Et7fryc/wFgUkTGJrlt+VSzBVJ01Odxt2pQbMDklfEyLKnPI//Cql8aisY64I qmQRZqmvha37/53jfKS+ur3zDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG77g+Nj 4kpPt951FoRpcFQeQwUuMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkngsPAsw/RlZee305xQQYxoiMX/rA/0wkYdfRDjn/oVSz91yfkP7fmbvUOWH KxAUsGqLJFoB4Nw9ybcOa7mERgqBI1wzkrz3aWirP+jR9nGuHSCapJcM/UHBgFq7 fkgo+ADTX0yh/aJjQzkoUMrB2FAVX+8xnMb/kQV92iOIAT4n1fFSI2/Zd+0UDET4 fRFFjo3c1CiW7RXC9JgvuAqifmuh6lNxaJAqPu1d5U0/0JvKX8prcYSd82PY0Cz6 7D6xJZOJ1ulH9u99M4vcLWU3yhuti5BFK99Zawd775N3IKvim0svHk+vTTPAMaQ9 Zsr9rRckkLkRRNAWuvTLbPhk5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:02 2026 by rpki-client