$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: B6/3Np6RJpktjldZt29vnuGhwWOOZrZP9sagMHodYZo= Subject key identifier: 12:3E:71:6D:C2:2D:6E:27:D0:8A:0B:4F:D9:01:03:96:D3:07:32:12 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 020C Signing time: Mon 02 Mar 2026 02:12:21 +0000 Manifest this update: Mon 02 Mar 2026 02:12:20 +0000 Manifest next update: Mon 09 Mar 2026 02:12:20 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: 282SONlhkfxx4Kafk5tzXMfbk9eSFoBtJCEau1uZPlk=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Mar 2 02:12:20 2026 GMT Not After : Mar 9 02:12:20 2026 GMT Subject: CN=69a4f205-98ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:ed:ec:dd:fc:b6:e7:84:34:2f:7e:35:ea: 8e:9a:e8:54:f2:e8:f4:14:69:9a:5e:27:8b:84:3c: 18:02:ae:9c:9b:23:6f:0c:c1:a7:fd:9c:03:d0:07: 32:a0:4a:b5:c9:f7:c5:2f:39:e0:f7:1c:73:bf:75: 8d:a8:54:da:3a:18:96:43:20:09:73:16:8c:a4:c2: cf:da:65:f4:2f:d5:7b:d8:d5:3a:24:9e:cf:47:d2: 5f:e3:f4:c5:06:0b:51:e5:26:1d:d2:5d:2f:e1:94: 81:26:33:cc:2b:47:34:bb:b4:e3:a5:fc:4b:7a:73: ec:8e:0a:5f:18:ec:07:bc:3f:de:6f:d1:2a:13:48: 7d:41:27:f7:a9:27:cb:45:e5:da:f1:c5:93:a0:22: ae:aa:34:fa:88:b8:16:b5:b4:da:cb:e6:70:ac:d2: 1e:be:23:38:73:94:1b:ed:1e:e4:c0:b2:4f:f3:bc: f4:86:95:17:0a:24:73:61:7e:db:9e:64:94:dc:63: f3:56:9a:eb:89:6a:22:2a:ed:97:2a:ca:1f:f2:18: ff:32:da:fc:dd:05:8e:d1:71:78:d3:35:27:cd:3a: d5:b3:9b:9a:d3:0f:67:c9:4d:48:4d:19:36:ee:2d: 98:80:80:31:66:58:6f:1d:db:b8:36:8a:60:5e:4d: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:71:6D:C2:2D:6E:27:D0:8A:0B:4F:D9:01:03:96:D3:07:32:12 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:de:c5:13:2b:1a:8c:b2:21:e2:1e:7b:7a:82:67:d3:d0:e8: fc:39:bc:92:e1:0a:90:87:81:ce:0e:e5:b1:2e:fc:c1:de:66: ca:46:0e:a8:6e:01:29:1d:a5:5e:65:46:7f:64:b5:58:f2:9e: 56:fe:8b:1f:8f:48:8a:23:b9:31:39:13:ec:3e:bf:c5:e6:e1: 60:fc:1d:5d:f6:6e:4b:a5:da:67:ec:54:ea:1d:c2:9c:16:e1: 6f:3f:f3:0e:ea:0a:75:f8:f7:79:4c:1a:14:9f:4b:2d:cb:bc: cf:0d:cc:01:32:a6:12:84:2c:44:68:58:a7:c9:bc:9e:bb:01: 96:ca:13:75:08:7c:e3:4f:b7:4a:c2:ce:21:18:f8:2f:ef:58: 33:c6:35:56:3a:2e:98:06:f5:6a:d1:55:4f:4d:c9:e3:79:9b: cc:8a:c3:a0:cc:4e:74:97:1e:ab:09:dc:cb:75:97:cb:86:d4: f2:cc:6a:66:f3:87:24:6c:0e:b5:f4:4c:58:88:f4:65:87:17: 14:20:04:f3:2a:85:06:7f:5b:e1:03:f1:c4:23:65:18:87:7d: 73:35:92:f2:2d:5c:1a:50:d0:66:fd:bd:c7:29:6a:4f:9d:92: be:a3:8d:c8:ae:9d:2e:5b:f3:a0:a2:2d:75:37:3c:17:7c:76: 4e:8f:70:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjYwMzAyMDIxMjIwWhcNMjYwMzA5MDIxMjIwWjAYMRYwFAYD VQQDEw02OWE0ZjIwNS05OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PLt7N38tueENC9+NeqOmuhU8uj0FGmaXieLhDwYAq6cmyNvDMGn/ZwD0Acy oEq1yffFLzng9xxzv3WNqFTaOhiWQyAJcxaMpMLP2mX0L9V72NU6JJ7PR9Jf4/TF BgtR5SYd0l0v4ZSBJjPMK0c0u7TjpfxLenPsjgpfGOwHvD/eb9EqE0h9QSf3qSfL ReXa8cWToCKuqjT6iLgWtbTay+ZwrNIeviM4c5Qb7R7kwLJP87z0hpUXCiRzYX7b nmSU3GPzVprriWoiKu2XKsof8hj/Mtr83QWO0XF40zUnzTrVs5ua0w9nyU1ITRk2 7i2YgIAxZlhvHdu4NopgXk0JOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI+cW3C LW4n0IoLT9kBA5bTBzISMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEd7FEysajLIh4h57eoJn09Do/Dm8kuEKkIeBzg7lsS78wd5mykYOqG4BKR2l XmVGf2S1WPKeVv6LH49IiiO5MTkT7D6/xebhYPwdXfZuS6XaZ+xU6h3CnBbhbz/z DuoKdfj3eUwaFJ9LLcu8zw3MATKmEoQsRGhYp8m8nrsBlsoTdQh840+3SsLOIRj4 L+9YM8Y1VjoumAb1atFVT03J43mbzIrDoMxOdJceqwncy3WXy4bU8sxqZvOHJGwO tfRMWIj0ZYcXFCAE8yqFBn9b4QPxxCNlGId9czWS8i1cGlDQZv29xylqT52SvqON yK6dLlvzoKItdTc8F3x2To9w1g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:35 2026 by rpki-client