$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: gAuhFo+sI9uIAouXWGa+1qcET/MzhQHGBoebEextHRk= Subject key identifier: CD:8A:97:A3:DE:32:25:B2:C3:94:42:91:70:F8:CC:90:5E:F4:01:09 Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 3B Signing time: Sun 01 Mar 2026 09:54:02 +0000 Manifest this update: Sun 01 Mar 2026 09:54:01 +0000 Manifest next update: Sun 08 Mar 2026 09:54:01 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: XRvIJ27SpDcbrOJbWsom0FAMlsxuN9VNujzV02MilRI=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Mar 1 09:54:01 2026 GMT Not After : Mar 8 09:54:01 2026 GMT Subject: CN=69a40cb9-812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:09:0e:85:f3:74:1d:64:15:9d:a1:e1:54: ea:35:d9:68:3c:35:b1:c6:dc:32:1e:07:df:14:49: e6:c1:28:84:0c:ec:6b:34:e8:b0:d4:22:b4:49:65: 65:d4:5f:1f:77:c7:98:e5:1c:c0:cc:d0:36:1a:73: ee:0c:96:36:4c:33:d7:2a:88:72:33:24:20:82:55: 14:43:26:d9:16:c2:5c:d4:a8:1c:ab:da:bb:7a:d6: 11:93:53:22:5c:d0:46:89:c9:a1:fc:a4:1e:4c:84: 3a:03:ff:a1:68:a1:fe:86:e4:43:f4:c0:c5:ff:09: 56:09:37:fb:1f:e9:b1:c8:86:09:4f:d9:6a:d3:38: e5:59:d5:c4:c8:04:37:4b:8c:3f:0a:61:e3:4f:d7: b5:88:a5:d9:35:ad:75:31:fe:b0:40:8c:d3:79:58: 31:db:e8:2e:49:e7:f6:38:32:e2:d7:bb:1c:a2:5b: b6:8a:c5:d5:7a:da:3f:24:b9:4e:1a:41:42:0d:cc: 0f:06:10:9e:1c:3a:16:d4:01:ef:4c:90:db:cb:c6: 72:cd:a8:2b:4d:92:bc:e0:72:80:55:5e:c8:cb:bd: 50:1d:d0:4c:56:a4:4c:88:50:87:1e:00:89:7a:c2: db:51:c5:41:4f:5f:23:4b:f4:61:57:68:5a:56:d9: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8A:97:A3:DE:32:25:B2:C3:94:42:91:70:F8:CC:90:5E:F4:01:09 X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:a7:5e:eb:8d:c1:82:d9:58:6a:50:91:90:2a:24:3e:b7: 6f:a2:7d:f5:06:dd:1e:a6:cb:f1:0f:a9:d7:17:a7:7d:61:13: 40:7e:3b:ee:74:94:2c:ef:1c:10:30:69:32:4b:57:af:27:4f: 90:0a:61:b5:6f:e0:d9:67:de:ea:a0:6e:ad:e1:2e:f7:c1:90: 02:4f:64:e7:1e:bd:e2:8c:0f:07:58:d8:c4:6d:a9:a0:f7:1d: d4:15:be:7b:38:3e:02:e4:10:88:a3:ac:b9:4a:7a:53:f4:91: 3d:24:13:a2:4e:04:88:b2:a7:e3:76:87:c4:fc:61:d0:57:4f: ee:1e:8d:3f:ee:4a:2a:a9:42:05:c1:61:1f:42:ea:c4:06:eb: 35:52:da:0d:ca:8b:43:63:af:41:24:f9:07:07:a6:dd:84:c0: 1f:43:bd:60:fa:1d:8a:ee:4b:62:28:db:44:d9:13:f8:13:34: 4e:93:ae:ab:df:3f:a0:6d:6b:ee:1b:ba:9c:ae:0e:c4:ef:ef: 3e:8c:c2:d6:95:3e:a6:b3:a0:15:0f:5d:fb:0a:d3:a7:aa:d6: e4:fa:22:fe:59:57:ad:33:0b:75:74:bf:13:86:b2:4e:46:aa: 44:23:4b:34:fc:4d:0c:ed:be:dc:7b:a1:cf:6b:d9:87:0e:6f: 49:3f:4e:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNjAzMDEwOTU0MDFaFw0yNjAzMDgwOTU0MDFaMBgxFjAUBgNV BAMTDTY5YTQwY2I5LTgxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2JwkOhfN0HWQVnaHhVOo12Wg8NbHG3DIeB98USebBKIQM7Gs06LDUIrRJZWXU Xx93x5jlHMDM0DYac+4MljZMM9cqiHIzJCCCVRRDJtkWwlzUqByr2rt61hGTUyJc 0EaJyaH8pB5MhDoD/6Foof6G5EP0wMX/CVYJN/sf6bHIhglP2WrTOOVZ1cTIBDdL jD8KYeNP17WIpdk1rXUx/rBAjNN5WDHb6C5J5/Y4MuLXuxyiW7aKxdV62j8kuU4a QUINzA8GEJ4cOhbUAe9MkNvLxnLNqCtNkrzgcoBVXsjLvVAd0ExWpEyIUIceAIl6 wttRxUFPXyNL9GFXaFpW2bUbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzYqXo94y JbLDlEKRcPjMkF70AQkwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPgqde643BgtlYalCRkCokPrdvon31Bt0epsvxD6nXF6d9YRNAfjvudJQs7xwQ MGkyS1evJ0+QCmG1b+DZZ97qoG6t4S73wZACT2TnHr3ijA8HWNjEbamg9x3UFb57 OD4C5BCIo6y5SnpT9JE9JBOiTgSIsqfjdofE/GHQV0/uHo0/7koqqUIFwWEfQurE Bus1UtoNyotDY69BJPkHB6bdhMAfQ71g+h2K7ktiKNtE2RP4EzROk66r3z+gbWvu G7qcrg7E7+8+jMLWlT6ms6AVD137CtOnqtbk+iL+WVetMwt1dL8ThrJORqpEI0s0 /E0M7b7ce6HPa9mHDm9JP07z -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:37 2026 by rpki-client