$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: 7o/smZ6xirUfDDHXIhVvmS0cOEz15bmU7LxbN3NMXSw= Subject key identifier: A5:45:0C:E9:55:19:91:D1:C4:E6:38:3D:28:60:C0:5E:C5:B2:21:A3 Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 097D Signing time: Mon 02 Mar 2026 13:45:44 +0000 Manifest this update: Mon 02 Mar 2026 13:45:43 +0000 Manifest next update: Mon 09 Mar 2026 13:45:43 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: ZuZ/B6yBCZEBRwhVYzDUji8Ev2lcVZb9ME922h0Pum0=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: 5NKCQJLuqvr9nbUC17fmFGMoTVPmZp3opZKxATu37k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Mar 2 13:45:43 2026 GMT Not After : Mar 9 13:45:43 2026 GMT Subject: CN=69a59487-169e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:04:64:33:e5:e3:a3:af:24:d7:80:f8:3c: 89:81:48:cb:ea:53:90:53:e8:7c:21:fe:47:ab:8b: 17:a3:7e:9d:b8:c6:e0:00:f6:9e:07:a6:97:6f:4c: f8:05:92:9f:b6:e2:2a:5b:77:20:0a:d2:71:f5:d7: 04:22:68:0f:2d:29:7f:0b:cf:7c:ea:63:9f:95:cf: b4:15:21:e9:64:5a:28:97:b1:94:27:29:15:03:71: 74:c0:fc:14:f2:d0:77:d3:e1:f4:7c:35:cb:19:d3: 9c:19:2f:13:38:7a:1a:05:7a:57:ea:16:a5:16:7c: 3a:e0:f1:bb:e6:ba:02:a1:56:d4:4c:b5:c2:6e:6d: 7e:fe:4b:56:79:f1:5e:7f:8e:a3:8e:5b:bb:f0:f0: 81:c0:33:ca:3c:f3:17:28:8c:af:bc:96:d3:97:22: 1a:d8:6d:4c:71:7e:2b:63:27:65:54:dc:8b:b6:19: 0a:db:88:7d:5f:96:aa:21:88:05:52:5a:e5:73:a5: 91:4d:d5:e4:e7:f2:4f:1e:48:d4:48:72:05:ec:b3: 76:f6:88:35:01:78:b6:5e:18:e9:d0:a7:3d:ae:83: 54:b4:ff:49:97:6c:0f:99:dd:c8:57:c9:eb:ef:1a: 89:ba:23:1b:92:fe:a4:33:79:7b:ed:49:52:d5:9d: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:0C:E9:55:19:91:D1:C4:E6:38:3D:28:60:C0:5E:C5:B2:21:A3 X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:14:c6:28:b3:6c:b5:17:69:a0:bf:95:4f:85:07:49:75:d9: d1:2e:58:e3:fa:65:ed:eb:4c:7f:46:cd:03:6b:8f:6e:36:bd: a1:cc:1e:b7:18:0a:69:d2:6b:24:e3:83:e9:c8:45:28:a7:f0: 28:db:60:6b:28:09:8a:a3:6b:70:70:44:e3:05:f5:83:69:71: e4:f7:03:b8:2b:05:b2:de:18:7c:2f:b5:05:6b:20:a9:8a:ef: e0:0d:54:f1:63:0b:46:d9:f0:52:93:25:79:72:7c:5c:ee:06: 73:42:41:1d:1e:f1:2a:bb:53:fa:5b:c5:0a:7c:18:37:af:c8: 7f:1f:d0:77:2d:a7:de:5e:b1:4a:3c:6d:4b:79:97:76:c3:3c: 50:ec:68:8e:db:b4:81:c9:3b:59:a7:81:9f:9e:c5:10:60:9d: 6d:0d:e4:91:9b:93:69:2d:16:f3:0f:e3:54:a0:f2:d0:74:c6: 7e:4f:b1:c4:d6:8c:21:99:57:2b:65:bd:61:98:e5:ae:10:e7: d1:25:ca:a8:cb:2e:76:41:d9:70:6f:6c:02:9f:bb:85:6b:6b: a5:ca:04:75:9b:d5:37:f2:3a:78:8b:5c:ac:ab:65:b3:4f:cf: 82:b2:6a:6b:7e:ec:1d:b9:83:93:f6:03:75:50:8a:dc:7b:b9: bd:35:d3:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjYwMzAyMTM0NTQzWhcNMjYwMzA5MTM0NTQzWjAYMRYwFAYD VQQDEw02OWE1OTQ4Ny0xNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdQEZDPl46OvJNeA+DyJgUjL6lOQU+h8If5Hq4sXo36duMbgAPaeB6aXb0z4 BZKftuIqW3cgCtJx9dcEImgPLSl/C8986mOflc+0FSHpZFool7GUJykVA3F0wPwU 8tB30+H0fDXLGdOcGS8TOHoaBXpX6halFnw64PG75roCoVbUTLXCbm1+/ktWefFe f46jjlu78PCBwDPKPPMXKIyvvJbTlyIa2G1McX4rYydlVNyLthkK24h9X5aqIYgF Ulrlc6WRTdXk5/JPHkjUSHIF7LN29og1AXi2Xhjp0Kc9roNUtP9Jl2wPmd3IV8nr 7xqJuiMbkv6kM3l77UlS1Z3nBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVFDOlV GZHRxOY4PShgwF7FsiGjMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGRTGKLNstRdpoL+VT4UHSXXZ0S5Y4/pl7etMf0bNA2uPbja9ocwetxgKadJr JOOD6chFKKfwKNtgaygJiqNrcHBE4wX1g2lx5PcDuCsFst4YfC+1BWsgqYrv4A1U 8WMLRtnwUpMleXJ8XO4Gc0JBHR7xKrtT+lvFCnwYN6/Ifx/Qdy2n3l6xSjxtS3mX dsM8UOxojtu0gck7WaeBn57FEGCdbQ3kkZuTaS0W8w/jVKDy0HTGfk+xxNaMIZlX K2W9YZjlrhDn0SXKqMsudkHZcG9sAp+7hWtrpcoEdZvVN/I6eItcrKtls0/PgrJq a37sHbmDk/YDdVCK3Hu5vTXTRw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:23 2026 by rpki-client