$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json) Hash identifier: rne/d9539fjRNPxSVuhxcAa+wXk8IZrkK7C7eh2xLA4= Subject key identifier: 6D:9F:12:28:9A:FB:2F:3A:49:77:0F:7E:57:C9:93:69:33:35:46:AB Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft Manifest number: 02C8 Signing time: Mon 02 Mar 2026 01:50:28 +0000 Manifest this update: Mon 02 Mar 2026 01:50:26 +0000 Manifest next update: Mon 09 Mar 2026 01:50:26 +0000 Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: ymfzFTAJsSKVyZqleXR8ECLTYjsP42qIFPNGWfwhpFQ=) 2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: MHZ2vGsbQCY20I3lKFrbGLCD8ljQ+7RHRVNSOxCSytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B Validity Not Before: Mar 2 01:50:26 2026 GMT Not After : Mar 9 01:50:26 2026 GMT Subject: CN=69a4ece3-8887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:bb:4b:5e:88:28:17:74:e1:6b:ca:6d:80: cc:0d:6b:45:aa:09:a5:00:72:02:7a:74:3b:99:78: 13:8d:f4:bc:c3:81:ee:84:41:82:30:8e:ae:a7:2d: 48:1b:94:55:25:22:78:17:14:8a:1e:57:bb:82:70: 76:08:d9:dd:e9:f1:dd:1f:50:e0:84:f6:a2:b5:30: 19:71:2d:c9:fe:7f:c0:df:60:07:57:54:7f:9a:1b: ff:ae:8a:6a:0a:48:d5:4f:d0:cc:4a:dc:9a:94:94: 9f:b1:2b:6f:4e:5a:46:2d:1e:ac:50:ea:37:36:f4: 75:f7:66:37:7d:6e:eb:5e:a8:9e:b2:95:b1:82:42: cd:05:23:e5:9a:e9:14:40:6c:6f:12:41:7b:bb:72: da:36:ec:7d:02:80:5d:5a:3d:0c:45:67:82:6f:58: 24:bb:c1:e5:ed:44:6e:ef:53:2e:d7:c7:02:33:de: 60:69:77:5a:22:8b:44:46:a2:ad:32:c3:92:ce:2f: 0e:9a:e0:89:91:fc:af:34:e7:4d:8f:92:ee:c4:49: 54:29:8e:c6:4d:d4:db:1e:f6:e3:4e:e3:d3:00:d1: 90:e4:31:cc:f4:4a:37:21:8a:c4:00:d8:26:24:d3: 98:27:ec:4a:36:a1:42:35:6f:96:37:c1:2f:79:25: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:12:28:9A:FB:2F:3A:49:77:0F:7E:57:C9:93:69:33:35:46:AB X509v3 Authority Key Identifier: keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:10:9a:d2:7d:2b:ec:b8:d5:6b:42:c4:69:0e:a8:7a:8e: f2:24:0f:76:5f:7d:fc:f6:7c:2d:b2:64:30:4f:2a:04:16:56: 42:01:e6:56:d8:83:cb:7d:8a:42:cd:e7:da:f7:82:1b:52:e2: a4:57:2c:36:9f:f3:06:e1:48:4a:da:71:05:e8:60:4b:a9:2d: 9e:f2:6b:68:4c:92:04:f0:7c:60:25:54:ac:2a:08:ea:f0:b1: 21:01:a5:e1:9f:ed:43:9f:f8:31:4a:bf:7f:1a:9d:e1:18:4c: 96:b7:32:32:0b:e3:89:0c:be:81:fe:62:ff:ce:8c:61:e3:a5: c6:97:c5:31:d6:75:29:ea:5a:4e:29:26:c8:93:df:ba:17:9b: a7:c9:0c:6a:b4:2b:6e:2e:e5:e2:4c:b1:07:32:14:67:88:8e: 52:af:66:c3:50:8a:18:c3:88:d3:2d:ed:e1:5c:96:9a:13:c7: da:83:e7:58:52:48:38:f5:9d:89:7c:9f:ff:73:35:f9:48:c0: c0:95:f3:aa:de:0d:93:11:23:e0:9b:26:91:15:06:56:21:33: 77:37:81:ef:de:42:8a:de:8f:a5:7f:55:80:02:f9:41:b2:da: 9b:c6:9c:8b:b8:8c:b9:04:67:8b:1d:5a:7d:a1:1e:66:12:e9: 0d:d4:29:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDQjkxMTAvBgNVBAUTKDFFNjFFMDAwMkNFNDRCQkY1OTU1M0M4MDRBMEFDOTEy RTZGRUJGM0IwHhcNMjYwMzAyMDE1MDI2WhcNMjYwMzA5MDE1MDI2WjAYMRYwFAYD VQQDEw02OWE0ZWNlMy04ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypW7S16IKBd04WvKbYDMDWtFqgmlAHICenQ7mXgTjfS8w4HuhEGCMI6upy1I G5RVJSJ4FxSKHle7gnB2CNnd6fHdH1DghPaitTAZcS3J/n/A32AHV1R/mhv/ropq CkjVT9DMStyalJSfsStvTlpGLR6sUOo3NvR192Y3fW7rXqiespWxgkLNBSPlmukU QGxvEkF7u3LaNux9AoBdWj0MRWeCb1gku8Hl7URu71Mu18cCM95gaXdaIotERqKt MsOSzi8OmuCJkfyvNOdNj5LuxElUKY7GTdTbHvbjTuPTANGQ5DHM9Eo3IYrEANgm JNOYJ+xKNqFCNW+WN8EveSXwdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2fEiia +y86SXcPflfJk2kzNUarMB8GA1UdIwQYMBaAFB5h4AAs5Eu/WVU8gEoKyRLm/r87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUNCOS8wQzAwMjBFMDI2 OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3OVpWVHlBU2dySkV1Yi12 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htSGdBQ3prUzc5WlZUeUFTZ3JKRXViLXZ6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUNCOS8wQzAwMjBFMDI2OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3 OVpWVHlBU2dySkV1Yi12enMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZxoQmtJ9K+y41WtCxGkOqHqO8iQPdl99/PZ8LbJkME8qBBZWQgHmVtiDy32K Qs3n2veCG1LipFcsNp/zBuFIStpxBehgS6ktnvJraEySBPB8YCVUrCoI6vCxIQGl 4Z/tQ5/4MUq/fxqd4RhMlrcyMgvjiQy+gf5i/86MYeOlxpfFMdZ1KepaTikmyJPf uhebp8kMarQrbi7l4kyxBzIUZ4iOUq9mw1CKGMOI0y3t4VyWmhPH2oPnWFJIOPWd iXyf/3M1+UjAwJXzqt4NkxEj4JsmkRUGViEzdzeB795Cit6PpX9VgAL5QbLam8ac i7iMuQRnix1afaEeZhLpDdQp2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:44 2026 by rpki-client