$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: epnTaAAjK/AQ/nYxuDIj++h0KERyeefbx2IPEOSTUpc= Subject key identifier: 0D:8D:C0:61:AF:03:0B:B7:44:04:4A:6B:A9:9D:08:B4:A7:82:EF:C3 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 1071 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 1067 Signing time: Mon 02 Mar 2026 00:43:20 +0000 Manifest this update: Mon 02 Mar 2026 00:43:18 +0000 Manifest next update: Mon 09 Mar 2026 00:43:18 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: 4PDkdDwuXq48RJ/mXLGWU87dPhyFgA1MLz/OzKfF/7Q=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Mar 2 00:43:18 2026 GMT Not After : Mar 9 00:43:18 2026 GMT Subject: CN=69a4dd28-0723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:ab:b4:c2:46:8f:41:d7:e6:4d:37:a9:65: e9:2d:a0:41:46:5b:df:85:7b:b9:a1:6e:6b:85:1a: 85:e7:60:98:8f:85:d7:fd:ed:c1:d6:37:9a:f9:74: 3e:cf:83:56:00:0a:f6:c3:41:ce:37:1d:5a:d6:53: a2:ba:66:97:93:ed:61:a5:00:32:e8:6c:f7:ff:c9: 0b:b5:32:38:6f:f8:5e:61:88:ab:f3:f4:08:6d:2d: 5a:3a:17:e2:00:69:1e:a3:d9:78:ba:20:14:94:25: f9:ac:fa:4d:ba:db:17:71:e0:fe:83:da:fe:dd:b8: aa:6c:d2:7d:ab:be:56:4a:53:c1:b9:2e:de:f9:c9: 7e:b3:f9:2d:33:21:8c:41:a6:2a:89:d3:69:f4:46: d5:f5:23:41:35:c9:df:de:ea:ce:3a:f0:2c:41:d6: 22:68:9f:a9:94:25:3f:c9:da:c0:3a:2d:ec:70:47: 80:c9:cc:97:da:95:5b:7a:32:9b:35:97:af:31:01: ca:5a:4d:89:06:40:ba:ed:ff:88:4b:fa:ff:64:0f: ad:16:fd:e8:b4:5b:e2:dc:b2:50:5e:b2:65:86:f0: 0d:18:8c:7d:c6:30:3c:40:11:f3:17:b2:76:80:64: a5:e3:04:6d:e7:39:af:b6:40:1c:d2:cb:9e:be:36: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8D:C0:61:AF:03:0B:B7:44:04:4A:6B:A9:9D:08:B4:A7:82:EF:C3 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fb:c3:1a:3c:16:12:ba:64:a3:6b:74:63:1c:7c:2a:14:07: 68:26:8d:40:e2:c9:e0:08:d3:ee:0e:d5:91:ae:7f:28:e9:91: 82:9d:cd:d8:b7:10:17:43:ab:6c:08:c2:46:84:db:3f:60:6b: ab:c5:04:4b:d6:cf:f6:9e:87:54:1e:79:22:e5:84:99:5a:60: 39:2c:4e:23:c5:f9:e9:9f:e2:bb:24:99:21:ca:12:b1:93:98: df:e7:a3:12:0d:d1:76:20:da:3c:4e:60:c1:b4:4f:87:aa:73: a9:74:1d:37:3b:57:a4:87:d2:a2:cf:19:21:b1:10:56:7a:2a: 25:4d:d2:8d:e3:02:dc:e1:70:dd:01:a7:24:15:2b:76:e3:33: 0c:d7:92:68:25:15:6d:96:87:40:e5:9b:6f:41:44:ca:5f:3f: e5:9b:69:34:9f:f5:36:05:94:77:ca:39:5f:f0:1e:c8:02:d8: 35:36:fd:37:49:2e:ec:d7:af:13:61:26:0a:26:e2:1e:c3:21: 81:78:24:41:26:7f:bc:03:e1:91:40:c9:72:d3:02:cf:4b:7f: 6c:f8:cd:b5:c0:fb:87:47:59:72:02:98:42:a2:76:d7:8f:b5: 26:76:81:34:18:c4:c8:91:6d:8d:b2:54:e5:00:ac:85:29:a5: ae:6b:64:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjYwMzAyMDA0MzE4WhcNMjYwMzA5MDA0MzE4WjAYMRYwFAYD VQQDEw02OWE0ZGQyOC0wNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5CrtMJGj0HX5k03qWXpLaBBRlvfhXu5oW5rhRqF52CYj4XX/e3B1jea+XQ+ z4NWAAr2w0HONx1a1lOiumaXk+1hpQAy6Gz3/8kLtTI4b/heYYir8/QIbS1aOhfi AGkeo9l4uiAUlCX5rPpNutsXceD+g9r+3biqbNJ9q75WSlPBuS7e+cl+s/ktMyGM QaYqidNp9EbV9SNBNcnf3urOOvAsQdYiaJ+plCU/ydrAOi3scEeAycyX2pVbejKb NZevMQHKWk2JBkC67f+IS/r/ZA+tFv3otFvi3LJQXrJlhvANGIx9xjA8QBHzF7J2 gGSl4wRt5zmvtkAc0suevjaQrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2NwGGv Awu3RARKa6mdCLSngu/DMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFPvDGjwWErpko2t0Yxx8KhQHaCaNQOLJ4AjT7g7Vka5/KOmRgp3N2LcQF0Or bAjCRoTbP2Brq8UES9bP9p6HVB55IuWEmVpgOSxOI8X56Z/iuySZIcoSsZOY3+ej Eg3RdiDaPE5gwbRPh6pzqXQdNztXpIfSos8ZIbEQVnoqJU3SjeMC3OFw3QGnJBUr duMzDNeSaCUVbZaHQOWbb0FEyl8/5ZtpNJ/1NgWUd8o5X/AeyALYNTb9N0ku7Nev E2EmCibiHsMhgXgkQSZ/vAPhkUDJctMCz0t/bPjNtcD7h0dZcgKYQqJ214+1JnaB NBjEyJFtjbJU5QCshSmlrmtkBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:36 2026 by rpki-client