$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: ixbzUCNsmzHP4D1NVG0mwGCunPcy/rgBdDLtKZ+svac= Subject key identifier: 96:80:94:51:15:E9:09:F3:EF:A9:87:AF:30:4C:5B:DC:90:BC:AB:A9 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 353B Signing time: Tue 24 Mar 2026 14:26:19 +0000 Manifest this update: Tue 24 Mar 2026 14:26:19 +0000 Manifest next update: Tue 31 Mar 2026 14:26:19 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: hjffCRodL/5CEEY+szjKvhDRAsT2Rsss1qsUj1QECYk=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: FVSbWN+txOfkWkBvMLmDBeYriGUMAw+teOvv0Ix7L2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Mar 24 14:26:19 2026 GMT Not After : Mar 31 14:26:19 2026 GMT Subject: CN=69c29f0b-d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:70:65:90:c4:01:0a:7f:a3:4f:5c:ac:25: 96:b2:1e:74:5b:9b:13:3a:ab:bb:4f:b6:2b:aa:98: 17:d7:4d:7d:d0:ee:e0:7f:10:57:38:ee:05:c1:95: c6:db:af:a1:00:7c:43:61:41:a7:78:04:f7:6b:50: a7:13:95:ee:25:52:8b:81:5a:49:20:85:fb:5a:21: 5b:f4:d7:1b:37:b1:86:e1:f3:a9:ee:dd:17:c0:56: d2:7a:6f:0c:b6:db:c7:5b:97:f6:a7:4b:c9:96:58: 20:ba:59:15:d1:07:7e:95:33:ea:bd:b9:5a:a7:2c: 0c:c6:56:06:1c:15:4b:d3:1b:3b:35:ab:ea:b5:fc: f9:a6:c5:65:ea:51:36:eb:93:ca:b0:d6:28:22:90: 4f:82:94:f1:3f:fc:7e:61:f9:d1:34:2c:11:e7:a4: 87:39:42:70:9f:24:08:98:76:70:1c:e5:c7:86:b3: 2a:7a:3e:6a:d7:56:3d:c5:8d:55:5b:ca:43:33:5b: b8:0a:5d:2f:28:19:09:04:83:3a:32:eb:e4:1e:81: 98:99:93:2b:8e:f7:ac:4c:94:c2:67:9a:10:e3:e9: 3b:f4:d0:7a:10:a5:1a:55:db:a3:4d:65:54:af:e2: 52:5b:47:d2:c2:0e:b1:53:51:e4:f0:a7:54:9f:03: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:80:94:51:15:E9:09:F3:EF:A9:87:AF:30:4C:5B:DC:90:BC:AB:A9 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2a:92:ee:c7:ff:2b:d6:b8:37:cd:a3:e7:54:5f:6d:e4:cd: b7:5c:03:ba:6c:71:74:57:c9:c5:a6:7f:2c:1d:ec:1b:81:93: 21:f7:2c:77:68:6d:5e:65:64:e6:f9:54:78:b0:b8:26:af:3b: 72:25:67:e9:e5:47:02:5c:4b:4c:bd:b6:7f:3c:f1:b3:a9:5f: 4c:47:fe:f5:dd:25:72:3e:d8:10:4f:e7:26:77:2c:e7:21:28: 15:9a:09:10:87:e4:dc:55:46:65:ea:4a:86:44:52:f5:3c:bc: 3b:b1:3e:eb:93:66:07:da:f0:8d:f0:63:f7:bd:64:e7:ab:34: 2b:08:d0:96:ac:0a:13:90:71:24:c9:91:9d:61:ec:2b:be:3a: 4b:b0:b6:be:91:10:82:9d:87:bf:61:0e:a0:4e:4a:6f:52:8a: f2:28:6f:08:bd:23:50:67:e4:45:39:d4:27:aa:77:fd:a7:dc: e7:55:57:e3:1f:dd:6d:3e:9a:ba:c5:d6:3e:f5:5d:c3:a4:50: 56:ef:aa:24:b3:b6:c9:fa:e3:b0:eb:00:55:e6:4a:db:20:ae: e8:1b:7a:a5:d8:4e:10:4c:b5:cb:59:08:2c:13:2b:35:11:fb: aa:72:0f:30:6a:78:76:10:1d:e0:5e:91:74:de:07:8a:0b:d4: c8:6c:d4:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjYwMzI0MTQyNjE5WhcNMjYwMzMxMTQyNjE5WjAYMRYwFAYD VQQDEw02OWMyOWYwYi1kNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBxwZZDEAQp/o09crCWWsh50W5sTOqu7T7YrqpgX10190O7gfxBXOO4FwZXG 26+hAHxDYUGneAT3a1CnE5XuJVKLgVpJIIX7WiFb9NcbN7GG4fOp7t0XwFbSem8M ttvHW5f2p0vJllggulkV0Qd+lTPqvblapywMxlYGHBVL0xs7Navqtfz5psVl6lE2 65PKsNYoIpBPgpTxP/x+YfnRNCwR56SHOUJwnyQImHZwHOXHhrMqej5q11Y9xY1V W8pDM1u4Cl0vKBkJBIM6MuvkHoGYmZMrjvesTJTCZ5oQ4+k79NB6EKUaVdujTWVU r+JSW0fSwg6xU1Hk8KdUnwNBOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaAlFEV 6Qnz76mHrzBMW9yQvKupMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiqS7sf/K9a4N82j51RfbeTNt1wDumxxdFfJxaZ/LB3sG4GTIfcsd2htXmVk 5vlUeLC4Jq87ciVn6eVHAlxLTL22fzzxs6lfTEf+9d0lcj7YEE/nJncs5yEoFZoJ EIfk3FVGZepKhkRS9Ty8O7E+65NmB9rwjfBj971k56s0KwjQlqwKE5BxJMmRnWHs K746S7C2vpEQgp2Hv2EOoE5Kb1KK8ihvCL0jUGfkRTnUJ6p3/afc51VX4x/dbT6a usXWPvVdw6RQVu+qJLO2yfrjsOsAVeZK2yCu6Bt6pdhOEEy1y1kILBMrNRH7qnIP MGp4dhAd4F6RdN4HigvUyGzUvw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:07:41 2026 by rpki-client