$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: MsOIAxpBQK9Us8uANAYnSfZuIoit+7KlDjb+r2bPwOM= Subject key identifier: BA:52:EB:7E:9D:F0:50:9C:94:AA:7F:25:C4:90:FD:C4:66:BD:C4:D5 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 031D Signing time: Wed 25 Mar 2026 03:16:42 +0000 Manifest this update: Wed 25 Mar 2026 03:16:42 +0000 Manifest next update: Wed 01 Apr 2026 03:16:42 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: uA26wt2y37rnSnkyOmk2tiE8Dlvji0MAVZRFuVTMquw=) 2: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Mar 25 03:16:42 2026 GMT Not After : Apr 1 03:16:42 2026 GMT Subject: CN=69c3539a-95e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:5a:4b:01:93:f2:f3:ba:6e:20:15:80:3b: a9:0e:67:c2:d8:84:a7:2b:93:e2:0b:10:e4:db:5e: d9:50:53:0f:1b:cc:18:33:f0:8a:b4:be:3b:f1:3d: de:64:9f:20:7b:77:18:05:13:4c:83:b4:fe:fb:35: 00:83:27:bc:fb:8b:95:47:12:88:84:d9:a8:37:b3: ac:65:e1:8b:be:d0:6b:b1:b1:49:38:bf:7c:4d:25: 42:24:ce:07:11:c5:b4:61:69:60:c0:2b:3d:c4:ae: 68:86:a5:12:57:02:9f:fa:3d:55:7e:fb:37:63:61: 1d:0e:35:bf:2d:6c:85:7d:62:1f:ae:ca:d9:7f:fe: bd:63:bc:51:1c:56:25:aa:65:28:81:07:1c:b6:c6: 47:fd:1c:a9:48:9c:d8:49:27:35:06:dd:96:fa:b3: 67:f7:a3:34:b7:dc:ce:ad:e5:ea:48:a1:fb:ca:22: a7:da:d2:38:6c:2d:7a:d0:9b:5b:3f:5d:1f:a6:8d: 39:e5:01:15:64:d5:dc:c3:5c:95:af:5a:d8:a7:f4: ce:e4:4b:f0:45:99:60:9c:5f:77:f8:af:04:bf:ab: d4:6d:d3:38:50:d5:ba:44:3f:e7:d3:d5:ca:db:a8: e6:dc:a2:1f:70:0a:d6:af:07:45:d7:c3:08:6a:3e: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:EB:7E:9D:F0:50:9C:94:AA:7F:25:C4:90:FD:C4:66:BD:C4:D5 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7f:95:c1:9c:56:e2:93:60:d5:ff:56:1c:23:59:ba:6c:8f: 36:53:4e:6f:e2:03:d6:b9:d4:ab:07:b4:b9:63:7d:72:f8:e6: 7b:41:ec:7e:33:ce:e6:a4:d4:30:d3:33:80:c9:9d:c5:29:b4: 85:37:fc:8b:2a:28:31:d2:80:c0:3d:db:88:02:ec:a2:16:06: 9a:6f:3b:7f:04:2d:3b:e2:ae:f1:8f:db:0c:57:c5:12:04:1e: 0f:5a:94:a0:8a:10:4c:ed:72:d6:4c:71:06:45:26:7b:52:3a: 3d:91:c2:bf:ca:a5:77:1c:55:af:79:1f:6e:b7:4e:3e:60:84: 3d:db:ae:7c:30:fa:10:55:9f:d0:07:e0:39:f3:6b:e4:87:88: 45:5c:cf:05:27:5f:9e:eb:25:40:57:3c:b5:fe:ea:ff:69:1e: fa:30:c6:58:a1:7a:01:7e:1b:24:82:00:dd:8f:3f:a0:4a:52: 19:55:89:66:2d:39:42:a7:8c:c4:34:73:e7:ec:29:e8:35:b0: 86:35:11:3e:a6:4f:d3:a8:d8:d6:8d:4e:b9:87:cc:9e:a8:19: ac:8d:b4:78:5c:d7:18:24:61:70:b0:72:72:68:cf:33:ab:bd: 8d:8c:3c:ee:c5:c4:58:a9:86:c1:4e:47:b8:48:67:85:eb:15: 73:8a:45:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjYwMzI1MDMxNjQyWhcNMjYwNDAxMDMxNjQyWjAYMRYwFAYD VQQDEw02OWMzNTM5YS05NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznFaSwGT8vO6biAVgDupDmfC2ISnK5PiCxDk217ZUFMPG8wYM/CKtL478T3e ZJ8ge3cYBRNMg7T++zUAgye8+4uVRxKIhNmoN7OsZeGLvtBrsbFJOL98TSVCJM4H EcW0YWlgwCs9xK5ohqUSVwKf+j1Vfvs3Y2EdDjW/LWyFfWIfrsrZf/69Y7xRHFYl qmUogQcctsZH/RypSJzYSSc1Bt2W+rNn96M0t9zOreXqSKH7yiKn2tI4bC160Jtb P10fpo055QEVZNXcw1yVr1rYp/TO5EvwRZlgnF93+K8Ev6vUbdM4UNW6RD/n09XK 26jm3KIfcArWrwdF18MIaj6hAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpS636d 8FCclKp/JcSQ/cRmvcTVMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi3+VwZxW4pNg1f9WHCNZumyPNlNOb+ID1rnUqwe0uWN9cvjme0HsfjPO5qTU MNMzgMmdxSm0hTf8iyooMdKAwD3biALsohYGmm87fwQtO+Ku8Y/bDFfFEgQeD1qU oIoQTO1y1kxxBkUme1I6PZHCv8qldxxVr3kfbrdOPmCEPduufDD6EFWf0AfgOfNr 5IeIRVzPBSdfnuslQFc8tf7q/2ke+jDGWKF6AX4bJIIA3Y8/oEpSGVWJZi05QqeM xDRz5+wp6DWwhjURPqZP06jY1o1OuYfMnqgZrI20eFzXGCRhcLBycmjPM6u9jYw8 7sXEWKmGwU5HuEhnhesVc4pFTw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:38 2026 by rpki-client