$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: 3+yMJQwHZoLE8qtBTVMamgzm13IhuQ2JZOhNDTeIe68= Subject key identifier: 73:EB:C3:7D:28:BF:A4:C7:FB:27:24:86:E2:48:5A:FF:1F:FB:FB:BC Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 016F Signing time: Wed 25 Mar 2026 04:06:09 +0000 Manifest this update: Wed 25 Mar 2026 04:06:09 +0000 Manifest next update: Wed 01 Apr 2026 04:06:09 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: 4Wpquqn3mO4+F3zUeT0EH5nxxVmHeXr3LiJtR6H8+TU=) 2: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: dCVbITTL0w30yRQYLrxfxmqXuIZ/tYnSlYAe68id0yo=) 3: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: oJyEzcIcwdJtA+6VrxH8g/5OZlBHcOjZNK33kRE7w0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Mar 25 04:06:09 2026 GMT Not After : Apr 1 04:06:09 2026 GMT Subject: CN=69c35f31-d247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:0a:5b:0f:0c:43:44:e2:28:76:b4:54:3d: 55:35:45:aa:35:eb:8a:ea:68:41:2c:8b:99:ff:3e: 86:6e:46:52:42:51:0f:f5:6b:05:37:71:ed:92:9d: cb:ea:99:bc:38:e2:86:1c:f4:61:82:93:18:da:e1: fc:3e:02:90:8c:f9:c9:c8:69:0e:46:31:86:16:d6: 18:2c:9a:38:74:9c:62:db:4a:d2:84:23:0f:52:3d: 3b:64:ac:b4:c0:dc:e5:90:c8:56:62:1b:59:20:10: 36:ff:c2:cb:d1:9a:31:4c:d8:30:98:3d:2f:aa:b0: 1d:18:c4:5e:cf:84:fe:2b:e5:43:af:78:f1:6d:a4: d8:8e:6c:e8:43:06:de:6b:aa:72:32:97:4c:2a:bf: 78:2e:f8:21:09:2f:5e:55:d1:ac:02:7c:ff:7e:36: c4:48:64:88:d6:16:79:5d:8d:2d:88:9a:52:07:2e: 1a:a7:17:d5:1c:48:c4:07:b5:a2:d0:df:b9:c0:1c: f6:3e:4d:45:b1:e9:7b:c3:87:06:4d:52:ab:5a:88: 8c:57:7c:ba:72:25:95:3e:db:f5:12:6d:e5:38:a5: 2c:fa:df:9a:9c:fa:4e:49:31:ef:33:b3:79:06:b3: b1:c2:20:01:55:d9:b9:ed:6e:79:b9:5a:56:83:58: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:C3:7D:28:BF:A4:C7:FB:27:24:86:E2:48:5A:FF:1F:FB:FB:BC X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:89:cc:47:1d:05:79:ea:9d:a2:bd:51:9f:da:52:de:ee: 05:44:e2:2f:49:2f:42:a0:b5:dd:e5:d4:3e:60:35:64:2f:95: 42:1f:40:53:a6:82:d5:b2:8a:e7:bb:cb:dd:fd:55:f4:11:84: b7:da:f9:22:c6:e0:5d:07:60:22:87:a5:4d:57:2b:30:00:f8: 40:c4:ce:62:76:8b:cf:ef:9c:d7:cd:af:e8:67:03:9e:70:e0: 8d:83:c0:cd:26:48:b3:d8:d2:1f:ee:62:11:a6:c5:6a:e1:c7: 7c:4b:da:ca:18:29:4d:b1:9b:a6:16:98:2e:f1:0e:77:4f:c6: dd:e4:a7:c1:70:d7:ad:1e:51:11:9c:07:6b:62:b4:e7:03:ab: ed:2f:2b:47:3e:6f:53:5f:8a:33:7e:01:02:48:84:48:d0:7e: 94:6a:bf:9f:78:5a:bc:1d:40:1b:dc:8f:55:5b:13:f1:17:e0: 71:47:59:fa:a6:7d:89:80:63:cf:1e:b7:ff:c0:75:74:11:d5: 79:33:1a:2d:d1:88:30:a1:db:a9:86:2e:2c:da:ac:71:d5:52: 23:b4:a7:ac:95:b1:52:1a:67:d8:90:98:8f:73:e2:59:5a:fd: a2:47:24:d9:46:e8:57:23:35:39:67:06:ba:c6:d5:09:7f:72: 5d:e1:77:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjYwMzI1MDQwNjA5WhcNMjYwNDAxMDQwNjA5WjAYMRYwFAYD VQQDEw02OWMzNWYzMS1kMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSkKWw8MQ0TiKHa0VD1VNUWqNeuK6mhBLIuZ/z6GbkZSQlEP9WsFN3Htkp3L 6pm8OOKGHPRhgpMY2uH8PgKQjPnJyGkORjGGFtYYLJo4dJxi20rShCMPUj07ZKy0 wNzlkMhWYhtZIBA2/8LL0ZoxTNgwmD0vqrAdGMRez4T+K+VDr3jxbaTYjmzoQwbe a6pyMpdMKr94LvghCS9eVdGsAnz/fjbESGSI1hZ5XY0tiJpSBy4apxfVHEjEB7Wi 0N+5wBz2Pk1Fsel7w4cGTVKrWoiMV3y6ciWVPtv1Em3lOKUs+t+anPpOSTHvM7N5 BrOxwiABVdm57W55uVpWg1hj3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPrw30o v6TH+yckhuJIWv8f+/u8MB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSGJzEcdBXnqnaK9UZ/aUt7uBUTiL0kvQqC13eXUPmA1ZC+VQh9AU6aC1bKK 57vL3f1V9BGEt9r5IsbgXQdgIoelTVcrMAD4QMTOYnaLz++c182v6GcDnnDgjYPA zSZIs9jSH+5iEabFauHHfEvayhgpTbGbphaYLvEOd0/G3eSnwXDXrR5REZwHa2K0 5wOr7S8rRz5vU1+KM34BAkiESNB+lGq/n3havB1AG9yPVVsT8RfgcUdZ+qZ9iYBj zx63/8B1dBHVeTMaLdGIMKHbqYYuLNqscdVSI7SnrJWxUhpn2JCYj3PiWVr9okck 2UboVyM1OWcGusbVCX9yXeF3dg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:49 2026 by rpki-client