$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: ie2/690rDv5a/fUATl6u4oOIC47Ym+aLqRTaHmWL0Uk= Subject key identifier: 3B:41:BE:65:13:37:9C:01:A8:A3:EA:20:86:70:74:D2:66:18:B4:B2 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0201 Signing time: Wed 25 Mar 2026 02:46:10 +0000 Manifest this update: Wed 25 Mar 2026 02:46:09 +0000 Manifest next update: Wed 01 Apr 2026 02:46:09 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: XWl13cHxF3QFDM7fUpCLC+jo+a29aQLaHPGtLsX/OO8=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=) 3: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=) 4: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Mar 25 02:46:09 2026 GMT Not After : Apr 1 02:46:09 2026 GMT Subject: CN=69c34c72-a2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9f:5b:66:88:74:1d:ee:97:8c:f6:20:31:97: a6:8e:b0:a7:7b:d2:d3:5d:60:f0:f4:9a:db:d5:3e: 8a:29:d5:aa:76:38:29:c1:7d:2e:06:5f:26:82:b1: bd:b9:0f:73:a3:5d:90:a0:76:33:bd:40:59:81:e1: 96:44:38:1e:8b:46:5d:c9:43:c0:97:74:7a:e5:5f: e8:98:36:67:ec:7c:51:46:68:1c:87:a0:f2:5b:7b: db:ec:86:0f:5a:1f:a4:01:42:cf:bb:11:19:86:75: be:57:7e:9c:b0:3c:e1:55:02:15:61:07:4d:67:ab: ea:78:e1:1c:7c:2c:75:7b:53:be:98:0d:e1:01:db: 0e:7b:21:32:51:3c:43:f6:ad:34:bb:c8:e7:6f:d0: d5:0e:63:c8:52:39:c4:d1:d4:50:d0:b2:53:f5:4d: 03:e9:c8:3f:26:0d:9b:fc:3d:e3:b1:81:b5:5d:94: 58:24:c4:2f:bc:24:38:87:93:d1:25:8f:da:65:4c: 4f:e9:05:58:b7:af:e7:96:aa:13:54:9d:ed:27:69: 54:35:45:86:49:8c:d0:d2:98:57:fe:e1:f8:0a:8d: d1:16:31:48:43:c9:2a:7d:e5:1a:f2:ae:68:d7:e2: c8:9d:b0:e6:c1:e6:0b:03:96:75:73:b7:b1:f3:43: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:BE:65:13:37:9C:01:A8:A3:EA:20:86:70:74:D2:66:18:B4:B2 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:85:d2:2d:dd:86:9f:6d:4f:1a:80:b1:4d:e0:c7:ef:07:7a: 91:cf:d4:9a:8c:d4:d3:97:86:af:58:72:b2:e7:6d:67:6a:47: b9:2f:92:75:f8:00:60:ad:4e:82:fe:1f:ae:19:10:e3:37:82: 43:68:7c:3a:85:02:29:c1:18:35:93:be:00:c5:38:01:d9:c2: b8:2f:3c:db:29:24:76:78:4e:2c:65:ca:c8:2a:cf:6c:22:ce: f9:15:b9:54:4b:01:3a:57:10:fc:8a:6d:80:2a:60:16:1c:de: 61:16:fe:e1:94:29:d9:ff:53:09:d9:c0:65:2f:6f:29:0d:3c: de:6a:27:78:eb:7e:d1:ce:1e:05:e0:18:4a:a0:b6:97:7d:83: 08:da:11:b0:f0:1a:e0:c0:1c:eb:58:00:dc:8c:62:7d:25:6c: b5:bb:6d:18:6f:51:cb:93:07:af:f1:3e:b5:69:58:b6:30:51: ca:cc:24:c6:87:0c:8d:75:99:8f:3f:69:b6:de:93:bf:1c:26: 75:6c:36:70:99:7e:8a:9e:7c:81:d4:cb:c9:96:4c:7e:43:7a: 00:d3:2f:db:ae:09:64:f5:ad:4e:af:99:8f:ed:41:36:c8:b8: 5d:ac:ba:95:6e:15:7b:86:78:44:26:49:25:4c:d6:82:e8:b3: 1a:b8:f4:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjYwMzI1MDI0NjA5WhcNMjYwNDAxMDI0NjA5WjAYMRYwFAYD VQQDEw02OWMzNGM3Mi1hMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAip9bZoh0He6XjPYgMZemjrCne9LTXWDw9Jrb1T6KKdWqdjgpwX0uBl8mgrG9 uQ9zo12QoHYzvUBZgeGWRDgei0ZdyUPAl3R65V/omDZn7HxRRmgch6DyW3vb7IYP Wh+kAULPuxEZhnW+V36csDzhVQIVYQdNZ6vqeOEcfCx1e1O+mA3hAdsOeyEyUTxD 9q00u8jnb9DVDmPIUjnE0dRQ0LJT9U0D6cg/Jg2b/D3jsYG1XZRYJMQvvCQ4h5PR JY/aZUxP6QVYt6/nlqoTVJ3tJ2lUNUWGSYzQ0phX/uH4Co3RFjFIQ8kqfeUa8q5o 1+LInbDmweYLA5Z1c7ex80OS6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtBvmUT N5wBqKPqIIZwdNJmGLSyMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkoXSLd2Gn21PGoCxTeDH7wd6kc/UmozU05eGr1hysudtZ2pHuS+SdfgAYK1O gv4frhkQ4zeCQ2h8OoUCKcEYNZO+AMU4AdnCuC882ykkdnhOLGXKyCrPbCLO+RW5 VEsBOlcQ/IptgCpgFhzeYRb+4ZQp2f9TCdnAZS9vKQ083moneOt+0c4eBeAYSqC2 l32DCNoRsPAa4MAc61gA3IxifSVstbttGG9Ry5MHr/E+tWlYtjBRyswkxocMjXWZ jz9ptt6TvxwmdWw2cJl+ip58gdTLyZZMfkN6ANMv264JZPWtTq+Zj+1BNsi4Xay6 lW4Ve4Z4RCZJJUzWguizGrj0CA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:09 2026 by rpki-client