$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: e+cwtSsTh5FKVpoqHCtDdjI3xxqAwja+bMyexJX3sEI= Subject key identifier: 9F:B3:A4:65:82:50:C9:29:ED:1A:FC:5B:3B:4B:1D:A0:D1:D0:4F:3A Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 15 Signing time: Wed 25 Mar 2026 08:13:43 +0000 Manifest this update: Wed 25 Mar 2026 08:13:43 +0000 Manifest next update: Wed 01 Apr 2026 08:13:43 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: 60RcFcaAcUc3MDuEK0p2lCbpEU8axEOi0tzu8I3XVkk=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: Mar 25 08:13:43 2026 GMT Not After : Apr 1 08:13:43 2026 GMT Subject: CN=69c39937-7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9b:f5:9e:00:8e:0c:d6:d5:b1:12:c8:79:21: f3:e2:35:c6:2b:c3:b5:87:9b:43:a1:e6:09:49:de: 97:62:61:b2:a8:b8:47:1b:8c:e0:57:4a:d6:31:bb: de:4e:58:08:0a:e3:02:d4:66:f7:36:8e:fd:ea:63: fd:8e:f1:47:60:64:3a:7e:db:4f:57:64:69:37:6f: 17:fe:13:2c:62:f1:af:b9:d8:e3:67:65:15:c6:2a: 5f:2c:9a:88:0e:b9:66:bf:d5:35:a1:db:c7:15:f3: 21:67:b6:1c:34:16:0a:dd:a6:24:0a:ab:a4:f4:be: fc:6f:4d:4a:23:0e:dd:99:e0:51:9c:d4:b6:85:1c: 15:ca:15:17:a4:86:e0:88:b5:92:57:d3:28:6e:b4: d7:a2:68:b3:8a:cd:91:a3:6a:89:55:a1:e8:a8:82: 44:87:23:fc:0c:f2:62:60:9e:68:05:e9:1a:14:82: 4a:9e:95:6e:e0:35:05:70:02:af:59:9c:81:f5:69: 17:dd:84:bc:52:9d:32:80:19:45:ce:fc:8e:1e:b7: eb:f6:69:9c:7b:f0:e2:c4:27:b7:bf:b8:a8:9e:6d: f8:4d:94:9c:c2:9c:2d:22:b7:13:e7:95:72:01:67: 83:70:e9:61:eb:10:19:b9:92:e9:af:f5:d5:9a:a3: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B3:A4:65:82:50:C9:29:ED:1A:FC:5B:3B:4B:1D:A0:D1:D0:4F:3A X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:05:65:5c:70:c0:db:41:59:7f:9a:b0:bd:95:ca:c8:7c: 1e:ba:38:cc:88:e3:5c:f1:60:49:13:16:7f:7b:94:72:1f:d1: 33:21:d1:ac:e9:d1:e1:ee:16:35:19:fb:ff:78:f4:aa:d2:3a: 39:e7:c5:8b:2f:d6:2e:44:8a:16:17:dd:19:6e:2f:b1:c9:37: b1:1e:f0:f9:8b:e5:3d:b4:3b:5a:f5:7a:86:51:2e:28:3f:ec: a4:b5:76:c7:bb:b8:0e:ff:06:94:ea:82:8b:4d:8e:b1:08:11: 8a:2c:19:ad:86:90:fd:27:d1:65:59:53:1a:51:76:98:f2:7c: bb:9a:68:1d:40:d7:bb:e8:d0:0a:8b:3b:30:0d:ec:67:70:0c: 10:d4:0e:a7:6f:29:a4:97:e7:8e:9a:01:10:be:e5:ef:7e:a4: 56:26:fb:c8:d9:d7:8a:03:f7:93:bc:78:78:41:d0:23:66:21: 55:5d:c3:2f:cc:66:e3:ad:92:28:20:b9:49:99:df:c2:72:8c: 2f:0a:00:7d:2e:1d:bc:6c:9b:f2:ec:17:52:3c:b9:1e:a2:c4: 8e:2d:e7:7a:84:27:7f:54:47:83:d9:e4:34:8a:6b:2f:f3:a8: 7e:a3:2a:37:f3:dc:8e:61:6a:ad:3f:6f:66:ba:54:78:de:2a: c8:60:42:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjAzMjUwODEzNDNaFw0yNjA0MDEwODEzNDNaMBgxFjAUBgNV BAMTDTY5YzM5OTM3LTcyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkm/WeAI4M1tWxEsh5IfPiNcYrw7WHm0Oh5glJ3pdiYbKouEcbjOBXStYxu95O WAgK4wLUZvc2jv3qY/2O8UdgZDp+209XZGk3bxf+Eyxi8a+52ONnZRXGKl8smogO uWa/1TWh28cV8yFnthw0FgrdpiQKq6T0vvxvTUojDt2Z4FGc1LaFHBXKFRekhuCI tZJX0yhutNeiaLOKzZGjaolVoeiogkSHI/wM8mJgnmgF6RoUgkqelW7gNQVwAq9Z nIH1aRfdhLxSnTKAGUXO/I4et+v2aZx78OLEJ7e/uKiebfhNlJzCnC0itxPnlXIB Z4Nw6WHrEBm5kumv9dWao5WtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn7OkZYJQ ySntGvxbO0sdoNHQTzowHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAI/AVlXHDA20FZf5qwvZXKyHweujjMiONc8WBJExZ/e5RyH9EzIdGs6dHh7hY1 Gfv/ePSq0jo558WLL9YuRIoWF90Zbi+xyTexHvD5i+U9tDta9XqGUS4oP+yktXbH u7gO/waU6oKLTY6xCBGKLBmthpD9J9FlWVMaUXaY8ny7mmgdQNe76NAKizswDexn cAwQ1A6nbymkl+eOmgEQvuXvfqRWJvvI2deKA/eTvHh4QdAjZiFVXcMvzGbjrZIo ILlJmd/CcowvCgB9Lh28bJvy7BdSPLkeosSOLed6hCd/VEeD2eQ0imsv86h+oyo3 89yOYWqtP29mulR43irIYEK8 -----END CERTIFICATE-----Generated at Fri Mar 27 01:34:11 2026 by rpki-client