$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: VjS6SdDAK2B6Th2vTfufy87F/XM5lWFRzH1gMBludYA= Subject key identifier: 64:90:3E:15:1D:4A:E5:C3:4C:FA:AB:65:68:92:63:F7:E8:1A:EF:81 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 3522 Signing time: Tue 24 Mar 2026 15:05:54 +0000 Manifest this update: Tue 24 Mar 2026 15:05:53 +0000 Manifest next update: Tue 31 Mar 2026 15:05:53 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: nZURTfkbtogVWr1w8qXkFzQQtqhyXmDIe1KdbSOe9gA=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: iPhOjlBD3f7GvwAVSRYP0vVFYxPQo14yXS2WkJSFj28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Mar 24 15:05:53 2026 GMT Not After : Mar 31 15:05:53 2026 GMT Subject: CN=69c2a852-fd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:16:35:77:00:e9:7d:35:0e:bc:77:5d:a8: 91:a3:dc:13:70:34:7d:1a:e3:dc:ff:3f:1d:26:91: 2f:a3:12:49:e0:45:30:31:50:9c:d2:b4:6b:ec:2f: 70:6a:39:a5:d2:1d:cf:49:8c:b8:63:12:06:2c:05: 81:f0:37:b5:ab:6e:c8:43:80:2d:dd:a9:26:ec:f2: 32:38:6d:92:b3:8f:37:05:c9:24:54:03:cc:de:7e: 89:62:70:2c:05:ae:08:32:2f:a9:ee:69:6a:71:66: 69:1a:8e:74:90:6d:ce:b9:c3:94:6d:16:88:4e:99: 84:ea:fc:9c:5c:2f:b8:24:41:33:d1:e9:bf:c5:26: 85:33:34:87:6b:94:e3:ef:1a:48:ef:fd:ae:75:8e: e8:91:f2:b9:09:7c:72:3b:f0:b9:c0:83:1a:a2:8f: 77:3e:db:1e:5e:ae:e5:2f:f7:b8:f6:59:6d:91:4e: 90:0d:02:90:a8:e7:eb:7a:76:e9:c2:78:fd:49:e2: 2c:68:f3:3e:b9:f4:6a:21:86:6e:28:63:0d:e9:6b: 98:b5:b0:be:57:8c:f0:a8:5b:a9:f1:c6:00:85:d1: bf:c8:6f:da:3e:8e:f8:ca:39:bb:4e:77:9d:1d:82: dc:40:9f:e8:8a:bd:58:95:fa:18:d7:b5:45:38:3c: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:90:3E:15:1D:4A:E5:C3:4C:FA:AB:65:68:92:63:F7:E8:1A:EF:81 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:5b:aa:e7:4c:f0:8c:fd:c2:ae:5b:43:7e:4c:88:38:bd: 00:a3:ff:8f:df:8a:48:ec:b3:ae:dc:84:e8:7e:9e:02:17:a7: 89:26:61:5b:c4:2a:e3:9d:c2:1b:f8:33:bb:be:05:a3:8f:93: 7c:43:df:b4:d9:cc:36:34:4c:9e:c3:41:aa:8d:4c:e2:b7:06: 59:01:09:e8:d1:80:5b:23:b4:09:f8:22:a7:5c:42:a2:87:46: a0:4b:4e:7d:eb:32:68:50:7f:3b:28:b9:e9:18:df:c1:eb:40: 6a:a6:68:3a:94:2e:c4:4b:59:4a:75:bb:43:4f:64:50:32:b7: 72:51:5a:7b:8f:77:fe:30:76:78:27:f4:23:88:5d:11:b6:bd: 68:47:b4:9c:1b:97:21:e7:d8:5f:f2:e5:48:c1:b6:22:52:d8: ec:eb:15:b5:30:28:11:9a:58:b6:5c:e5:d2:4c:c2:2d:9a:c4: af:81:10:84:f1:55:b4:56:26:4b:c5:de:bd:0a:4b:de:a4:79: 8a:d2:75:6e:ee:9f:9b:10:97:18:26:68:b9:80:41:b2:23:19: 4f:12:bf:3a:a3:2c:64:ef:e0:e8:05:3e:fd:cc:10:54:66:9e: 83:dd:c2:32:18:c5:01:ca:24:df:68:3d:59:d3:26:2f:2e:01: 9e:81:eb:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjYwMzI0MTUwNTUzWhcNMjYwMzMxMTUwNTUzWjAYMRYwFAYD VQQDEw02OWMyYTg1Mi1mZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U8WNXcA6X01Drx3XaiRo9wTcDR9GuPc/z8dJpEvoxJJ4EUwMVCc0rRr7C9w ajml0h3PSYy4YxIGLAWB8De1q27IQ4At3akm7PIyOG2Ss483BckkVAPM3n6JYnAs Ba4IMi+p7mlqcWZpGo50kG3OucOUbRaITpmE6vycXC+4JEEz0em/xSaFMzSHa5Tj 7xpI7/2udY7okfK5CXxyO/C5wIMaoo93PtseXq7lL/e49lltkU6QDQKQqOfrenbp wnj9SeIsaPM+ufRqIYZuKGMN6WuYtbC+V4zwqFup8cYAhdG/yG/aPo74yjm7Tned HYLcQJ/oir1YlfoY17VFODxqnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSQPhUd SuXDTPqrZWiSY/foGu+BMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAko1bqudM8Iz9wq5bQ35MiDi9AKP/j9+KSOyzrtyE6H6eAheniSZhW8Qq453C G/gzu74Fo4+TfEPftNnMNjRMnsNBqo1M4rcGWQEJ6NGAWyO0Cfgip1xCoodGoEtO fesyaFB/Oyi56RjfwetAaqZoOpQuxEtZSnW7Q09kUDK3clFae493/jB2eCf0I4hd Eba9aEe0nBuXIefYX/LlSMG2IlLY7OsVtTAoEZpYtlzl0kzCLZrEr4EQhPFVtFYm S8XevQpL3qR5itJ1bu6fmxCXGCZouYBBsiMZTxK/OqMsZO/g6AU+/cwQVGaeg93C MhjFAcok32g9WdMmLy4BnoHr5w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:34 2026 by rpki-client