$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: i4tnpd2uYgv6oWtmtFVzS+eoMEsDGnA8fqvk2NYV6oo= Subject key identifier: 90:68:04:57:D3:22:89:09:C4:B8:2C:72:92:23:80:46:A4:71:BE:D6 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0B19 Signing time: Tue 24 Mar 2026 19:07:42 +0000 Manifest this update: Tue 24 Mar 2026 19:07:41 +0000 Manifest next update: Tue 31 Mar 2026 19:07:41 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: vtJXDaefCy2KQnZ/KyrHAmnpIbzfVqic5qwbESOkfL8=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: bmZDBP315oKogWRN77TB7S1FyMQuLeHvXamkt99dOkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Mar 24 19:07:41 2026 GMT Not After : Mar 31 19:07:41 2026 GMT Subject: CN=69c2e0fe-5704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:e9:a2:14:0b:c0:b5:b9:0e:ba:1e:50:c4: 15:04:5a:4f:f5:04:18:d1:87:e1:ad:3a:68:36:d0: ac:7e:89:3e:5c:78:a2:7a:ef:03:4e:c6:e3:de:71: e1:b8:21:42:2b:2c:d9:fd:68:5d:12:df:e0:00:47: 50:8e:aa:e2:8b:e7:6d:c0:13:78:7d:30:2f:b2:c1: 84:03:63:27:c7:e9:e3:e6:ca:b7:1e:8b:a6:8e:f1: 94:86:65:01:ad:c7:ce:ce:2a:4c:f4:08:4d:8a:3d: 42:ea:90:74:8f:cf:69:3a:1e:ce:cb:44:ab:05:86: 13:15:ad:72:d9:7e:4c:59:cc:43:f7:89:2a:f3:a3: f3:0b:30:b9:56:d9:db:ac:b7:8b:66:58:4f:90:32: ea:54:99:69:37:e8:b6:51:a1:f9:21:96:d3:01:de: 22:33:14:30:78:a0:65:3c:a7:64:20:e4:ba:3c:73: 55:33:7b:da:6b:2d:03:c2:28:86:06:54:0e:33:ce: d7:b5:b8:90:1a:17:58:98:11:d0:76:61:fd:ba:47: 36:61:ff:19:81:e1:87:77:97:3b:a2:6c:af:a8:cb: c7:7e:24:d1:a7:5c:e2:20:85:83:3a:53:4c:ec:57: 3f:97:16:96:79:7e:ee:6a:da:52:df:9d:c0:10:ec: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:68:04:57:D3:22:89:09:C4:B8:2C:72:92:23:80:46:A4:71:BE:D6 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:16:44:ce:50:a2:e1:54:1a:f8:0f:c6:5b:67:03:88:3e:61: 80:5a:44:fc:8b:eb:c6:bf:62:a6:83:77:4c:c5:9f:a8:90:0c: 72:8c:ae:db:b1:e7:d4:09:aa:6c:9d:d1:90:f7:27:f6:7c:f9: 38:66:ee:2b:a5:5d:e8:80:b8:f7:c1:6e:a7:23:33:fe:38:00: ab:d1:73:46:0b:10:f0:80:a0:a8:c4:1e:29:57:24:52:eb:0d: ef:18:29:34:da:fc:56:03:59:bf:0e:3c:28:ab:d9:a8:76:94: b6:7e:e6:29:f9:49:7b:82:61:12:7e:98:03:54:fa:e5:7f:26: 40:86:dd:84:ee:2d:0e:62:81:00:ba:87:40:d0:17:43:56:06: 34:06:aa:83:24:3d:63:ca:65:39:41:ec:d1:ac:01:2a:7e:5e: 5e:a5:22:00:e9:c5:1b:ff:ad:88:8e:ff:c5:a2:e2:2d:4e:75: 6b:10:85:f6:b0:b3:3f:2e:e0:cd:db:c2:b2:bb:96:58:81:07: e6:4d:29:b8:85:c6:4c:ec:21:ef:60:6e:a6:bd:56:8d:73:8d: a1:aa:24:a3:29:91:1a:b5:3f:f5:85:12:3b:cf:3f:75:2a:e7: c0:a8:c4:8a:e8:36:50:6e:ff:52:21:0b:bd:71:68:d2:ee:d4: f4:95:4d:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjYwMzI0MTkwNzQxWhcNMjYwMzMxMTkwNzQxWjAYMRYwFAYD VQQDEw02OWMyZTBmZS01NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/7pohQLwLW5DroeUMQVBFpP9QQY0YfhrTpoNtCsfok+XHiieu8DTsbj3nHh uCFCKyzZ/WhdEt/gAEdQjqrii+dtwBN4fTAvssGEA2Mnx+nj5sq3HoumjvGUhmUB rcfOzipM9AhNij1C6pB0j89pOh7Oy0SrBYYTFa1y2X5MWcxD94kq86PzCzC5Vtnb rLeLZlhPkDLqVJlpN+i2UaH5IZbTAd4iMxQweKBlPKdkIOS6PHNVM3vaay0DwiiG BlQOM87XtbiQGhdYmBHQdmH9ukc2Yf8ZgeGHd5c7omyvqMvHfiTRp1ziIIWDOlNM 7Fc/lxaWeX7uatpS353AEOyUrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBoBFfT IokJxLgscpIjgEakcb7WMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbhZEzlCi4VQa+A/GW2cDiD5hgFpE/Ivrxr9ipoN3TMWfqJAMcoyu27Hn1Amq bJ3RkPcn9nz5OGbuK6Vd6IC498FupyMz/jgAq9FzRgsQ8ICgqMQeKVckUusN7xgp NNr8VgNZvw48KKvZqHaUtn7mKflJe4JhEn6YA1T65X8mQIbdhO4tDmKBALqHQNAX Q1YGNAaqgyQ9Y8plOUHs0awBKn5eXqUiAOnFG/+tiI7/xaLiLU51axCF9rCzPy7g zdvCsruWWIEH5k0puIXGTOwh72Bupr1WjXONoaokoymRGrU/9YUSO88/dSrnwKjE iug2UG7/UiELvXFo0u7U9JVNNw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:51 2026 by rpki-client