$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: HMLvuo6x+8SsqXpiUCU2ENBX8lblnUbag6zWN9/UdBg= Subject key identifier: D3:9C:A0:43:6D:1C:12:7C:84:6C:A3:08:91:17:11:68:98:6C:09:DF Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 04:36:02 +0000 Manifest this update: Wed 25 Mar 2026 04:36:01 +0000 Manifest next update: Wed 01 Apr 2026 04:36:01 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: ZmCILN0pGOjS/NiNCX+i2j2bbpOno7gaXNIXKsVZvO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: Mar 25 04:36:01 2026 GMT Not After : Apr 1 04:36:01 2026 GMT Subject: CN=69c36632-aa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:ad:14:1e:20:9f:7b:d9:80:6c:5f:3e:65: 41:d9:dc:4b:b5:5e:7c:02:06:d2:e8:ce:5d:e2:39: 66:dd:d9:f5:da:27:92:a9:a1:8b:64:23:6e:88:1c: fa:1a:aa:a1:37:44:3f:62:4b:12:a5:a4:58:88:56: a5:1a:d8:b5:61:1c:dc:a7:77:7b:01:42:15:01:e9: 16:81:38:c0:ab:aa:05:a6:fa:af:f2:2d:25:a2:f5: ed:4e:6b:1e:6a:08:da:3c:09:23:26:ba:85:82:ea: 50:56:b2:a8:37:ca:3e:84:87:e0:86:24:81:55:b4: 9e:67:97:bd:8b:27:f0:22:ca:8f:c0:cd:12:17:fa: 16:d2:5f:01:f3:47:bd:81:de:a9:1e:ea:0c:32:be: f7:d3:69:d6:ee:26:f4:23:9a:97:99:9a:93:06:3b: fd:94:db:e3:72:b5:35:8d:c6:e3:45:7b:6a:f0:22: 00:43:ab:db:2e:5b:50:62:a8:e8:48:ae:a4:95:6e: bb:ec:7f:57:82:3f:e4:3f:c1:8d:21:0d:70:8b:0e: df:f2:ed:d2:92:8c:49:c7:76:e9:e8:fc:74:50:ed: 15:dc:a8:31:16:a0:7c:51:d4:33:f1:3a:85:5c:b1: 01:cb:5c:b3:a1:77:fa:49:8f:ae:62:d2:3f:e7:af: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9C:A0:43:6D:1C:12:7C:84:6C:A3:08:91:17:11:68:98:6C:09:DF X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:62:7a:61:b9:44:38:ac:03:f1:59:3b:b4:12:37:3f:f1:a3: 01:01:fd:5c:8b:b7:4e:4a:5d:0f:6c:8c:a8:d8:18:d3:19:e2: 66:58:c0:43:e3:6c:5b:f4:1d:09:32:51:08:ce:98:9d:0e:41: 96:16:f0:a2:21:f1:4d:5d:ae:72:c8:56:d3:8e:a1:f0:9e:d2: dc:1c:31:6f:b2:b0:af:ff:a0:91:5f:3d:27:55:8e:9c:79:86: 0d:32:79:c8:c7:5d:e4:a9:fa:d7:b2:27:d8:91:02:be:76:c5: 45:0c:75:8e:63:0e:f7:e6:cd:84:c1:68:0b:03:b1:79:61:4f: 86:da:8d:c0:7e:7f:f0:a0:52:31:a4:17:51:bc:82:7f:ac:ab: 79:3d:26:f8:45:6f:f0:84:84:b7:a9:03:26:21:12:23:83:44: ac:90:3c:bf:76:35:37:49:01:e6:90:65:3c:5f:95:67:66:bd: fa:63:0e:67:0d:85:27:a2:62:82:69:e2:b2:1a:e7:a3:3b:d8: 4c:7c:72:97:5f:c9:65:10:c5:ef:ce:ee:be:90:cc:93:1d:7b: 56:09:7b:08:c0:74:ce:ed:a9:c9:d1:3b:bf:ce:71:b3:b8:0e: 33:6d:eb:1b:51:c4:5e:0d:92:09:07:6a:8a:b6:b3:2d:d4:c4: 44:3b:dd:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2 QzkyREU5MzQwHhcNMjYwMzI1MDQzNjAxWhcNMjYwNDAxMDQzNjAxWjAYMRYwFAYD VQQDEw02OWMzNjYzMi1hYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi6tFB4gn3vZgGxfPmVB2dxLtV58AgbS6M5d4jlm3dn12ieSqaGLZCNuiBz6 GqqhN0Q/YksSpaRYiFalGti1YRzcp3d7AUIVAekWgTjAq6oFpvqv8i0lovXtTmse agjaPAkjJrqFgupQVrKoN8o+hIfghiSBVbSeZ5e9iyfwIsqPwM0SF/oW0l8B80e9 gd6pHuoMMr7302nW7ib0I5qXmZqTBjv9lNvjcrU1jcbjRXtq8CIAQ6vbLltQYqjo SK6klW677H9Xgj/kP8GNIQ1wiw7f8u3SkoxJx3bp6Px0UO0V3KgxFqB8UdQz8TqF XLEBy1yzoXf6SY+uYtI/56+FSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOcoENt HBJ8hGyjCJEXEWiYbAnfMB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY ZlUwNHBDbngwaHhza3Q2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWJ6YblEOKwD8Vk7tBI3P/GjAQH9XIu3TkpdD2yMqNgY0xniZljAQ+NsW/Qd CTJRCM6YnQ5BlhbwoiHxTV2ucshW046h8J7S3Bwxb7Kwr/+gkV89J1WOnHmGDTJ5 yMdd5Kn617In2JECvnbFRQx1jmMO9+bNhMFoCwOxeWFPhtqNwH5/8KBSMaQXUbyC f6yreT0m+EVv8ISEt6kDJiESI4NErJA8v3Y1N0kB5pBlPF+VZ2a9+mMOZw2FJ6Ji gmnishrnozvYTHxyl1/JZRDF787uvpDMkx17Vgl7CMB0zu2pydE7v85xs7gOM23r G1HEXg2SCQdqirazLdTERDvdYw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:31 2026 by rpki-client