$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: i+csQ6lvyZN6C9HcU9nUeTCBjZQQFOh0Jb6enb9xtt8= Subject key identifier: 7F:38:E7:ED:1D:E0:B8:93:2B:3A:9B:48:81:9A:85:A3:AF:CB:95:AD Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 35BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 356F Signing time: Tue 24 Mar 2026 14:45:03 +0000 Manifest this update: Tue 24 Mar 2026 14:45:03 +0000 Manifest next update: Tue 31 Mar 2026 14:45:03 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: Huf1j0rSHdCpjZlVll3os7+ijhf+VODyPSZTVUd1C9Q=) 2: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: pcuAAC+IUpsYuzJSHTVcRBBHLD10GWUF30W0iZ2kHRM=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) 4: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13756 (0x35bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Mar 24 14:45:03 2026 GMT Not After : Mar 31 14:45:03 2026 GMT Subject: CN=69c2a36f-4907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:73:d1:57:9b:f6:19:75:b7:2b:ee:55:8b: b9:43:39:7d:18:f2:16:42:85:9a:55:1d:cc:df:66: 0e:e7:91:6d:69:f0:b8:0a:aa:e5:eb:ec:f1:65:8f: 74:d3:48:b8:e6:d3:79:50:c2:be:f1:e1:a8:cd:c1: 50:d9:07:99:56:3f:9e:29:c0:e0:b2:e0:4d:99:d1: 94:cb:1d:d9:5a:88:b0:6d:f4:cd:32:0e:6a:d0:d1: 0d:d6:d0:f2:5a:a7:eb:c5:53:69:24:12:ce:d1:e1: 7d:23:e9:e1:b1:a4:a7:d2:3e:9e:d0:ec:d5:fe:51: 33:c3:39:05:21:7c:6f:79:0d:5d:af:49:bb:38:1f: 9b:d3:dc:fd:8b:82:39:ef:7e:87:20:16:5e:21:ad: 38:24:b0:5d:54:c8:22:50:05:a6:dc:c4:a4:07:86: 7b:33:b7:36:6b:be:43:c8:93:96:41:91:0f:24:f8: 34:a3:18:4c:5f:5a:e2:26:ee:de:2d:33:24:d4:ae: b4:4b:10:42:f4:42:c6:6e:7d:31:fa:79:0f:a6:2c: 01:14:e6:1a:79:f2:19:ce:86:ab:df:b5:e7:61:81: fa:91:01:68:5a:0e:8c:98:65:7e:d0:55:ff:e2:39: b9:e5:d5:b4:84:99:1a:6c:a9:95:37:a8:9b:97:af: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:38:E7:ED:1D:E0:B8:93:2B:3A:9B:48:81:9A:85:A3:AF:CB:95:AD X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:d5:1e:b5:47:dc:61:84:4b:4c:5b:65:9b:52:a6:c2:aa: a9:6d:1b:48:6c:e4:13:50:06:c8:83:51:ee:fa:de:ff:4f:8c: 92:3b:64:72:1f:48:eb:c3:50:3b:7b:76:e9:01:a7:2f:54:d5: a5:c1:e2:a9:c2:a4:26:b0:76:db:96:9b:83:2e:fc:70:b4:09: 1b:2d:fa:57:ac:e6:13:c4:a1:87:f4:80:c0:73:e4:d2:46:95: 96:9a:98:3e:67:6e:fe:47:c8:1f:7c:50:36:99:d1:67:4a:0f: 5d:5a:ff:d4:72:f4:9e:ae:70:1a:11:c2:85:ce:e5:8c:50:0c: 58:54:71:c5:ab:49:4b:de:46:12:b5:31:52:c2:19:b6:a2:ea: 0f:6d:34:94:da:a4:1f:e7:f1:68:00:85:5d:5c:cc:98:da:99: 11:f6:b8:70:9f:31:4e:4b:9d:e3:52:d3:09:b1:5a:37:10:26: 35:96:83:17:ec:7c:86:57:c6:a7:89:f0:a1:31:10:65:b3:52: d7:aa:b3:ca:b6:c3:5f:12:36:df:ba:b6:b8:59:5a:4f:26:10: 0d:bc:59:d6:5f:b5:f3:65:ce:e1:aa:cf:89:1f:90:e8:e2:af: c1:61:32:36:14:63:bc:25:75:00:94:41:67:53:de:89:20:ed: 8c:0c:25:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwMzI0MTQ0NTAzWhcNMjYwMzMxMTQ0NTAzWjAYMRYwFAYD VQQDEw02OWMyYTM2Zi00OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4c1z0Veb9hl1tyvuVYu5Qzl9GPIWQoWaVR3M32YO55FtafC4Cqrl6+zxZY90 00i45tN5UMK+8eGozcFQ2QeZVj+eKcDgsuBNmdGUyx3ZWoiwbfTNMg5q0NEN1tDy WqfrxVNpJBLO0eF9I+nhsaSn0j6e0OzV/lEzwzkFIXxveQ1dr0m7OB+b09z9i4I5 736HIBZeIa04JLBdVMgiUAWm3MSkB4Z7M7c2a75DyJOWQZEPJPg0oxhMX1riJu7e LTMk1K60SxBC9ELGbn0x+nkPpiwBFOYaefIZzoar37XnYYH6kQFoWg6MmGV+0FX/ 4jm55dW0hJkabKmVN6ibl6+rmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH845+0d 4LiTKzqbSIGahaOvy5WtMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfa3VHrVH3GGES0xbZZtSpsKqqW0bSGzkE1AGyINR7vre/0+Mkjtkch9I68NQ O3t26QGnL1TVpcHiqcKkJrB225abgy78cLQJGy36V6zmE8Shh/SAwHPk0kaVlpqY Pmdu/kfIH3xQNpnRZ0oPXVr/1HL0nq5wGhHChc7ljFAMWFRxxatJS95GErUxUsIZ tqLqD200lNqkH+fxaACFXVzMmNqZEfa4cJ8xTkud41LTCbFaNxAmNZaDF+x8hlfG p4nwoTEQZbNS16qzyrbDXxI237q2uFlaTyYQDbxZ1l+182XO4arPiR+Q6OKvwWEy NhRjvCV1AJRBZ1PeiSDtjAwlcw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:47 2026 by rpki-client