$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: muqsqjTpJsykxsCHwmRqjpD+bHcF8yAcUB1+6lMJN38= Subject key identifier: 7C:BD:FB:72:8F:A9:C2:21:C0:68:F2:2A:18:B3:62:39:82:6B:C7:22 Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0CC5 Signing time: Tue 24 Mar 2026 18:16:04 +0000 Manifest this update: Tue 24 Mar 2026 18:16:03 +0000 Manifest next update: Tue 31 Mar 2026 18:16:03 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: wKj4J9NdVjQF29uSNcx/L2zihv3CxDbatwoGud2f+Bg=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: Ipc6oIv3wAFztOTtoYsux+k4MR+JL3rDy/edFa4+Y34=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: VY4FjeE4CY0mN3qvHnhMrNePWv9lXTQoF5HkCTfHV+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Mar 24 18:16:03 2026 GMT Not After : Mar 31 18:16:03 2026 GMT Subject: CN=69c2d4e3-aa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:24:66:fd:37:70:99:52:86:a3:f1:01:10: 01:f5:2b:52:e3:8b:9c:7b:0c:1b:5e:c5:0c:25:1e: 36:bf:5e:7b:f3:72:54:99:5b:b7:b2:46:3e:8d:d6: 02:ee:97:8d:7e:c1:ce:79:50:4d:0e:bf:85:b7:4c: d6:89:fa:94:f2:94:af:84:cf:68:96:71:42:89:1f: d1:85:6d:d4:c9:63:2e:50:7b:30:53:30:31:fd:6b: e7:a8:59:b7:ab:47:cf:11:da:e0:a2:ca:f3:c1:52: 4a:02:48:e4:fd:36:41:44:1f:be:6d:b4:ed:31:95: 69:31:6b:4c:80:6b:0b:59:7b:7d:12:e6:76:18:e1: 15:fd:f6:f7:5f:e5:e9:2b:42:0d:df:cb:32:ee:cc: 51:61:07:8d:ee:6f:23:5c:c4:07:ad:d6:6d:28:1c: 3a:b0:4a:3c:0c:0a:e2:4b:40:70:36:ed:0b:a8:02: f3:7a:79:58:4c:a3:58:78:60:93:af:22:b8:db:9a: 88:37:0b:7e:05:56:79:34:b7:87:aa:92:2b:2a:43: 35:31:4b:48:f9:71:f5:00:ae:07:2c:b4:4f:dc:9a: 1a:dd:fe:9f:ef:82:3d:8f:aa:74:e9:ce:ce:e8:aa: 38:6a:fb:a6:65:39:63:f3:9f:50:fa:cc:14:62:0a: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BD:FB:72:8F:A9:C2:21:C0:68:F2:2A:18:B3:62:39:82:6B:C7:22 X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:25:fb:4a:13:0e:ff:6d:d8:06:81:75:14:f9:a2:6f:e4:c4: cb:fc:9e:dd:ae:df:be:ce:fc:47:d7:5b:95:4d:a5:6f:d0:e1: fd:ec:26:42:ac:a8:86:81:08:4b:9f:71:f0:6d:e1:40:50:84: 04:33:0e:b9:d8:96:48:2d:97:08:f1:94:43:04:46:36:1a:30: f3:86:97:b7:6c:5f:18:6e:3a:9f:dd:1d:ae:52:a0:e2:ab:4b: 23:ce:73:ac:32:cc:3d:e8:1a:6b:05:ec:cb:5e:16:14:a7:2b: 67:ea:98:99:6d:8c:96:97:b4:f2:24:a5:23:d9:45:07:3c:5a: 4c:e9:fd:c4:41:d1:d2:ad:5b:ec:cc:6a:f2:8d:9c:44:0b:c1: a1:3e:39:04:79:fd:14:d2:05:f5:ab:ba:8f:31:de:1f:8a:92: 91:f0:d6:a3:9b:fb:86:69:ed:92:b7:e9:0f:a0:1f:1e:83:5a: d0:09:d2:5b:ee:0a:65:b1:a1:58:33:63:07:c4:83:91:86:51: 87:a7:d2:60:07:ae:c9:8e:a9:ed:1a:f6:df:df:c5:ff:ca:aa: b7:56:b1:43:44:56:40:60:bf:36:a2:cd:1b:32:47:62:5e:ea: a7:c0:37:64:53:68:61:4e:0c:29:23:92:9d:ec:19:88:ef:5e: 7a:e5:de:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjYwMzI0MTgxNjAzWhcNMjYwMzMxMTgxNjAzWjAYMRYwFAYD VQQDEw02OWMyZDRlMy1hYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLokZv03cJlShqPxARAB9StS44ucewwbXsUMJR42v15783JUmVu3skY+jdYC 7peNfsHOeVBNDr+Ft0zWifqU8pSvhM9olnFCiR/RhW3UyWMuUHswUzAx/WvnqFm3 q0fPEdrgosrzwVJKAkjk/TZBRB++bbTtMZVpMWtMgGsLWXt9EuZ2GOEV/fb3X+Xp K0IN38sy7sxRYQeN7m8jXMQHrdZtKBw6sEo8DAriS0BwNu0LqALzenlYTKNYeGCT ryK425qINwt+BVZ5NLeHqpIrKkM1MUtI+XH1AK4HLLRP3Joa3f6f74I9j6p06c7O 6Ko4avumZTlj859Q+swUYgoWJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHy9+3KP qcIhwGjyKhizYjmCa8ciMB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPyX7ShMO/23YBoF1FPmib+TEy/ye3a7fvs78R9dblU2lb9Dh/ewmQqyohoEI S59x8G3hQFCEBDMOudiWSC2XCPGUQwRGNhow84aXt2xfGG46n90drlKg4qtLI85z rDLMPegaawXsy14WFKcrZ+qYmW2Mlpe08iSlI9lFBzxaTOn9xEHR0q1b7Mxq8o2c RAvBoT45BHn9FNIF9au6jzHeH4qSkfDWo5v7hmntkrfpD6AfHoNa0AnSW+4KZbGh WDNjB8SDkYZRh6fSYAeuyY6p7Rr239/F/8qqt1axQ0RWQGC/NqLNGzJHYl7qp8A3 ZFNoYU4MKSOSnewZiO9eeuXeog== -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:52 2026 by rpki-client