$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: OdJJeq78v2brWit8eGw/M0gIg3gHTlXPRIF7TOqdxKM= Subject key identifier: 57:53:47:9A:6B:0A:E0:F1:91:68:C4:74:5C:92:D4:15:C0:EE:EA:B4 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1AB7 Signing time: Tue 24 Mar 2026 16:13:48 +0000 Manifest this update: Tue 24 Mar 2026 16:13:48 +0000 Manifest next update: Tue 31 Mar 2026 16:13:48 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: E8lArudhFvswM8GRCb5ySlKckOyjSJ2wksxKo//aJLY=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: te4uWB0jXaN5MAh9dRrKutkLXrpOzUKxCHNdQMjzpZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6850 (0x1ac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Mar 24 16:13:48 2026 GMT Not After : Mar 31 16:13:48 2026 GMT Subject: CN=69c2b83c-b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:fe:79:f3:13:90:a4:10:ba:84:65:e6:a9: a7:a0:80:72:f4:66:3b:5b:fc:a7:54:10:00:6a:14: 04:e4:c0:bb:8a:1d:58:99:5b:c9:c7:74:dc:4f:a8: f0:32:e4:2b:6d:4a:79:95:04:f5:e5:c1:0c:c3:35: 6c:0f:2f:8e:75:35:f1:f1:b9:0a:d4:56:e8:12:0e: 1c:a2:89:52:22:88:12:06:96:a0:db:08:68:a4:6c: 74:0d:81:02:9d:c0:4c:01:8d:80:02:0d:08:cc:9b: 32:aa:34:78:83:9a:b6:7c:7a:62:30:2d:fd:59:45: 9c:e0:6f:c8:5a:d2:c6:14:97:c9:33:16:b1:6b:e9: e7:d0:4e:69:87:2c:f7:87:0e:8f:f2:97:6a:af:ab: ce:aa:42:4b:12:dc:ae:49:53:dd:20:5e:f5:13:55: 0c:65:a0:d0:55:4e:c3:c2:82:50:57:b7:85:8c:c0: ac:1c:db:6b:c6:e8:ad:fe:c0:cd:5f:f9:8b:a4:95: 1f:55:49:8b:77:a3:e1:b2:85:a8:09:1e:54:9f:a5: 6b:5c:92:80:14:65:38:bf:f9:4a:15:ed:f0:0f:0e: ae:39:91:f0:e4:da:74:11:eb:7c:d7:09:a2:70:07: 8e:36:0b:a9:ef:3d:ea:73:96:b0:cf:d3:b3:06:d6: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:47:9A:6B:0A:E0:F1:91:68:C4:74:5C:92:D4:15:C0:EE:EA:B4 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:77:00:25:33:16:7b:69:f6:e4:0e:85:78:29:d6:82:fe:c9: 7b:39:4d:b0:08:5e:c6:f6:09:ce:64:39:fb:89:12:4c:c5:57: 82:cb:73:3f:b0:41:45:c0:20:43:18:2b:d1:50:fe:0d:c0:b6: a0:3a:cc:65:19:ef:0a:5d:c8:dd:fa:2a:97:5f:9b:5a:63:10: a0:54:d7:4a:e5:ab:d8:59:c0:60:f9:fd:09:00:d9:87:ea:ef: 56:b2:ea:a3:af:22:ea:2d:c6:c5:aa:35:6f:57:dd:81:1e:2b: b2:d7:60:5f:ea:f7:ff:89:c9:7d:2d:14:d5:9d:54:38:57:99: dd:56:57:0f:b1:13:04:6e:bd:1d:c4:95:cf:4e:71:03:73:02: fe:53:ca:7c:74:2f:8c:08:26:51:02:6f:ca:b8:e7:c4:25:06: a1:db:2a:bf:37:d9:3a:bf:d5:ac:d1:31:22:02:1d:ad:f4:76: 71:39:98:3f:62:95:78:ee:5f:55:92:b7:63:94:68:6c:a8:c2: f5:3a:cf:29:22:a1:6e:55:b1:20:e4:a6:94:92:21:d8:17:d2: 48:74:17:19:c3:9e:ac:35:ef:5b:4f:24:00:67:b2:05:16:c7: 36:e6:6c:1d:23:e2:75:dc:52:a9:8f:79:56:a7:57:d1:80:8e: 50:88:14:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjYwMzI0MTYxMzQ4WhcNMjYwMzMxMTYxMzQ4WjAYMRYwFAYD VQQDEw02OWMyYjgzYy1iM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjsL+efMTkKQQuoRl5qmnoIBy9GY7W/ynVBAAahQE5MC7ih1YmVvJx3TcT6jw MuQrbUp5lQT15cEMwzVsDy+OdTXx8bkK1FboEg4coolSIogSBpag2whopGx0DYEC ncBMAY2AAg0IzJsyqjR4g5q2fHpiMC39WUWc4G/IWtLGFJfJMxaxa+nn0E5phyz3 hw6P8pdqr6vOqkJLEtyuSVPdIF71E1UMZaDQVU7DwoJQV7eFjMCsHNtrxuit/sDN X/mLpJUfVUmLd6PhsoWoCR5Un6VrXJKAFGU4v/lKFe3wDw6uOZHw5Np0Eet81wmi cAeONgup7z3qc5awz9OzBtYmrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdTR5pr CuDxkWjEdFyS1BXA7uq0MB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXcAJTMWe2n25A6FeCnWgv7JezlNsAhexvYJzmQ5+4kSTMVXgstzP7BBRcAg Qxgr0VD+DcC2oDrMZRnvCl3I3foql1+bWmMQoFTXSuWr2FnAYPn9CQDZh+rvVrLq o68i6i3Gxao1b1fdgR4rstdgX+r3/4nJfS0U1Z1UOFeZ3VZXD7ETBG69HcSVz05x A3MC/lPKfHQvjAgmUQJvyrjnxCUGodsqvzfZOr/VrNExIgIdrfR2cTmYP2KVeO5f VZK3Y5RobKjC9TrPKSKhblWxIOSmlJIh2BfSSHQXGcOerDXvW08kAGeyBRbHNuZs HSPiddxSqY95VqdX0YCOUIgUUg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:58 2026 by rpki-client