$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: ruuj25j5Pjo0v+3OD6uDMSVsxObfrOvlJekXl916TYA= Subject key identifier: 23:53:E1:67:BE:FB:8A:26:09:7F:75:BF:34:6F:0C:8D:FF:CF:3B:05 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 020B Signing time: Wed 25 Mar 2026 02:25:20 +0000 Manifest this update: Wed 25 Mar 2026 02:25:20 +0000 Manifest next update: Wed 01 Apr 2026 02:25:20 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: zRY9n9Bp7Fkn9XZeqzo4an31PWpGXKNckaA7iP4rsGk=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: Sgjdzj5tp9q9wEyuOqsZn8n2Wldu0wGWUaDri0fULh8=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: ARjfoRR6gBhijQjc00z9F3525S4k5A3ymbqrmu60pzs=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: IVDzfIyDPy/oXR2LSXewFcluAy9TlGqq3Gn9o6zUm38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Mar 25 02:25:20 2026 GMT Not After : Apr 1 02:25:20 2026 GMT Subject: CN=69c34790-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:3f:57:bb:ac:82:54:d7:0b:26:61:b2:a5: 7a:66:7f:b1:f8:0f:ab:17:a8:44:2c:ac:ec:b7:64: db:9f:db:73:d0:eb:11:bb:dc:00:cb:4c:3d:d2:01: d2:dc:be:ad:13:34:93:68:4e:2b:a0:be:9e:5e:08: d2:7b:18:c3:ec:fe:92:13:3a:4a:3b:27:9b:af:3b: f7:ff:7b:e3:79:a4:64:33:b3:14:c7:be:de:fd:62: a7:26:1c:25:30:86:89:72:a9:8f:18:7f:a1:3a:e6: f3:df:ce:d5:f4:24:52:ad:3d:00:45:c0:28:28:00: 5e:52:97:44:22:66:b5:58:91:f8:7b:fe:5c:f2:7e: 1e:c4:8f:77:30:4a:58:de:ac:44:c1:98:bc:10:3c: 2d:8e:8c:f1:80:62:74:53:55:3a:fa:c9:95:c0:f1: 48:b5:35:10:c8:78:01:cf:6e:1d:19:76:ab:65:83: 13:99:b4:2d:17:90:ab:06:28:1f:15:61:e5:d2:6b: 2e:5b:85:b0:fc:d2:34:ee:7b:f7:10:7e:4e:7b:5e: db:fb:65:21:16:0d:c6:58:94:ad:18:ad:31:10:35: 52:c1:d0:c3:f9:50:2e:d5:6e:99:77:7a:00:b2:92: 3e:8c:3a:44:d8:14:13:f5:cd:3f:48:4b:7c:85:fe: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:E1:67:BE:FB:8A:26:09:7F:75:BF:34:6F:0C:8D:FF:CF:3B:05 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:86:a5:c7:6b:88:2a:ce:0a:56:65:12:5b:60:5f:0b:d6:20: 9f:a8:b8:c5:64:f6:05:c0:de:dd:7a:a6:7d:18:e5:34:0e:0b: f9:70:2f:d8:35:e1:1d:ea:fe:05:b2:41:ec:2f:e9:85:db:e3: 87:e6:23:b0:27:35:51:fc:a5:32:ed:9c:b7:e6:f5:be:9b:18: b8:25:dd:57:1c:e2:c7:ee:e7:fe:62:20:1f:22:8d:e6:ce:62: 10:92:c0:a2:76:51:b0:bc:40:41:44:46:c0:f9:88:e1:c1:dc: 58:f4:d3:c1:ea:50:d9:7e:b7:b9:c8:75:3b:b6:3d:87:9c:22: a0:db:4c:e0:ac:5b:cf:2c:53:f9:d4:cd:4a:d8:14:69:2e:6b: bb:fb:26:e3:c9:63:bc:18:6a:6e:1a:d9:f3:65:e9:1e:1c:7c: b9:7f:06:93:1b:48:45:16:fc:6a:be:73:b4:21:f9:60:a4:ce: 6c:e6:aa:5e:e5:ba:40:f7:65:1c:9a:38:b2:90:d5:e9:62:e6: 5a:0b:aa:eb:7a:c6:7a:66:58:33:55:a4:5a:fa:da:35:30:40: 92:3d:0a:12:5d:d5:f5:e9:b2:ad:9c:d0:22:e1:75:1a:7b:5d: 2c:17:ed:48:54:2d:84:5d:10:01:5e:ca:d4:51:9c:91:52:7d: b7:84:ce:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwMzI1MDIyNTIwWhcNMjYwNDAxMDIyNTIwWjAYMRYwFAYD VQQDEw02OWMzNDc5MC1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBU/V7usglTXCyZhsqV6Zn+x+A+rF6hELKzst2Tbn9tz0OsRu9wAy0w90gHS 3L6tEzSTaE4roL6eXgjSexjD7P6SEzpKOyebrzv3/3vjeaRkM7MUx77e/WKnJhwl MIaJcqmPGH+hOubz387V9CRSrT0ARcAoKABeUpdEIma1WJH4e/5c8n4exI93MEpY 3qxEwZi8EDwtjozxgGJ0U1U6+smVwPFItTUQyHgBz24dGXarZYMTmbQtF5CrBigf FWHl0msuW4Ww/NI07nv3EH5Oe17b+2UhFg3GWJStGK0xEDVSwdDD+VAu1W6Zd3oA spI+jDpE2BQT9c0/SEt8hf5cewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNT4We+ +4omCX91vzRvDI3/zzsFMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIIalx2uIKs4KVmUSW2BfC9Ygn6i4xWT2BcDe3XqmfRjlNA4L+XAv2DXhHer+ BbJB7C/phdvjh+YjsCc1UfylMu2ct+b1vpsYuCXdVxzix+7n/mIgHyKN5s5iEJLA onZRsLxAQURGwPmI4cHcWPTTwepQ2X63uch1O7Y9h5wioNtM4KxbzyxT+dTNStgU aS5ru/sm48ljvBhqbhrZ82XpHhx8uX8GkxtIRRb8ar5ztCH5YKTObOaqXuW6QPdl HJo4spDV6WLmWguq63rGemZYM1WkWvraNTBAkj0KEl3V9emyrZzQIuF1GntdLBft SFQthF0QAV7K1FGckVJ9t4TOjg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:16 2026 by rpki-client