$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: xDdLp6KLHDB18SkpsuOH3QfD5mWEZ++nlNDe2EuMRTU= Subject key identifier: 7E:41:EB:92:D4:50:C8:C5:1A:A1:15:F2:60:8B:6E:BC:2F:A0:F9:E8 Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0C24 Signing time: Tue 24 Mar 2026 18:53:45 +0000 Manifest this update: Tue 24 Mar 2026 18:53:44 +0000 Manifest next update: Tue 31 Mar 2026 18:53:44 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: X5AGSyZl0jorEWOcjqfzm+E1glYehkyX1C5sQA9BVTw=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Mar 24 18:53:44 2026 GMT Not After : Mar 31 18:53:44 2026 GMT Subject: CN=69c2ddb9-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:57:a8:f9:96:fd:35:71:cc:68:5e:8f:6c: f9:95:e0:27:f6:c6:d7:5a:b1:5a:2c:f1:34:ab:91: b3:53:c4:40:83:f4:c4:a6:ff:e0:40:cd:a3:55:fc: a7:4a:c2:8e:fe:f4:00:e4:02:57:98:8b:05:d9:a0: d3:64:28:f9:dc:4d:3f:12:79:7f:57:4d:b1:f2:b7: 88:4f:97:e4:f5:3c:3a:71:8f:8e:b3:c3:2c:7c:41: e9:13:13:5c:df:33:c9:14:37:fb:90:6f:f9:9e:1c: dd:a5:28:e7:78:57:da:36:b7:e9:a3:73:0c:95:d9: d9:3a:4d:aa:51:dc:fc:30:dd:17:32:11:fa:84:00: 3b:58:a2:33:47:b9:99:a2:2f:83:bd:61:ad:97:19: f5:52:99:09:08:3f:7a:a8:a2:e6:6e:aa:75:09:67: 26:a6:47:fd:ef:f6:fe:b7:df:b5:cd:66:56:8c:fb: 9b:8d:a8:65:1c:36:2e:e6:49:ee:99:e3:37:f1:80: d8:dc:13:c6:be:81:71:c1:c2:fd:66:f2:0d:80:fe: 7e:8c:55:2c:71:07:1a:58:c6:64:b2:d6:7a:60:0e: de:bb:70:ca:94:4a:75:a9:7e:1f:79:93:ca:7b:e2: 31:c9:27:83:bb:ea:ac:7a:91:d6:a0:b8:ee:5e:72: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:EB:92:D4:50:C8:C5:1A:A1:15:F2:60:8B:6E:BC:2F:A0:F9:E8 X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ba:a2:11:77:c1:6e:a1:42:69:47:7c:8d:b1:de:5b:da:7a: 7b:81:4b:bd:d5:a3:50:fb:8e:06:95:43:fb:4a:0e:b4:7c:f6: d7:04:17:1e:90:00:a6:31:9b:05:b0:ae:83:cf:c6:70:45:e2: 41:6d:71:48:38:8d:66:c5:61:b0:b4:6f:28:e1:02:f6:34:8b: 5d:ae:1b:a9:06:c1:54:5f:72:d7:02:c8:19:bc:19:a6:f7:5d: 38:d3:39:c4:b5:57:98:b8:ff:10:82:48:2c:e3:83:b2:37:35: 3e:41:cd:cc:d4:9d:fe:26:8f:62:3d:3a:37:67:82:6b:b6:cf: e6:4d:15:a9:a4:9b:44:d6:4f:56:c3:dd:8b:1c:be:b9:94:63: fc:ca:4b:47:22:96:c5:7e:11:d5:43:39:f2:55:d2:78:81:c9: 95:02:c7:74:ac:29:07:38:60:81:54:0f:d1:4c:a6:ca:a6:c6: 38:d3:ec:fa:3b:aa:a0:57:79:17:ff:29:fd:3c:d3:ab:90:19: 19:65:1f:bd:66:bd:aa:60:83:fd:a7:bf:ac:e5:f6:24:c4:f8: ed:da:e8:74:a1:6a:68:57:75:31:46:10:92:c7:f0:fc:b5:99: f6:b9:04:dc:e5:ee:6c:cc:18:fa:5f:81:73:4b:e2:f6:9e:8f: 21:19:17:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDg0NEJENkQxQTk3MkNGRDJCNjBCODRERTBDQjYzRTVE NTRBRkE4Q0YwHhcNMjYwMzI0MTg1MzQ0WhcNMjYwMzMxMTg1MzQ0WjAYMRYwFAYD VQQDEw02OWMyZGRiOS0zMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq99XqPmW/TVxzGhej2z5leAn9sbXWrFaLPE0q5GzU8RAg/TEpv/gQM2jVfyn SsKO/vQA5AJXmIsF2aDTZCj53E0/Enl/V02x8reIT5fk9Tw6cY+Os8MsfEHpExNc 3zPJFDf7kG/5nhzdpSjneFfaNrfpo3MMldnZOk2qUdz8MN0XMhH6hAA7WKIzR7mZ oi+DvWGtlxn1UpkJCD96qKLmbqp1CWcmpkf97/b+t9+1zWZWjPubjahlHDYu5knu meM38YDY3BPGvoFxwcL9ZvINgP5+jFUscQcaWMZkstZ6YA7eu3DKlEp1qX4feZPK e+IxySeDu+qsepHWoLjuXnKTyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5B65LU UMjFGqEV8mCLbrwvoPnoMB8GA1UdIwQYMBaAFIRL1tGpcs/StguE3gy2Pl1Ur6jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5SzJDNFRlRExZLVhWU3Zx TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5 SzJDNFRlRExZLVhWU3ZxTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLqiEXfBbqFCaUd8jbHeW9p6e4FLvdWjUPuOBpVD+0oOtHz21wQXHpAApjGb BbCug8/GcEXiQW1xSDiNZsVhsLRvKOEC9jSLXa4bqQbBVF9y1wLIGbwZpvddONM5 xLVXmLj/EIJILOODsjc1PkHNzNSd/iaPYj06N2eCa7bP5k0VqaSbRNZPVsPdixy+ uZRj/MpLRyKWxX4R1UM58lXSeIHJlQLHdKwpBzhggVQP0UymyqbGONPs+juqoFd5 F/8p/TzTq5AZGWUfvWa9qmCD/ae/rOX2JMT47drodKFqaFd1MUYQksfw/LWZ9rkE 3OXubMwY+l+Bc0vi9p6PIRkX+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:54 2026 by rpki-client