$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: PEOohuYy4Jm/0CArCXmUZqlK8i5K68zcArXmlvcSVHA= Subject key identifier: 13:95:4B:5B:53:5D:EE:66:D6:68:EF:0E:88:3D:56:98:DE:08:57:D6 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0259 Signing time: Wed 25 Mar 2026 01:38:44 +0000 Manifest this update: Wed 25 Mar 2026 01:38:44 +0000 Manifest next update: Wed 01 Apr 2026 01:38:44 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: sHa9ZpbN/F7Ux9vFMfCOY/tC6Ah0zYooTfp0h8o3AIU=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: 7Ol3VWHgGxzYNw3Z0SLjEMOIIu19Wg10WM//2VptPM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Mar 25 01:38:44 2026 GMT Not After : Apr 1 01:38:44 2026 GMT Subject: CN=69c33ca4-9875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:14:5c:6e:9e:57:3b:81:61:97:87:35:f8: 1e:03:5d:d7:ff:9e:9f:51:8a:5f:7c:d5:8a:9d:0d: ef:ce:7d:a0:9e:38:81:97:5a:e7:8b:56:e3:41:78: b9:56:10:e6:cc:28:61:c5:96:d7:0a:71:16:f0:b2: 10:cd:71:b6:5d:21:ce:e4:69:e0:c3:0d:e8:3a:02: 91:6e:dc:b2:1b:5f:ba:6d:ed:f7:e1:67:90:42:b0: c3:3c:66:0a:6c:59:d1:fc:3a:30:4b:d0:1a:c0:d4: 8b:54:c1:f5:ee:94:8a:7d:d4:12:8f:9d:b1:5e:f2: e0:df:4f:5d:fe:f8:b4:3e:d4:dd:15:30:b6:74:e5: a4:0f:af:fa:87:c3:20:0d:df:a7:f4:8b:71:59:31: 60:0a:31:3a:77:66:b0:db:96:0e:03:d3:23:74:98: c0:6d:89:70:98:ce:38:92:12:7c:e7:0e:22:6c:52: ac:e8:2b:3c:8d:ce:06:86:81:02:c6:6c:6d:06:0c: 77:b3:fd:09:5c:f2:9d:9e:bc:ed:92:bb:f3:07:e7: 16:0f:62:68:b5:63:b9:a6:f1:ad:b7:f7:f4:ab:78: 65:b9:c6:e6:50:67:9a:c9:72:dd:9e:2f:91:d2:be: f0:43:f4:e0:17:b7:92:b1:07:87:83:20:a1:9c:76: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:95:4B:5B:53:5D:EE:66:D6:68:EF:0E:88:3D:56:98:DE:08:57:D6 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:02:5a:c2:e2:17:ab:74:2d:c2:d2:02:50:fd:39:71:2e:f0: 75:c9:67:43:71:23:99:16:6b:2d:26:76:38:10:24:8c:9a:4c: 60:40:30:58:fe:d9:63:34:e9:9f:26:c4:db:2d:9a:2a:84:09: 63:67:39:32:57:d2:6c:c6:2d:df:b9:a0:74:91:5d:bb:b3:8f: cc:0b:3d:09:83:b1:59:d7:77:bd:59:56:08:62:2a:67:b9:d8: 0a:12:5f:81:68:67:37:c2:5a:6c:8f:f3:c5:97:9d:04:6b:08: 50:76:69:7b:41:1a:d5:43:3c:73:fb:89:23:11:9c:ed:ab:c5: 65:58:f1:ad:05:9d:4f:1c:1e:95:db:9d:42:cd:22:f6:f4:d2: 0f:6a:c0:96:63:78:20:62:e3:b5:71:54:55:f6:14:a2:d9:0a: 4b:b2:68:de:00:e1:9e:23:72:ea:7c:91:cb:96:c0:78:b2:71: ab:91:2e:ba:42:bc:b8:04:18:47:46:f6:ce:8d:86:33:2b:b1: d8:68:ac:bd:d9:72:09:58:a2:05:3b:02:3e:4f:9e:70:f8:59: 2d:fe:28:ad:43:f2:f7:c4:5e:f1:5c:f9:c4:c9:8c:54:da:c2: 9e:9b:ce:84:71:39:f8:ab:2a:48:b2:cb:fb:fc:7a:81:22:b2: 15:b3:b4:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjYwMzI1MDEzODQ0WhcNMjYwNDAxMDEzODQ0WjAYMRYwFAYD VQQDEw02OWMzM2NhNC05ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE8UXG6eVzuBYZeHNfgeA13X/56fUYpffNWKnQ3vzn2gnjiBl1rni1bjQXi5 VhDmzChhxZbXCnEW8LIQzXG2XSHO5Gngww3oOgKRbtyyG1+6be334WeQQrDDPGYK bFnR/DowS9AawNSLVMH17pSKfdQSj52xXvLg309d/vi0PtTdFTC2dOWkD6/6h8Mg Dd+n9ItxWTFgCjE6d2aw25YOA9MjdJjAbYlwmM44khJ85w4ibFKs6Cs8jc4GhoEC xmxtBgx3s/0JXPKdnrztkrvzB+cWD2JotWO5pvGtt/f0q3hlucbmUGeayXLdni+R 0r7wQ/TgF7eSsQeHgyChnHZrTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOVS1tT Xe5m1mjvDog9VpjeCFfWMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQJawuIXq3QtwtICUP05cS7wdclnQ3EjmRZrLSZ2OBAkjJpMYEAwWP7ZYzTp nybE2y2aKoQJY2c5MlfSbMYt37mgdJFdu7OPzAs9CYOxWdd3vVlWCGIqZ7nYChJf gWhnN8JabI/zxZedBGsIUHZpe0Ea1UM8c/uJIxGc7avFZVjxrQWdTxweldudQs0i 9vTSD2rAlmN4IGLjtXFUVfYUotkKS7Jo3gDhniNy6nyRy5bAeLJxq5EuukK8uAQY R0b2zo2GMyux2GisvdlyCViiBTsCPk+ecPhZLf4orUPy98Re8Vz5xMmMVNrCnpvO hHE5+KsqSLLL+/x6gSKyFbO0Aw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:26 2026 by rpki-client