$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: mAHXgrILua+TjLqBz7GQArWQltfMDLcC7FI4HNpZcpo= Subject key identifier: BA:C0:66:6D:1D:AA:54:90:21:C3:BF:59:7F:36:F0:D4:E9:C0:50:1F Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 030F Signing time: Wed 25 Mar 2026 00:50:07 +0000 Manifest this update: Wed 25 Mar 2026 00:50:06 +0000 Manifest next update: Wed 01 Apr 2026 00:50:06 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: lgRxyX6YdCKeDRktFNhbA6wamLXP4UZDEqm1yysF4qI=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Mar 25 00:50:06 2026 GMT Not After : Apr 1 00:50:06 2026 GMT Subject: CN=69c3313f-0e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:fc:6a:bf:27:68:8e:de:d2:8b:08:13:07: a7:e7:5d:ad:33:6c:a6:78:e9:a5:fb:1f:15:69:3f: 1a:57:12:35:31:e1:21:60:2a:ae:f6:54:ab:22:99: af:a3:e5:a3:ee:37:ef:b1:fb:64:01:6a:40:d4:15: 1c:86:ed:0b:85:17:b7:1f:be:91:7f:25:ed:ea:c8: 7c:9b:4e:a1:7c:89:1e:30:1d:cb:5e:e9:83:b3:92: 68:a2:67:f2:a4:35:73:49:19:7a:88:d0:30:0c:be: 40:1d:92:0c:6f:22:3f:ad:f0:ba:74:3a:3e:60:b7: c8:0d:cc:02:49:1a:9f:8c:d4:95:85:80:d1:81:95: 72:ae:6a:fc:6c:f8:f9:ed:8c:5a:1a:fa:91:98:76: fd:ce:02:9e:3a:36:3d:ab:36:f5:56:9d:c8:fb:de: fa:ff:92:8c:a7:df:4d:09:5a:93:07:16:54:60:31: 3f:7b:fc:0a:59:7d:3f:1f:f3:81:20:db:43:41:2c: a1:a9:06:96:8e:4d:d5:2e:8d:7a:99:c9:ae:87:93: f4:b5:1b:5b:2f:46:b4:3b:dc:d1:27:94:1b:67:61: b3:7a:93:78:59:fc:bf:37:1b:e9:10:d7:f9:a8:42: 79:06:78:94:83:b7:dc:79:c5:96:d9:64:c4:ba:74: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:66:6D:1D:AA:54:90:21:C3:BF:59:7F:36:F0:D4:E9:C0:50:1F X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:a8:b3:66:22:52:fd:6a:9c:55:b7:d1:36:b4:aa:2a:50: 9a:1e:ff:67:dc:95:24:91:11:15:cc:f2:8f:1b:b4:d4:e1:c0: 80:a7:eb:ab:6c:b3:a0:a7:a8:35:64:4b:3b:29:84:01:62:6c: 29:5d:a3:07:86:01:12:27:39:c3:52:83:2e:26:4f:dc:9d:4c: 70:89:c5:f1:77:ce:17:6f:3a:11:9d:39:75:5b:7c:d9:30:3e: 15:14:1a:78:23:44:bb:43:00:32:3f:55:cc:e4:14:ae:7e:66: ad:64:84:65:b7:d9:ca:76:a7:22:04:e6:d7:d4:81:ab:bd:a6: 01:60:77:41:5d:f4:cb:19:e8:4c:ac:9d:6f:f5:0a:89:4e:b5: 06:57:23:8d:e7:8b:c1:72:f2:61:19:ea:30:2b:27:a0:94:e0: db:c3:fe:b0:88:6d:28:28:86:2f:41:a8:c5:01:9a:b6:97:0e: 54:e4:23:44:00:bf:f9:3f:70:b9:3f:57:fc:77:7d:ad:d1:20: d3:8f:85:cd:ed:88:94:92:3d:1b:ee:54:d0:0b:90:25:cf:62: 28:1c:54:f3:15:31:71:7f:54:ea:8c:12:c3:85:49:92:07:77: f6:bf:9c:79:c7:c0:5e:74:0e:0f:35:40:68:bd:55:b8:4a:71: 39:19:33:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjYwMzI1MDA1MDA2WhcNMjYwNDAxMDA1MDA2WjAYMRYwFAYD VQQDEw02OWMzMzEzZi0wZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjH8ar8naI7e0osIEwen512tM2ymeOml+x8VaT8aVxI1MeEhYCqu9lSrIpmv o+Wj7jfvsftkAWpA1BUchu0LhRe3H76RfyXt6sh8m06hfIkeMB3LXumDs5Joomfy pDVzSRl6iNAwDL5AHZIMbyI/rfC6dDo+YLfIDcwCSRqfjNSVhYDRgZVyrmr8bPj5 7YxaGvqRmHb9zgKeOjY9qzb1Vp3I+976/5KMp99NCVqTBxZUYDE/e/wKWX0/H/OB INtDQSyhqQaWjk3VLo16mcmuh5P0tRtbL0a0O9zRJ5QbZ2GzepN4Wfy/NxvpENf5 qEJ5BniUg7fcecWW2WTEunR8KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrAZm0d qlSQIcO/WX828NTpwFAfMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuuCos2YiUv1qnFW30Ta0qipQmh7/Z9yVJJERFczyjxu01OHAgKfrq2yzoKeo NWRLOymEAWJsKV2jB4YBEic5w1KDLiZP3J1McInF8XfOF286EZ05dVt82TA+FRQa eCNEu0MAMj9VzOQUrn5mrWSEZbfZynanIgTm19SBq72mAWB3QV30yxnoTKydb/UK iU61BlcjjeeLwXLyYRnqMCsnoJTg28P+sIhtKCiGL0GoxQGatpcOVOQjRAC/+T9w uT9X/Hd9rdEg04+Fze2IlJI9G+5U0AuQJc9iKBxU8xUxcX9U6owSw4VJkgd39r+c ecfAXnQODzVAaL1VuEpxORkzsg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:22 2026 by rpki-client