$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: uWcTMQhvkdUuan7H+aTMrFJZlBBvHUkptR5wPiLo28U= Subject key identifier: 96:4E:71:36:FE:C3:32:12:39:2C:E6:98:E4:1B:B2:5F:12:E9:D5:4B Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 296A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 28F0 Signing time: Tue 24 Mar 2026 15:33:06 +0000 Manifest this update: Tue 24 Mar 2026 15:33:06 +0000 Manifest next update: Tue 31 Mar 2026 15:33:06 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: kAKtiouy3brCmpP8wNIxks9kjRE1JcHgV/bk0JnA+rg=) 2: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: BwMxuupqh/OMHYtBvMUWFH7Ze3yTz/jm+1dQ6yhCink=) 3: 57D5BBF870F211F086293675C4F9AE02.roa (hash: zB6S1IxP8LdsA+Bexz8gZWnUugvxT4EvfLg65W+P9ug=) 4: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: 8WQ5jrO/JsQ/EWqFraIhQFAlFnmywxhA6dmghU6aY4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10602 (0x296a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Mar 24 15:33:06 2026 GMT Not After : Mar 31 15:33:06 2026 GMT Subject: CN=69c2aeb2-d2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:6d:b1:1e:ef:63:6a:41:af:e6:fe:e4:53: ca:ea:4e:db:0d:c0:31:64:7b:0f:a7:ac:5b:83:70: 04:3f:a5:5d:76:c1:95:3b:78:a0:76:76:79:67:c0: fc:2c:98:80:af:52:f6:34:dc:cd:93:98:c2:2c:c6: 5f:1a:f6:4d:a0:2d:6a:49:12:f7:c1:58:3a:7d:5d: f5:15:3e:33:01:5e:bf:2e:5a:10:09:b2:b7:1d:61: af:5f:ef:70:db:84:62:7d:86:82:75:09:39:f6:11: e6:bf:6c:a6:68:6d:f2:0b:af:c3:d7:54:b1:ab:f6: e4:2a:4f:c3:f8:aa:b5:a3:2b:34:17:06:88:be:0b: a9:d3:0a:a7:16:05:68:22:f3:ba:2c:a3:52:a4:36: 6d:59:82:30:6e:97:4a:8a:f2:a2:97:ea:29:0d:26: 67:aa:20:39:ff:99:bc:30:96:94:3d:ef:89:42:69: a8:83:70:58:88:bc:aa:f9:8b:60:f9:31:c5:08:58: 13:43:f6:74:bd:74:26:3d:62:1d:e9:09:ec:c1:97: 7f:dd:6d:fe:2b:ac:74:9f:1f:25:7d:f4:6c:27:cc: 04:f6:52:18:71:be:fa:75:54:4e:6a:dd:6d:4c:df: 6e:89:36:12:e7:b5:cf:51:3e:23:eb:aa:f1:66:8b: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:71:36:FE:C3:32:12:39:2C:E6:98:E4:1B:B2:5F:12:E9:D5:4B X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6c:85:b0:52:41:8d:38:37:85:ef:aa:4c:d5:ad:4c:de:6a: ec:94:f3:3b:1f:3d:f5:18:20:a2:22:0c:a3:51:91:72:7f:4f: f5:32:d3:10:46:ce:b7:72:f4:81:b3:00:7c:ae:0a:a2:8a:a1: 2b:ad:a1:ad:c2:48:1c:0c:61:57:97:84:b5:cf:28:7e:7e:f3: 2d:72:44:07:b9:2c:b4:cb:74:35:fc:3b:1c:93:99:cf:59:15: 8a:12:3d:23:3a:d3:36:a7:d0:f7:3a:e1:a1:5f:17:46:b7:a7: 03:f9:d7:09:d5:5f:d8:b1:11:52:7f:74:13:a3:0d:bb:93:2d: 2f:ce:4b:2c:36:84:4b:3a:c1:7d:b8:c9:8c:5a:cb:81:3d:78: 06:87:27:8d:47:ec:a8:20:48:01:43:9e:6d:66:04:0a:fe:36: 64:d1:a9:3c:b2:a6:e4:5f:79:8e:f9:d4:1a:f9:08:7e:54:8c: 83:43:11:cf:37:d1:ed:89:75:6a:0d:85:48:58:66:19:b0:e8: ae:ca:8e:f0:4d:b1:5b:aa:5b:0d:26:fb:82:7f:71:8a:10:ae: ee:e1:d1:ef:1d:38:98:0d:6b:6e:82:52:f7:3f:4b:1c:02:2a: 36:ef:e2:e0:1c:18:78:b7:07:b4:94:e0:80:a2:9d:55:7a:87: 4e:a3:cc:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwMzI0MTUzMzA2WhcNMjYwMzMxMTUzMzA2WjAYMRYwFAYD VQQDEw02OWMyYWViMi1kMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlltsR7vY2pBr+b+5FPK6k7bDcAxZHsPp6xbg3AEP6VddsGVO3igdnZ5Z8D8 LJiAr1L2NNzNk5jCLMZfGvZNoC1qSRL3wVg6fV31FT4zAV6/LloQCbK3HWGvX+9w 24RifYaCdQk59hHmv2ymaG3yC6/D11Sxq/bkKk/D+Kq1oys0FwaIvgup0wqnFgVo IvO6LKNSpDZtWYIwbpdKivKil+opDSZnqiA5/5m8MJaUPe+JQmmog3BYiLyq+Ytg +THFCFgTQ/Z0vXQmPWId6QnswZd/3W3+K6x0nx8lffRsJ8wE9lIYcb76dVROat1t TN9uiTYS57XPUT4j66rxZos4GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZOcTb+ wzISOSzmmOQbsl8S6dVLMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG2yFsFJBjTg3he+qTNWtTN5q7JTzOx899RggoiIMo1GRcn9P9TLTEEbOt3L0 gbMAfK4KooqhK62hrcJIHAxhV5eEtc8ofn7zLXJEB7kstMt0Nfw7HJOZz1kVihI9 IzrTNqfQ9zrhoV8XRrenA/nXCdVf2LERUn90E6MNu5MtL85LLDaESzrBfbjJjFrL gT14BocnjUfsqCBIAUOebWYECv42ZNGpPLKm5F95jvnUGvkIflSMg0MRzzfR7Yl1 ag2FSFhmGbDorsqO8E2xW6pbDSb7gn9xihCu7uHR7x04mA1rboJS9z9LHAIqNu/i 4BwYeLcHtJTggKKdVXqHTqPMJA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:08 2026 by rpki-client