$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: was/K5XSItkl6C9ioWCeqN0R9oF3o7Pwx6xlYdw3Cfc= Subject key identifier: 11:22:FB:94:81:89:AF:E5:3E:54:01:E8:90:0F:2A:4A:D0:AA:7B:F4 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 0194 Signing time: Fri 27 Mar 2026 03:52:12 +0000 Manifest this update: Fri 27 Mar 2026 03:52:11 +0000 Manifest next update: Fri 03 Apr 2026 03:52:11 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: 4pT3/4PuD33xjBGy/tVlhbE3kr7rwPSe9yJZ5twQMcQ=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: 1afV/Wp2zXvrGPdZywlVFm2mfGMyxkWyHsB9FTJiBqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Mar 27 03:52:11 2026 GMT Not After : Apr 3 03:52:11 2026 GMT Subject: CN=69c5feec-0287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:d0:b6:94:6f:40:b2:f0:45:b1:22:89:bf: ee:61:c2:f4:32:b1:61:d5:d4:8d:e5:cd:ab:0a:e4: dd:17:97:77:58:3c:87:40:2a:3d:86:88:54:63:9f: 5f:f7:d5:83:8e:71:d2:91:5a:9a:d0:31:37:df:e4: c6:e9:b4:42:41:9a:98:df:9d:58:59:73:2e:21:42: cc:54:cb:9a:b7:73:78:1e:35:b0:28:53:81:ac:8f: ca:ca:30:81:fc:b8:39:72:c6:90:8a:e8:a4:cb:ab: 19:d4:c2:39:e2:39:65:bb:66:b6:53:f6:f0:79:15: f6:6c:db:7a:21:62:0a:d1:67:e8:e0:dd:e5:f3:bf: 58:40:25:a0:21:b4:2c:97:c6:f1:7f:fc:85:74:48: b7:f0:c1:08:ed:22:9a:33:0a:c1:d9:ae:0b:46:5c: 29:20:7e:bc:58:5f:5a:74:4f:01:29:c2:95:1c:ae: 9b:56:0d:1a:21:8a:46:dd:78:11:4c:5e:dc:eb:1e: 62:c1:47:ac:d7:09:e0:78:b9:77:d9:f9:b9:25:0c: e0:d7:89:93:ba:5a:72:89:e7:57:84:03:9b:4b:37: a3:d2:d0:1f:ae:9a:f2:b3:3b:6d:c4:c1:c9:ea:fc: 21:af:4d:87:5d:1f:20:b8:a1:83:6d:fc:3f:19:28: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:FB:94:81:89:AF:E5:3E:54:01:E8:90:0F:2A:4A:D0:AA:7B:F4 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c0:2b:39:0e:76:5d:06:63:68:e5:e2:8b:db:36:2d:ba:de: 91:71:fa:b7:86:75:db:2c:26:b2:11:0b:73:c2:ba:20:61:85: e8:f3:3a:dc:49:c0:0a:ba:51:a0:d2:bf:ec:d4:ef:ce:13:16: 3d:da:3d:ff:90:0d:25:00:ae:9b:84:ab:6b:9e:53:93:4d:f4: 92:33:0b:12:d8:b4:e0:8f:69:49:55:9e:21:47:e9:93:51:44: 02:1d:40:da:f5:31:17:31:28:08:11:47:a4:e6:b8:d3:60:4c: 81:b4:fc:43:7d:02:27:de:95:49:76:12:f0:e7:7e:64:e6:6b: 20:60:9b:ca:7f:75:60:2f:73:ad:aa:d6:4a:4c:05:29:6a:82: 59:f8:f2:76:43:28:a1:56:74:2c:62:dc:eb:a6:de:0f:8c:91: 8b:45:d9:b6:0c:d6:50:2b:00:c5:72:30:8b:0d:bb:a5:d9:68: 0b:1b:a1:23:f3:dd:51:39:5a:a3:79:9b:22:45:f1:59:bd:c4: a7:f8:b7:cf:29:4d:8a:3a:5e:d7:53:b8:17:19:b1:c5:8b:a1: 73:88:07:4f:8e:e0:77:88:21:6f:e2:86:e2:34:72:7a:ce:61: 83:ca:bb:f1:15:55:5e:33:a2:64:8c:55:9b:88:59:85:17:51: e5:6a:74:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjYwMzI3MDM1MjExWhcNMjYwNDAzMDM1MjExWjAYMRYwFAYD VQQDEw02OWM1ZmVlYy0wMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLDQtpRvQLLwRbEiib/uYcL0MrFh1dSN5c2rCuTdF5d3WDyHQCo9hohUY59f 99WDjnHSkVqa0DE33+TG6bRCQZqY351YWXMuIULMVMuat3N4HjWwKFOBrI/KyjCB /Lg5csaQiuiky6sZ1MI54jllu2a2U/bweRX2bNt6IWIK0Wfo4N3l879YQCWgIbQs l8bxf/yFdEi38MEI7SKaMwrB2a4LRlwpIH68WF9adE8BKcKVHK6bVg0aIYpG3XgR TF7c6x5iwUes1wngeLl32fm5JQzg14mTulpyiedXhAObSzej0tAfrpryszttxMHJ 6vwhr02HXR8guKGDbfw/GSgYswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEi+5SB ia/lPlQB6JAPKkrQqnv0MB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtcArOQ52XQZjaOXii9s2LbrekXH6t4Z12ywmshELc8K6IGGF6PM63EnACrpR oNK/7NTvzhMWPdo9/5ANJQCum4Sra55Tk030kjMLEti04I9pSVWeIUfpk1FEAh1A 2vUxFzEoCBFHpOa402BMgbT8Q30CJ96VSXYS8Od+ZOZrIGCbyn91YC9zrarWSkwF KWqCWfjydkMooVZ0LGLc66beD4yRi0XZtgzWUCsAxXIwiw27pdloCxuhI/PdUTla o3mbIkXxWb3Ep/i3zylNijpe11O4FxmxxYuhc4gHT47gd4ghb+KG4jRyes5hg8q7 8RVVXjOiZIxVm4hZhRdR5Wp0Yg== -----END CERTIFICATE-----Generated at Fri Mar 27 08:16:20 2026 by rpki-client