$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: ZV9A0MgUYXbBg67qHExma2+ve3NTbpskEQX3z34NZJE= Subject key identifier: 3C:90:04:F0:F3:21:20:50:08:02:C8:F2:36:B1:F4:1A:72:55:C8:22 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 021C Signing time: Wed 25 Mar 2026 02:14:39 +0000 Manifest this update: Wed 25 Mar 2026 02:14:39 +0000 Manifest next update: Wed 01 Apr 2026 02:14:39 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: 1FEDWEBS7PDWSTHFBcD72/onHRqveeSTx3OeM63smUU=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: gwP3PNE674NeJVzpcX/6dV+VmggMeTrL/+BFEHoqdPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Mar 25 02:14:39 2026 GMT Not After : Apr 1 02:14:39 2026 GMT Subject: CN=69c3450f-82c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:b4:0c:75:ec:e9:f7:73:48:d8:ac:08:c4: 5a:9f:c4:09:b3:4a:29:0c:2f:7d:8b:6a:a0:03:2f: b6:8c:09:9f:e7:a0:84:21:7d:4b:67:5e:b9:04:bd: 98:7b:12:b6:2c:af:9b:d6:30:27:3a:ba:49:ee:d0: 3b:f3:f3:ce:a2:7f:52:6f:aa:bb:2c:64:c3:f5:83: 14:be:e4:76:a8:06:f2:eb:9e:50:67:b2:13:56:d8: 50:37:39:6b:6c:8b:58:17:85:dd:25:34:7e:7e:90: 3e:4b:32:d1:d6:20:9d:8f:cc:c2:07:cf:62:32:14: 40:42:e5:e7:87:e1:da:3a:55:13:2e:54:83:b7:d9: 19:7e:86:5f:e2:c9:be:f0:5f:63:2e:a9:f0:ea:bf: cd:97:4a:d4:66:1b:a2:d1:6a:f4:41:78:5f:15:7f: ca:35:ec:2e:9d:19:4c:1f:ce:c8:37:b1:48:65:e7: c7:10:1f:07:cc:bf:40:74:e3:a0:b4:59:f7:20:b3: 29:d0:cf:07:ce:dd:97:4d:c1:11:27:e5:9f:7d:a8: 5f:dc:64:2b:64:5c:96:fb:5f:5d:1a:2d:9e:76:04: 6f:1c:b0:bc:61:ec:44:2e:19:f8:56:62:32:c3:fe: 5e:6c:2d:b6:02:3b:e1:e8:88:ef:a1:bd:2c:e4:5a: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:90:04:F0:F3:21:20:50:08:02:C8:F2:36:B1:F4:1A:72:55:C8:22 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f9:36:07:ac:4a:57:57:18:72:e1:ec:63:f3:f4:0e:57:61: ac:38:a0:f2:f5:d9:8b:cc:09:79:c4:8e:ac:14:22:b5:c7:cf: 43:2b:ca:b5:d9:5b:ee:4f:db:54:c9:2d:80:86:39:c6:11:23: fc:0b:7b:a9:1b:86:01:3a:d6:67:d1:f7:22:2c:c6:35:e4:bb: 56:59:37:c4:53:97:4c:41:4e:d3:28:f8:50:57:47:68:0d:ad: 1e:56:60:b4:54:30:36:ae:d8:93:92:4a:88:18:65:69:ec:a6: 3d:20:c6:10:b2:88:94:38:a3:18:7c:e4:a8:7a:be:f8:ab:2a: 68:20:04:c4:9c:7a:18:de:ec:33:6f:f8:57:9d:b7:6b:c6:b8: f1:15:2a:08:4a:ef:e8:a8:22:9f:ec:05:4d:04:de:11:d5:00: 37:73:f8:e9:58:87:d7:e2:90:55:f1:39:39:3f:49:75:c8:48: 55:15:e1:e8:2e:7e:65:1d:87:d6:80:4c:a5:be:82:c3:16:8a: 3d:ee:5e:38:c6:ad:4a:61:8b:7b:d9:e1:1e:9b:79:2f:53:36: a3:44:b7:99:2e:da:61:1b:b7:11:1c:1b:c6:2d:93:9f:a6:3f: 9a:49:8a:36:5e:1e:f6:9a:f2:02:f5:bc:2d:e0:d5:0f:e3:ce: b0:71:e9:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwMzI1MDIxNDM5WhcNMjYwNDAxMDIxNDM5WjAYMRYwFAYD VQQDEw02OWMzNDUwZi04MmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvm0DHXs6fdzSNisCMRan8QJs0opDC99i2qgAy+2jAmf56CEIX1LZ165BL2Y exK2LK+b1jAnOrpJ7tA78/POon9Sb6q7LGTD9YMUvuR2qAby655QZ7ITVthQNzlr bItYF4XdJTR+fpA+SzLR1iCdj8zCB89iMhRAQuXnh+HaOlUTLlSDt9kZfoZf4sm+ 8F9jLqnw6r/Nl0rUZhui0Wr0QXhfFX/KNewunRlMH87IN7FIZefHEB8HzL9AdOOg tFn3ILMp0M8Hzt2XTcERJ+Wffahf3GQrZFyW+19dGi2edgRvHLC8YexELhn4VmIy w/5ebC22Ajvh6Ijvob0s5FoIUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyQBPDz ISBQCALI8jax9BpyVcgiMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx/k2B6xKV1cYcuHsY/P0DldhrDig8vXZi8wJecSOrBQitcfPQyvKtdlb7k/b VMktgIY5xhEj/At7qRuGATrWZ9H3IizGNeS7Vlk3xFOXTEFO0yj4UFdHaA2tHlZg tFQwNq7Yk5JKiBhlaeymPSDGELKIlDijGHzkqHq++KsqaCAExJx6GN7sM2/4V523 a8a48RUqCErv6Kgin+wFTQTeEdUAN3P46ViH1+KQVfE5OT9JdchIVRXh6C5+ZR2H 1oBMpb6CwxaKPe5eOMatSmGLe9nhHpt5L1M2o0S3mS7aYRu3ERwbxi2Tn6Y/mkmK Nl4e9pryAvW8LeDVD+POsHHp+w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:43 2026 by rpki-client