$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft File: HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json) Hash identifier: hTrwzmX/wYXSB1thxcg1y0y6U23iVSeH3KOZL8Ex5Bc= Subject key identifier: 6A:12:7B:2F:CA:5A:A4:B2:E6:EC:31:B3:13:EA:0E:2B:1A:38:FC:C4 Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF Certificate issuer: /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft Manifest number: 39 Signing time: Tue 24 Mar 2026 22:46:30 +0000 Manifest this update: Tue 24 Mar 2026 22:46:29 +0000 Manifest next update: Tue 31 Mar 2026 22:46:29 +0000 Files and hashes: 1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: h4HjqCNN56tw+6EeFVRILlE/MChZNHxLxwkgoU2lrdk=) 2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: 3Ryg9YhZzhWtLdmGB2zMXGRfJMx1B4heNB2vwivVjMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF Validity Not Before: Mar 24 22:46:29 2026 GMT Not After : Mar 31 22:46:29 2026 GMT Subject: CN=69c31446-d4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:2f:e6:ef:ea:98:d9:b1:1b:eb:3b:81:47: fa:43:8c:4a:f9:32:55:c5:0f:02:e7:c7:7f:73:5e: 64:f0:08:56:a4:50:fc:b3:54:6f:b4:c4:3d:c2:8d: 79:51:67:d2:0e:ec:2f:d8:09:6a:3d:f5:15:6d:09: 25:42:48:1a:7e:eb:d9:10:b3:21:9a:be:13:0d:31: 75:bc:d3:9c:d1:bc:21:19:c2:a3:9e:d9:07:82:46: fc:7a:78:01:5d:31:e9:dc:2c:c2:e3:dc:ce:4c:f0: dc:57:a3:4b:55:37:13:b8:fc:c5:b4:f4:70:8d:a5: 96:45:4c:db:48:3e:43:db:ac:1f:e5:a3:a9:a3:5b: 2d:f9:8e:dc:64:5a:e7:49:ce:a7:18:ad:af:d8:74: c3:1b:13:11:6c:9a:7c:1d:b9:3d:e5:d9:fe:6c:ec: 84:db:04:5c:74:af:89:9c:d7:8d:c8:67:be:1a:06: c6:c2:ae:0f:5d:f7:14:6c:f3:9e:3a:f0:39:21:de: be:65:79:a0:6d:f0:4c:9f:2d:6b:9b:c5:3a:3e:5e: da:3c:db:2b:e7:e3:29:2b:2d:3e:91:5d:c8:5b:7a: 5d:3a:38:2f:34:0e:13:b0:56:63:be:ae:62:c3:ba: 1a:cc:c7:c1:af:50:fb:e9:98:f2:01:45:70:54:e3: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:7B:2F:CA:5A:A4:B2:E6:EC:31:B3:13:EA:0E:2B:1A:38:FC:C4 X509v3 Authority Key Identifier: keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:aa:2c:bc:bb:e3:82:ce:ec:89:81:c6:06:98:c7:7d:f5:0d: 60:89:03:9d:29:d5:ce:04:ab:b8:e7:f7:3b:c3:15:57:e1:25: 01:1e:2f:8b:f1:e8:6b:2d:e9:8d:0b:49:d9:a5:c3:aa:d4:b2: f3:7a:4a:26:13:cb:8f:8e:7b:22:0c:b7:05:b9:da:c7:c4:57: e3:74:45:38:bc:7c:41:60:50:e6:90:df:5d:40:67:57:59:4d: 9c:75:37:e9:c4:87:c0:d8:6c:64:72:35:3e:d0:b2:9a:c8:e4: 67:5b:dd:49:a1:f3:80:d2:79:2b:93:fd:e7:c6:a9:30:f9:ce: 25:98:53:90:7e:5b:c7:eb:b4:84:44:7f:c1:60:b9:93:d9:0d: 81:cf:db:5c:14:9f:c8:7c:b7:47:fd:3e:06:a1:27:e5:37:31: d3:97:f6:b5:f2:67:c2:c3:c7:d9:b1:dc:3c:a5:7d:bc:57:d3: 09:12:b2:66:a0:40:b4:a9:c5:1e:d6:5f:58:7a:88:ef:ce:86: fd:32:c2:fb:2c:9c:3b:83:86:6a:27:e6:75:93:28:09:cb:43: 98:9d:0b:9e:5e:2d:26:db:e4:bc:d9:c7:f2:98:49:a1:34:47: 88:68:e3:b4:e9:b7:7b:2c:5f:af:6f:dd:fb:23:15:22:fa:20: 0a:c9:b6:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzgxQzExMC8GA1UEBRMoMUM2RkYzRUMwOTgyOTRCNDJEOTc5RjI1QjY5NjA1OTIz RTFDQ0VFRjAeFw0yNjAzMjQyMjQ2MjlaFw0yNjAzMzEyMjQ2MjlaMBgxFjAUBgNV BAMTDTY5YzMxNDQ2LWQ0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Xy/m7+qY2bEb6zuBR/pDjEr5MlXFDwLnx39zXmTwCFakUPyzVG+0xD3CjXlR Z9IO7C/YCWo99RVtCSVCSBp+69kQsyGavhMNMXW805zRvCEZwqOe2QeCRvx6eAFd MencLMLj3M5M8NxXo0tVNxO4/MW09HCNpZZFTNtIPkPbrB/lo6mjWy35jtxkWudJ zqcYra/YdMMbExFsmnwduT3l2f5s7ITbBFx0r4mc143IZ74aBsbCrg9d9xRs8546 8Dkh3r5leaBt8EyfLWubxTo+Xto82yvn4ykrLT6RXchbel06OC80DhOwVmO+rmLD uhrMx8GvUPvpmPIBRXBU41Q/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUahJ7L8pa pLLm7DGzE+oOKxo4/MQwHwYDVR0jBBgwFoAUHG/z7AmClLQtl58ltpYFkj4czu8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDODFDLzg2MjBGQ0E2REZD QTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1DbExRdGw1OGx0cFlGa2o0Y3p1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEdfejdBbUNsTFF0bDU4bHRwWUZrajRjenU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD ODFDLzg2MjBGQ0E2REZDQTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1DbExR dGw1OGx0cFlGa2o0Y3p1OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDLqiy8u+OCzuyJgcYGmMd99Q1giQOdKdXOBKu45/c7wxVX4SUBHi+L8ehrLemN C0nZpcOq1LLzekomE8uPjnsiDLcFudrHxFfjdEU4vHxBYFDmkN9dQGdXWU2cdTfp xIfA2GxkcjU+0LKayORnW91JofOA0nkrk/3nxqkw+c4lmFOQflvH67SERH/BYLmT 2Q2Bz9tcFJ/IfLdH/T4GoSflNzHTl/a18mfCw8fZsdw8pX28V9MJErJmoEC0qcUe 1l9Yeojvzob9MsL7LJw7g4ZqJ+Z1kygJy0OYnQueXi0m2+S82cfymEmhNEeIaOO0 6bd7LF+vb937IxUi+iAKybYN -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:57 2026 by rpki-client