$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json) Hash identifier: 0ezoQzGmmyU9vQTrRi8guoT0BwpO2vP+eAnlc9Tyny8= Subject key identifier: 31:F6:AA:B9:1E:B7:86:DB:35:5E:F6:E7:0B:8B:C3:98:DE:D7:52:54 Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft Manifest number: 039E Signing time: Wed 25 Mar 2026 00:24:46 +0000 Manifest this update: Wed 25 Mar 2026 00:24:46 +0000 Manifest next update: Wed 01 Apr 2026 00:24:46 +0000 Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: 2+h0AHom99li8DFd1cNrmv/APKF04CqX5tF1EUgsXRc=) 2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: c0qyfD83hyONo6+1G1CUEMzQ2pdLQ0z+oznS7ZYnv00=) 3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: LpMINqQBEFkuA1byEZu7T97+uNUky1GB6uRwVs6OxeU=) 4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: MnIX1WivCHNfhFI9QSlsXBStCtmjtZcVcNfmwDTY4t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Mar 25 00:24:46 2026 GMT Not After : Apr 1 00:24:46 2026 GMT Subject: CN=69c32b4e-0516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:f0:01:18:7e:4a:5f:59:53:79:4f:25:d8: c0:c9:f5:a9:3c:e8:0a:52:15:0b:1d:12:b6:76:d9: 9e:a0:18:b0:b8:72:4a:f2:ba:3b:7e:c2:c2:a7:13: ee:97:d0:b6:53:03:27:bd:be:3b:58:b7:58:3b:eb: ff:b9:87:6d:42:56:c7:76:46:c1:e7:3a:0d:b4:ed: e1:bb:97:bc:45:be:b9:1a:7f:a2:ed:04:21:a9:16: 0d:aa:2d:c3:57:e8:b4:a1:2c:6c:6c:59:f9:d6:2a: 2d:12:52:b6:50:0c:c4:54:f4:53:98:eb:90:54:0e: 19:bd:66:ab:6f:a8:26:50:97:98:ef:48:0d:14:69: 8e:65:1d:3d:a8:d3:5a:ae:f4:06:d9:b6:be:e9:dc: 2d:74:07:4a:5b:45:f6:76:94:c9:d4:11:19:2e:de: b2:6a:f0:b6:ea:a0:60:02:6d:19:bb:d2:89:21:b2: 6d:bf:dd:33:df:5b:99:fe:71:25:f6:f1:99:56:28: 82:69:a0:dc:06:8c:99:8f:8a:d9:91:a1:21:7d:7d: b0:bd:e9:8d:ad:be:8e:d1:71:94:29:df:d1:25:ef: 53:ba:7f:21:f8:09:53:eb:a8:c0:78:8c:e4:5c:9b: c2:94:a9:84:a6:38:ec:fe:22:4b:68:ce:43:38:80: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F6:AA:B9:1E:B7:86:DB:35:5E:F6:E7:0B:8B:C3:98:DE:D7:52:54 X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:af:6e:a9:77:c4:f4:28:9b:69:1e:d1:c8:22:41:ab:e9:da: 8a:01:8d:50:26:e2:24:f8:60:0e:50:65:73:78:02:22:22:82: a6:62:71:bf:75:0d:16:80:13:10:c1:d6:94:e3:f7:dc:08:5e: 0c:06:fb:9c:45:9d:4c:72:bd:6d:c0:d4:50:29:1a:66:4a:77: b9:ae:0e:74:f7:86:cf:0d:e7:66:fe:86:2c:b0:a9:a4:f7:8c: 75:7e:02:77:8b:cb:e0:64:53:f7:4a:b1:95:d0:6f:63:15:7a: 7d:ae:48:f6:bf:50:90:5c:02:b2:bc:a9:57:88:31:9c:f1:d7: 69:dd:a5:5f:d6:ca:6b:a3:00:4f:aa:77:17:93:02:f1:90:41: 10:36:56:c1:3b:c4:61:ce:e7:63:90:06:ff:7e:36:8d:6d:bf: 68:11:12:f3:e6:b0:d5:c4:af:6c:b3:9f:6f:f3:cd:4c:cc:eb: c2:b5:60:f4:53:e8:c6:6e:b2:5a:a9:f2:c0:22:94:bd:f4:e0: 1d:65:b9:48:60:1f:4f:1d:94:35:8d:6a:ce:c7:9f:6a:b6:b2: da:b8:5d:46:05:67:74:f9:fc:65:03:6a:8b:ce:d6:ef:f5:5f: 9f:f9:89:e6:82:56:ea:4b:f0:2f:4e:13:48:28:16:41:af:8f: c3:33:0c:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjYwMzI1MDAyNDQ2WhcNMjYwNDAxMDAyNDQ2WjAYMRYwFAYD VQQDEw02OWMzMmI0ZS0wNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUDwARh+Sl9ZU3lPJdjAyfWpPOgKUhULHRK2dtmeoBiwuHJK8ro7fsLCpxPu l9C2UwMnvb47WLdYO+v/uYdtQlbHdkbB5zoNtO3hu5e8Rb65Gn+i7QQhqRYNqi3D V+i0oSxsbFn51iotElK2UAzEVPRTmOuQVA4ZvWarb6gmUJeY70gNFGmOZR09qNNa rvQG2ba+6dwtdAdKW0X2dpTJ1BEZLt6yavC26qBgAm0Zu9KJIbJtv90z31uZ/nEl 9vGZViiCaaDcBoyZj4rZkaEhfX2wvemNrb6O0XGUKd/RJe9Tun8h+AlT66jAeIzk XJvClKmEpjjs/iJLaM5DOIDANQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH2qrke t4bbNV725wuLw5je11JUMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAK9uqXfE9CibaR7RyCJBq+naigGNUCbiJPhgDlBlc3gCIiKCpmJxv3UNFoAT EMHWlOP33AheDAb7nEWdTHK9bcDUUCkaZkp3ua4OdPeGzw3nZv6GLLCppPeMdX4C d4vL4GRT90qxldBvYxV6fa5I9r9QkFwCsrypV4gxnPHXad2lX9bKa6MAT6p3F5MC 8ZBBEDZWwTvEYc7nY5AG/342jW2/aBES8+aw1cSvbLOfb/PNTMzrwrVg9FPoxm6y WqnywCKUvfTgHWW5SGAfTx2UNY1qzsefaray2rhdRgVndPn8ZQNqi87W7/Vfn/mJ 5oJW6kvwL04TSCgWQa+PwzMMNA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:28:57 2026 by rpki-client