$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: rNso8Nbx+foQNtQA92wLoXRz90E0d43gRDzUCAw4Qck= Subject key identifier: D6:72:A7:7B:53:BE:A3:1C:71:89:92:E0:F2:56:6C:4D:45:DA:07:96 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 040D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 03FB Signing time: Fri 27 Mar 2026 00:14:48 +0000 Manifest this update: Fri 27 Mar 2026 00:14:48 +0000 Manifest next update: Fri 03 Apr 2026 00:14:48 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: 71gIGfsOSodQ3S9JSTNFOpZYfJkAYBVMhDIpWr9NkBk=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: SWcdkZCR9aXBAKCHLOpDQ/w4c30vCytihBZ+pt87TXA=) 3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: coFqgEy/GfsHGfK/VEtTVnI0ZqJ2SsX074vbNTT8fEE=) 4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: LLqzzzWvO8ImDPnE9xtHvAoTCd4N7lReci7XNB8QRDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Validity Not Before: Mar 27 00:14:48 2026 GMT Not After : Apr 3 00:14:48 2026 GMT Subject: CN=69c5cbf8-3e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:ed:6f:8c:7d:e6:37:96:64:bf:41:6d:4b: 31:d2:79:5b:12:7b:0e:01:4b:a7:64:1b:45:de:5e: cc:56:3f:f6:35:44:7e:6a:36:64:31:02:1f:55:49: d0:b2:cb:9f:c2:aa:e4:c3:32:1b:bf:5f:b5:7b:e3: 8a:51:ec:bc:1f:19:79:86:46:df:b5:73:2e:6d:b5: 8e:77:5a:a4:ed:59:aa:1b:34:9d:c5:de:66:0b:2c: e1:73:de:00:f3:99:1f:62:0e:df:d3:3a:8c:63:63: c9:d1:57:e8:76:9e:75:bd:4b:88:89:43:68:a3:7f: a0:96:e3:e5:20:59:75:62:c6:b7:0e:41:49:6e:ee: c5:55:8a:d9:7d:67:6c:13:b1:d9:8d:1a:fa:01:42: f3:cf:60:fd:1f:0f:09:ad:0b:a7:4e:83:ce:c8:c4: d6:62:08:09:ae:00:f3:16:f7:97:38:77:cd:38:18: ea:64:91:36:10:2e:19:7f:ee:68:a9:8e:90:72:16: 75:c0:4c:a1:a8:25:eb:ba:41:cb:db:ad:d2:a8:ac: 9a:5e:7c:80:23:48:46:73:b3:2f:89:58:42:ef:5b: c2:4e:b8:a2:6c:54:b5:a2:b6:7e:0f:40:e9:60:ab: 22:ed:94:0b:84:69:3f:1e:21:d8:ad:5d:8f:0d:f3: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:A7:7B:53:BE:A3:1C:71:89:92:E0:F2:56:6C:4D:45:DA:07:96 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:99:56:39:ff:1b:d3:47:fd:51:88:0b:e7:85:75:1c:c7: 65:43:41:47:93:6c:d2:2f:19:14:20:e4:34:b6:3e:4e:ee:9a: 47:5d:35:c6:e0:85:f3:b9:40:1a:49:3f:76:fa:0c:05:1d:c3: 8c:9d:42:37:d4:47:7f:1d:93:36:9a:36:55:e2:cb:c1:d2:e3: 32:07:fe:84:53:51:28:4e:fb:32:2b:4b:98:0d:4e:6c:e4:14: ee:ca:e5:d2:b1:d9:40:27:21:d4:92:1a:96:3f:47:8f:f5:6c: 80:83:37:f5:11:6f:b8:b0:d4:8e:9f:f1:7a:98:bf:b0:79:a3: be:71:a9:da:1a:6b:13:60:1d:d8:c1:cf:19:9e:f0:1e:77:8e: b7:50:6b:5e:66:6b:3d:52:8d:c2:5c:c5:f0:b3:98:ce:3d:75: a0:fc:ba:0c:ba:9d:99:d0:0b:85:e7:7b:ce:39:f0:b7:91:90: d8:c6:02:e9:01:0b:92:60:b3:60:ee:56:9d:10:f5:b4:88:5d: 0e:4b:25:df:08:10:6f:d2:36:15:67:5f:10:4a:c1:28:eb:50: a4:ca:93:f9:1c:66:bd:78:ad:ed:bf:be:45:d1:a0:f1:c5:48: a5:32:ac:77:1a:c4:85:ab:e6:71:08:8b:18:10:c1:b0:b1:68: ba:13:91:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjYwMzI3MDAxNDQ4WhcNMjYwNDAzMDAxNDQ4WjAYMRYwFAYD VQQDEw02OWM1Y2JmOC0zZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2Dtb4x95jeWZL9BbUsx0nlbEnsOAUunZBtF3l7MVj/2NUR+ajZkMQIfVUnQ ssufwqrkwzIbv1+1e+OKUey8Hxl5hkbftXMubbWOd1qk7VmqGzSdxd5mCyzhc94A 85kfYg7f0zqMY2PJ0Vfodp51vUuIiUNoo3+gluPlIFl1Ysa3DkFJbu7FVYrZfWds E7HZjRr6AULzz2D9Hw8JrQunToPOyMTWYggJrgDzFveXOHfNOBjqZJE2EC4Zf+5o qY6QchZ1wEyhqCXrukHL263SqKyaXnyAI0hGc7MviVhC71vCTriibFS1orZ+D0Dp YKsi7ZQLhGk/HiHYrV2PDfO+9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZyp3tT vqMccYmS4PJWbE1F2geWMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPIaZVjn/G9NH/VGIC+eFdRzHZUNBR5Ns0i8ZFCDkNLY+Tu6aR101xuCF87lA Gkk/dvoMBR3DjJ1CN9RHfx2TNpo2VeLLwdLjMgf+hFNRKE77MitLmA1ObOQU7srl 0rHZQCch1JIalj9Hj/VsgIM39RFvuLDUjp/xepi/sHmjvnGp2hprE2Ad2MHPGZ7w HneOt1BrXmZrPVKNwlzF8LOYzj11oPy6DLqdmdALhed7zjnwt5GQ2MYC6QELkmCz YO5WnRD1tIhdDksl3wgQb9I2FWdfEErBKOtQpMqT+RxmvXit7b++RdGg8cVIpTKs dxrEhavmcQiLGBDBsLFouhORDg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:37:14 2026 by rpki-client