$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: NrjXVyAsJJplZZXwCXedvLcyr6Xbs0pn5kO0GRydhvM= Subject key identifier: B4:0C:E4:C1:C2:F5:60:0E:55:8C:C1:B8:66:94:22:38:E8:C9:4C:EB Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 0275 Signing time: Wed 25 Mar 2026 01:31:44 +0000 Manifest this update: Wed 25 Mar 2026 01:31:44 +0000 Manifest next update: Wed 01 Apr 2026 01:31:44 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: X8IJe/qtKNnBbtUc2CikkOQB9rDVKYRW9ym0TBq8o+k=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Mar 25 01:31:44 2026 GMT Not After : Apr 1 01:31:44 2026 GMT Subject: CN=69c33b00-05f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:8d:da:c6:10:b1:8f:47:49:4f:0b:3a:ca: 0f:2d:77:ef:21:c2:f6:76:91:1c:fe:4b:65:9a:6e: 2a:9c:29:f7:75:61:ef:fe:e7:0b:9e:1a:ed:67:06: d3:67:9f:99:ab:3f:7e:11:eb:03:41:50:52:91:35: c1:8f:58:a9:6a:b3:0d:09:f0:51:20:6f:39:68:40: a6:c4:e0:76:b8:02:1e:b2:b0:c2:20:22:c5:7d:ff: cd:5f:19:bf:8d:ba:f5:a6:63:fc:ee:dc:98:c6:a0: 04:8d:17:81:94:e6:68:26:02:1e:73:4c:d5:d2:22: cf:b8:b2:9b:71:53:00:d6:dd:16:8a:97:b7:63:f4: 95:9f:69:05:6c:75:a7:68:88:1f:09:57:de:f4:04: ba:3b:45:d5:69:1a:b4:ce:01:e4:86:b9:2d:13:54: fa:38:81:c3:05:63:e8:2c:5b:76:31:2f:84:84:13: f5:f4:c3:ee:4b:f2:f4:32:a6:d7:8e:cf:b4:40:6b: 0a:90:e1:e0:cf:58:e9:d2:3b:f7:6c:72:39:08:5d: 0a:06:a6:87:d9:52:a3:96:2e:c7:04:9a:a2:ca:46: e6:91:95:7c:2a:67:71:42:7f:57:fb:e5:b1:13:93: e2:f0:41:4b:ae:a1:5a:2c:52:e7:37:9c:a9:a6:c6: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:E4:C1:C2:F5:60:0E:55:8C:C1:B8:66:94:22:38:E8:C9:4C:EB X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:60:91:d6:02:da:9b:41:0c:53:3c:70:56:12:cf:fd:99:38: e2:c2:39:63:2f:14:0a:a9:1b:74:55:c2:4e:90:0a:cd:36:02: 0f:0d:e1:c5:bb:06:90:69:e0:19:de:64:36:81:0b:bf:55:0b: ff:b5:56:4a:8f:0c:18:7f:5b:55:20:78:19:7f:59:a8:db:d5: a2:04:65:09:93:0f:82:dc:c5:da:6a:50:47:05:ce:9a:8a:b1: 50:03:d3:a1:f7:95:7a:2f:db:a6:4b:79:aa:09:12:76:29:83: b1:40:6f:d6:af:7d:be:24:17:ae:df:d5:54:40:93:36:1f:c1: a9:f7:7d:9e:4c:da:10:5a:00:af:02:25:74:33:28:f8:16:4b: 06:ef:41:76:23:a0:5e:d9:b9:b7:2b:89:5e:44:a8:53:cf:62: a5:13:c2:d2:dc:de:ec:f7:60:b3:1d:b4:e4:f5:f7:f5:b7:44: b6:9c:c0:e1:fd:ac:76:6a:64:26:32:2a:ad:f1:52:1a:0b:d2: da:fb:05:ab:8b:3f:6b:d4:b8:2c:8a:ea:8d:2f:00:d4:f7:d4: 14:7a:3d:02:e4:46:0d:19:16:dd:e5:db:69:e0:23:c0:b8:56: 10:32:f4:90:dc:c9:ce:50:ca:58:3f:cf:53:0a:bf:b0:db:e0: 49:44:59:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjYwMzI1MDEzMTQ0WhcNMjYwNDAxMDEzMTQ0WjAYMRYwFAYD VQQDEw02OWMzM2IwMC0wNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa+N2sYQsY9HSU8LOsoPLXfvIcL2dpEc/ktlmm4qnCn3dWHv/ucLnhrtZwbT Z5+Zqz9+EesDQVBSkTXBj1iparMNCfBRIG85aECmxOB2uAIesrDCICLFff/NXxm/ jbr1pmP87tyYxqAEjReBlOZoJgIec0zV0iLPuLKbcVMA1t0Wipe3Y/SVn2kFbHWn aIgfCVfe9AS6O0XVaRq0zgHkhrktE1T6OIHDBWPoLFt2MS+EhBP19MPuS/L0MqbX js+0QGsKkOHgz1jp0jv3bHI5CF0KBqaH2VKjli7HBJqiykbmkZV8KmdxQn9X++Wx E5Pi8EFLrqFaLFLnN5yppsYcAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQM5MHC 9WAOVYzBuGaUIjjoyUzrMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWCR1gLam0EMUzxwVhLP/Zk44sI5Yy8UCqkbdFXCTpAKzTYCDw3hxbsGkGng Gd5kNoELv1UL/7VWSo8MGH9bVSB4GX9ZqNvVogRlCZMPgtzF2mpQRwXOmoqxUAPT ofeVei/bpkt5qgkSdimDsUBv1q99viQXrt/VVECTNh/Bqfd9nkzaEFoArwIldDMo +BZLBu9BdiOgXtm5tyuJXkSoU89ipRPC0tze7Pdgsx205PX39bdEtpzA4f2sdmpk JjIqrfFSGgvS2vsFq4s/a9S4LIrqjS8A1PfUFHo9AuRGDRkW3eXbaeAjwLhWEDL0 kNzJzlDKWD/PUwq/sNvgSURZbg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:03 2026 by rpki-client