$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: lH3NMzYzy/8ZIl4vDf0pccpB3ZdxLUJNxSLXfkGuy94= Subject key identifier: 2B:65:CF:3F:A0:C6:F5:5B:3E:F0:80:1E:1E:88:C0:97:FA:4B:1A:6F Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0C33 Signing time: Tue 24 Mar 2026 18:35:07 +0000 Manifest this update: Tue 24 Mar 2026 18:35:06 +0000 Manifest next update: Tue 31 Mar 2026 18:35:06 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: cBKOm+USycAEI1WmQp5nH38FT2HfcVMDj6nqMyqhnkY=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: AGJ3imo4fnyGAnxscjmKEoYw6azyeSOHkHTLOF2MKsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Mar 24 18:35:06 2026 GMT Not After : Mar 31 18:35:06 2026 GMT Subject: CN=69c2d95b-df72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:1d:d1:a6:45:e6:93:5e:68:b4:17:35:b1: c5:54:96:96:cf:2e:ba:82:f4:4c:90:a8:69:93:53: b1:df:c1:d9:e9:7f:a2:04:4d:b0:07:ac:ed:f1:d0: 51:c9:49:f0:64:2d:6b:04:a0:b2:18:5e:85:e4:29: d1:be:22:d0:87:aa:73:ed:d3:85:1d:5f:3a:45:89: 32:5d:d1:f1:d6:bf:77:19:e4:cc:8d:ab:75:77:ab: 7a:f0:2d:f8:0c:a3:71:60:ed:5f:2d:89:dd:ce:f9: c6:8a:96:24:e0:69:76:bf:06:45:cf:c2:95:6a:96: 2a:b3:e7:37:15:86:98:40:ee:84:26:60:1f:94:f1: 21:31:04:e1:cb:cd:c9:62:45:d3:8a:b1:70:9c:b5: f4:62:be:18:95:45:05:aa:f6:ca:ed:b1:9b:ce:3e: 98:dc:92:76:b1:cf:4a:19:4c:87:dd:5d:cf:a7:a7: 5c:a3:58:c3:ae:d6:86:62:e6:c6:fa:75:59:f7:33: f1:dd:ad:a2:68:4e:9d:46:bf:81:2c:91:79:7f:a3: 3a:ab:37:39:1b:ad:b0:4b:95:8d:7f:27:72:a1:33: ba:24:85:24:83:dc:bf:91:b8:a7:b6:5e:f1:02:fd: c6:4c:cb:6a:f3:cb:8e:4c:b8:b8:e7:e3:e8:97:4c: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:65:CF:3F:A0:C6:F5:5B:3E:F0:80:1E:1E:88:C0:97:FA:4B:1A:6F X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:f1:ea:01:1f:8a:7f:17:19:f5:fe:ea:c3:99:81:81:64: 1d:10:6c:76:52:40:df:4b:c7:d2:94:78:92:84:ec:cc:1c:39: 0c:a6:ab:1b:a8:aa:ef:2a:7b:f5:97:86:59:fb:2a:61:f9:e2: 23:eb:aa:c6:02:60:8a:f7:e1:39:02:98:86:20:4f:39:72:07: 02:60:ee:ca:f9:c2:6c:60:26:7f:58:43:5b:44:cf:1d:f0:08: e0:fb:55:39:6d:cc:51:80:ba:09:c8:18:09:4a:a2:39:7d:bb: da:9d:c9:4f:9d:2f:b5:ae:6a:ea:80:47:b8:80:6d:d0:00:42: 06:5b:ec:2d:c4:cb:c2:55:c5:fe:84:34:e8:d9:45:ca:b8:53: 3c:77:fd:f0:d0:b5:b2:a5:53:0a:e1:cf:da:11:6f:a0:5e:d5: b8:70:db:9d:72:f4:29:08:b2:3f:15:6d:d5:11:30:38:16:1c: 5c:50:65:89:1c:ed:9d:7d:93:e2:1d:ac:45:6c:7b:5c:cb:04: 0c:65:5f:da:30:27:b7:c0:af:88:50:3d:c5:9d:1b:6e:6c:3c: b3:e6:55:39:4f:74:e1:36:ed:2f:98:4e:12:72:bb:e7:8e:6f: 1c:68:63:59:22:e7:1e:86:1e:66:aa:bb:00:b5:55:40:17:e9: 8a:90:2a:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjYwMzI0MTgzNTA2WhcNMjYwMzMxMTgzNTA2WjAYMRYwFAYD VQQDEw02OWMyZDk1Yi1kZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIEd0aZF5pNeaLQXNbHFVJaWzy66gvRMkKhpk1Ox38HZ6X+iBE2wB6zt8dBR yUnwZC1rBKCyGF6F5CnRviLQh6pz7dOFHV86RYkyXdHx1r93GeTMjat1d6t68C34 DKNxYO1fLYndzvnGipYk4Gl2vwZFz8KVapYqs+c3FYaYQO6EJmAflPEhMQThy83J YkXTirFwnLX0Yr4YlUUFqvbK7bGbzj6Y3JJ2sc9KGUyH3V3Pp6dco1jDrtaGYubG +nVZ9zPx3a2iaE6dRr+BLJF5f6M6qzc5G62wS5WNfydyoTO6JIUkg9y/kbintl7x Av3GTMtq88uOTLi45+Pol0yshQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtlzz+g xvVbPvCAHh6IwJf6SxpvMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRfx6gEfin8XGfX+6sOZgYFkHRBsdlJA30vH0pR4koTszBw5DKarG6iq7yp7 9ZeGWfsqYfniI+uqxgJgivfhOQKYhiBPOXIHAmDuyvnCbGAmf1hDW0TPHfAI4PtV OW3MUYC6CcgYCUqiOX272p3JT50vta5q6oBHuIBt0ABCBlvsLcTLwlXF/oQ06NlF yrhTPHf98NC1sqVTCuHP2hFvoF7VuHDbnXL0KQiyPxVt1REwOBYcXFBliRztnX2T 4h2sRWx7XMsEDGVf2jAnt8CviFA9xZ0bbmw8s+ZVOU904TbtL5hOEnK7545vHGhj WSLnHoYeZqq7ALVVQBfpipAq1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:49 2026 by rpki-client