$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: Gx9LGWMRaMSNgnqMTsvJ5Y3vpvgfNYY/6RseDuNxY+E= Subject key identifier: F2:9F:C8:45:25:CB:78:B3:73:95:EF:52:1F:66:68:50:B6:0F:EC:9A Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0ABD Signing time: Tue 24 Mar 2026 19:26:34 +0000 Manifest this update: Tue 24 Mar 2026 19:26:33 +0000 Manifest next update: Tue 31 Mar 2026 19:26:33 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: HHkn2/FWIMBHpWNTv42UBnz2O88R4ap6ia3zPRKdwTQ=) 2: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=) 3: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=) 4: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=) 5: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=) 6: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=) 7: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=) 8: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=) 9: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Mar 24 19:26:33 2026 GMT Not After : Mar 31 19:26:33 2026 GMT Subject: CN=69c2e569-44a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:30:5a:08:73:d9:02:d8:03:30:ca:13:60: f1:e4:d4:e1:e6:fc:0b:4f:cc:96:19:92:ca:f9:2b: c8:96:03:b6:2b:2e:12:73:cc:e2:81:28:ef:61:6d: e4:0a:d3:0f:68:04:1a:0f:9a:dc:69:f7:87:e2:e9: d5:01:2c:dc:1f:68:26:61:1d:00:21:e3:e2:40:99: e0:4f:ba:07:32:7a:1f:a9:f2:17:ef:9f:61:e1:b7: 6f:1c:49:68:a7:e1:5a:99:54:f9:ba:71:3a:21:b9: 56:16:19:60:7f:4a:81:c6:a1:1f:85:8f:fb:3a:e0: 4b:60:5c:66:4a:4c:27:86:0c:c0:18:56:dd:f6:5c: ed:48:bd:4a:b7:78:2e:10:e1:d8:5e:97:94:93:ea: dd:87:5e:8e:cc:06:f8:9c:85:18:40:9e:e0:f5:fa: 91:b0:eb:f0:2f:d0:c9:66:c3:a2:16:68:8d:53:66: 21:17:76:fc:b9:79:bc:e3:c5:e7:e2:3d:6c:ea:e0: 60:1b:bf:81:64:1a:a4:0c:cb:36:d4:5b:e1:81:22: 71:1c:16:dd:8c:46:96:83:f7:cd:88:ed:af:7c:b3: b2:f4:7a:0d:3a:f6:1b:55:21:22:1b:b9:94:29:28: 7e:a7:a6:ed:ab:fa:31:7b:0e:68:c4:c1:63:f1:ff: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:C8:45:25:CB:78:B3:73:95:EF:52:1F:66:68:50:B6:0F:EC:9A X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:c6:d9:88:43:18:c9:86:d8:3a:f1:0c:e0:15:9d:8f:c7: 39:4a:1c:ae:a6:9e:bc:30:df:6d:b2:ac:c4:5b:31:ff:05:f0: 38:ae:e0:16:45:b0:ff:1b:89:0b:63:57:27:22:0e:f1:b3:a6: ae:24:5b:4c:03:15:8d:b7:f7:63:bf:aa:66:7a:b6:9e:45:be: c5:b7:92:50:3b:f9:53:58:09:92:16:24:9a:83:f8:13:1d:59: 64:85:11:0f:bb:ba:f0:3b:09:c3:9f:43:d6:d5:06:b0:9e:d8: 39:66:5e:cf:81:39:ef:52:11:7c:99:3e:cd:bf:73:a1:c6:49: 60:61:f1:77:3f:c9:ef:66:cf:b4:bd:21:2c:6d:8e:85:6f:e7: 3b:b1:ed:1c:1b:f0:6d:ee:f7:e8:da:6a:d0:9f:8a:c9:6a:7b: b3:b0:2e:20:52:79:c5:62:52:13:3d:6e:e6:96:30:13:44:27: bc:f7:12:d3:f0:ac:43:ae:c5:74:64:52:bc:88:f8:43:a3:c6: 60:67:6c:3b:e2:27:e4:d3:d5:09:c5:3d:71:35:5e:37:84:f9: 3c:41:e6:c9:1a:2e:aa:46:4d:14:ff:94:60:63:4e:76:b1:1b: 79:9c:c0:61:29:84:78:ec:6c:9d:07:e5:44:65:92:da:06:61: f2:74:2a:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjYwMzI0MTkyNjMzWhcNMjYwMzMxMTkyNjMzWjAYMRYwFAYD VQQDEw02OWMyZTU2OS00NGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9IwWghz2QLYAzDKE2Dx5NTh5vwLT8yWGZLK+SvIlgO2Ky4Sc8zigSjvYW3k CtMPaAQaD5rcafeH4unVASzcH2gmYR0AIePiQJngT7oHMnofqfIX759h4bdvHElo p+FamVT5unE6IblWFhlgf0qBxqEfhY/7OuBLYFxmSkwnhgzAGFbd9lztSL1Kt3gu EOHYXpeUk+rdh16OzAb4nIUYQJ7g9fqRsOvwL9DJZsOiFmiNU2YhF3b8uXm848Xn 4j1s6uBgG7+BZBqkDMs21FvhgSJxHBbdjEaWg/fNiO2vfLOy9HoNOvYbVSEiG7mU KSh+p6btq/oxew5oxMFj8f/1mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKfyEUl y3izc5XvUh9maFC2D+yaMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOiDG2YhDGMmG2DrxDOAVnY/HOUocrqaevDDfbbKsxFsx/wXwOK7gFkWw/xuJ C2NXJyIO8bOmriRbTAMVjbf3Y7+qZnq2nkW+xbeSUDv5U1gJkhYkmoP4Ex1ZZIUR D7u68DsJw59D1tUGsJ7YOWZez4E571IRfJk+zb9zocZJYGHxdz/J72bPtL0hLG2O hW/nO7HtHBvwbe736Npq0J+KyWp7s7AuIFJ5xWJSEz1u5pYwE0QnvPcS0/CsQ67F dGRSvIj4Q6PGYGdsO+In5NPVCcU9cTVeN4T5PEHmyRouqkZNFP+UYGNOdrEbeZzA YSmEeOxsnQflRGWS2gZh8nQq3g== -----END CERTIFICATE-----Generated at Thu Mar 26 03:57:30 2026 by rpki-client