$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft File: hRn_LGgILMZHuCh2C0t7FJXshMs.mft (raw, json) Hash identifier: wZQ9yFdHhvYkn6QCOvWiV+KCvaHa6WFjkg8IoWav8lg= Subject key identifier: 86:E4:23:53:F9:9E:70:3E:5F:23:BD:74:FE:47:8E:E8:07:29:F4:E8 Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft Manifest number: 03 Signing time: Thu 26 Mar 2026 17:56:27 +0000 Manifest this update: Thu 26 Mar 2026 17:56:26 +0000 Manifest next update: Thu 02 Apr 2026 17:56:26 +0000 Files and hashes: 1: hRn_LGgILMZHuCh2C0t7FJXshMs.crl (hash: 7q41k3kiGIM/2oMu/h2fhq9nzQr4/ref4kKXYJgDcgY=) 2: DCF45DB827C111F19C6102CF9F833773.roa (hash: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB Validity Not Before: Mar 26 17:56:26 2026 GMT Not After : Apr 2 17:56:26 2026 GMT Subject: CN=69c5734b-cd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:dc:3c:f2:8c:e6:78:20:db:9b:c3:a7:e9: 00:7f:34:02:ab:fe:8a:53:3f:c3:4b:88:1f:53:bc: 97:1c:f5:d0:d7:11:17:eb:21:28:b5:fa:25:c5:3b: 31:c3:83:53:1e:15:a2:d3:04:87:7e:06:02:55:53: f7:bf:08:a7:e3:73:20:2b:3e:af:1e:55:b3:d6:22: ca:2f:8e:f1:4f:0e:e9:07:64:1a:60:df:f3:d9:4c: 82:fd:4f:c0:81:7a:55:21:a8:18:9a:3c:9d:1f:ad: 1d:75:a0:d1:47:ec:9a:11:09:16:0c:4b:da:38:4e: 73:a7:e9:76:f9:13:60:a1:5f:8c:6c:6d:d5:92:c6: f0:af:a1:d1:cd:c7:8b:7a:b6:fc:09:f0:60:40:1c: 82:d1:45:a4:fc:e4:cf:c4:e8:70:e3:db:c7:53:3f: 31:c3:91:30:bd:e4:92:3d:84:02:06:e1:7b:9d:a3: 7d:96:ee:d7:01:06:ad:dc:f8:83:16:6d:64:bb:4b: cc:05:e5:57:2b:2f:7a:8c:f3:7d:ba:9f:cb:58:06: 95:42:26:a6:6e:d4:93:24:05:b5:0d:65:95:0e:a4: 64:bd:21:7d:94:a6:2f:b5:0f:96:4f:9e:de:ae:1c: e0:b9:28:4e:62:6e:cf:9e:87:4b:5c:fa:9f:a1:ee: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E4:23:53:F9:9E:70:3E:5F:23:BD:74:FE:47:8E:E8:07:29:F4:E8 X509v3 Authority Key Identifier: keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:d1:f6:20:7e:e6:7a:89:fd:7d:92:93:65:52:7f:c5:23: 87:f8:29:56:3d:ba:3b:cf:23:0d:24:32:46:a7:88:95:2e:0b: 32:c6:cd:f4:82:f1:ab:3d:a4:a7:c4:46:ee:9d:c4:df:5d:2f: 67:44:57:6c:7c:4c:06:b6:bc:96:ae:b3:bf:ae:3b:60:e5:7d: 73:24:61:52:a9:d2:20:d8:91:14:04:f9:5e:9f:9a:63:e7:b4: fe:11:a1:0c:e5:1d:da:47:9f:55:3d:42:15:19:d9:2b:de:84: a7:6e:0d:86:d1:d1:b8:10:c0:00:3c:59:f0:46:cd:f2:b2:82: fd:2a:46:61:28:12:45:69:b4:73:62:ef:5f:bc:1a:c2:bc:a8: b3:76:ec:61:7f:cc:32:00:bf:31:b1:bd:4e:3f:ca:bf:68:2a: a9:a9:8f:6b:f8:33:f7:56:ae:13:ea:b9:d1:5f:63:7e:43:50: 63:5f:81:68:9f:db:d8:45:6c:b3:75:e7:68:5b:fa:4f:71:8a: f6:b2:ed:9f:af:46:a3:b8:e6:fd:fe:39:45:e4:5e:0c:34:83: e7:d9:24:36:51:fc:a9:56:70:40:e3:9e:c1:77:d9:62:b6:3f: 20:ae:7b:0c:e4:aa:d1:2f:c7:30:fb:59:b8:d0:c0:51:88:06: 65:bf:d0:18 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzM3RjExMC8GA1UEBRMoODUxOUZGMkM2ODA4MkNDNjQ3QjgyODc2MEI0QjdCMTQ5 NUVDODRDQjAeFw0yNjAzMjYxNzU2MjZaFw0yNjA0MDIxNzU2MjZaMBgxFjAUBgNV BAMTDTY5YzU3MzRiLWNkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClvdw88ozmeCDbm8On6QB/NAKr/opTP8NLiB9TvJcc9dDXERfrISi1+iXFOzHD g1MeFaLTBId+BgJVU/e/CKfjcyArPq8eVbPWIsovjvFPDukHZBpg3/PZTIL9T8CB elUhqBiaPJ0frR11oNFH7JoRCRYMS9o4TnOn6Xb5E2ChX4xsbdWSxvCvodHNx4t6 tvwJ8GBAHILRRaT85M/E6HDj28dTPzHDkTC95JI9hAIG4Xudo32W7tcBBq3c+IMW bWS7S8wF5VcrL3qM8326n8tYBpVCJqZu1JMkBbUNZZUOpGS9IX2Upi+1D5ZPnt6u HOC5KE5ibs+eh0tc+p+h7ndXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhuQjU/me cD5fI710/keO6Acp9OgwHwYDVR0jBBgwFoAUhRn/LGgILMZHuCh2C0t7FJXshMsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzdGLzFCNUJGN0ZFMjdB QTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1aSHVDaDJDMHQ3RkpYc2hN cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaFJuX0xHZ0lMTVpIdUNoMkMwdDdGSlhzaE1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MzdGLzFCNUJGN0ZFMjdBQTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1a SHVDaDJDMHQ3RkpYc2hNcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAz+tH2IH7meon9fZKTZVJ/xSOH+ClWPbo7zyMNJDJGp4iVLgsyxs30gvGrPaSn xEbuncTfXS9nRFdsfEwGtryWrrO/rjtg5X1zJGFSqdIg2JEUBPlen5pj57T+EaEM 5R3aR59VPUIVGdkr3oSnbg2G0dG4EMAAPFnwRs3ysoL9KkZhKBJFabRzYu9fvBrC vKizduxhf8wyAL8xsb1OP8q/aCqpqY9r+DP3Vq4T6rnRX2N+Q1BjX4Fon9vYRWyz dedoW/pPcYr2su2fr0ajuOb9/jlF5F4MNIPn2SQ2UfypVnBA457Bd9litj8grnsM 5KrRL8cw+1m40MBRiAZlv9AY -----END CERTIFICATE-----Generated at Thu Mar 26 21:31:51 2026 by rpki-client