$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: YUBHwqL/6p92fIm6u3m5lQBCH2w7lM7BaOvaqSgMjCU= Subject key identifier: 7B:17:5E:36:3F:38:EB:E9:CA:6C:B9:F6:01:DF:EB:E2:81:70:9E:67 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: E7 Signing time: Fri 27 Mar 2026 05:58:01 +0000 Manifest this update: Fri 27 Mar 2026 05:58:01 +0000 Manifest next update: Fri 03 Apr 2026 05:58:01 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: 0JKxKj6Rdz4nSPICkAJNMva+v2F8BlsyLM6XxGHJ0Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 05:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Mar 27 05:58:01 2026 GMT Not After : Apr 3 05:58:01 2026 GMT Subject: CN=69c61c69-9f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:fa:32:6d:d6:e5:6d:6d:e3:c5:84:d4:98: eb:5a:77:99:10:4d:36:b5:79:ee:db:0b:a3:7e:d9: 6a:ce:2b:c5:eb:36:fd:c0:d3:62:f2:c8:4a:2e:2e: f0:c5:2c:7c:c5:9f:7e:71:5b:15:c7:a2:ff:ab:95: 65:44:1b:4c:b5:b5:f0:77:95:ac:16:70:cd:ab:1f: 22:91:ab:63:73:8f:10:34:da:e5:22:c9:5f:c1:36: b0:cd:73:23:e0:4d:12:0b:98:f5:25:95:1f:7a:79: f8:20:aa:a0:29:47:80:3d:5d:33:ee:87:02:0c:5c: c9:0b:46:77:01:8c:8f:c7:63:ba:84:d8:d9:60:2e: b9:70:4b:28:c5:63:e9:ab:7e:f9:bb:78:a2:24:1c: fb:5a:d1:2c:10:89:8f:a9:e6:79:fc:e2:6c:ab:bb: 69:87:7b:6d:3d:39:63:74:ee:ac:09:0c:ab:26:de: dd:3d:98:9b:d1:a2:a8:b4:93:61:d0:af:5a:52:03: dc:c1:82:bb:ad:1c:9c:ce:14:80:a6:8a:0c:38:f5: ac:ea:64:22:c0:6d:8e:b1:f1:38:62:fa:69:e1:ff: 8a:fa:f6:bc:78:93:28:aa:ae:37:6c:52:1a:3a:73: 60:25:ae:07:5a:86:fc:ac:8a:3f:7e:c1:99:e9:88: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:17:5E:36:3F:38:EB:E9:CA:6C:B9:F6:01:DF:EB:E2:81:70:9E:67 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:d4:9a:30:da:dd:2e:d4:5c:47:d2:c2:3a:bd:d7:91:1c: 3f:16:a6:dc:8a:94:2b:f9:26:ae:f2:5e:07:c7:72:c8:fe:e4: 12:fb:54:63:eb:62:43:a4:7b:29:c2:b2:e1:39:d2:13:ea:b0: dc:75:65:3b:53:fa:e2:2f:21:69:a9:6e:13:ce:ed:09:a1:c2: 59:cb:d2:b8:d0:d0:09:5b:cb:0e:85:69:68:cf:00:ef:5c:10: 82:b0:20:00:70:7f:75:e3:55:d3:65:44:13:c1:84:ca:68:19: e7:47:99:5b:0d:d0:02:21:89:ef:4f:63:9f:33:42:58:48:0b: 79:08:0d:2c:4f:68:36:5c:b4:22:00:fe:8f:b3:11:45:48:85: 80:91:5b:68:59:58:1b:a9:9e:1c:e9:22:fd:07:7b:d9:15:31: a4:aa:b8:13:b4:24:98:d7:ea:4e:c7:ed:0d:4b:92:fc:97:6e: f0:6d:cd:fb:31:ad:cb:01:90:0e:25:6b:7e:19:64:98:d8:f2: cb:75:7a:5c:60:54:e3:4d:e9:6e:64:0a:6d:e5:d5:05:8e:b5: 7a:ad:5e:e1:0e:9d:ec:ec:59:63:50:91:1f:15:69:1c:36:e4: 1e:16:08:c7:6c:68:a2:eb:48:0c:6c:ed:16:61:c8:94:e6:cd: 82:48:ca:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjYwMzI3MDU1ODAxWhcNMjYwNDAzMDU1ODAxWjAYMRYwFAYD VQQDEw02OWM2MWM2OS05Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PT6Mm3W5W1t48WE1JjrWneZEE02tXnu2wujftlqzivF6zb9wNNi8shKLi7w xSx8xZ9+cVsVx6L/q5VlRBtMtbXwd5WsFnDNqx8ikatjc48QNNrlIslfwTawzXMj 4E0SC5j1JZUfenn4IKqgKUeAPV0z7ocCDFzJC0Z3AYyPx2O6hNjZYC65cEsoxWPp q375u3iiJBz7WtEsEImPqeZ5/OJsq7tph3ttPTljdO6sCQyrJt7dPZib0aKotJNh 0K9aUgPcwYK7rRyczhSApooMOPWs6mQiwG2OsfE4Yvpp4f+K+va8eJMoqq43bFIa OnNgJa4HWob8rIo/fsGZ6Yh/NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsXXjY/ OOvpymy59gHf6+KBcJ5nMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqTUmjDa3S7UXEfSwjq915EcPxam3IqUK/kmrvJeB8dyyP7kEvtUY+tiQ6R7 KcKy4TnSE+qw3HVlO1P64i8haaluE87tCaHCWcvSuNDQCVvLDoVpaM8A71wQgrAg AHB/deNV02VEE8GEymgZ50eZWw3QAiGJ709jnzNCWEgLeQgNLE9oNly0IgD+j7MR RUiFgJFbaFlYG6meHOki/Qd72RUxpKq4E7QkmNfqTsftDUuS/Jdu8G3N+zGtywGQ DiVrfhlkmNjyy3V6XGBU403pbmQKbeXVBY61eq1e4Q6d7OxZY1CRHxVpHDbkHhYI x2xooutIDGztFmHIlObNgkjKtg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:25 2026 by rpki-client