$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: hNY0FXXNMXKx/2fz0Hz7sSfbe3CkbTFcJ9NJEd9YfcA= Subject key identifier: 82:48:60:80:C1:F0:20:B8:F6:FC:5B:5A:0F:BC:71:AF:31:8F:41:74 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: EB Signing time: Wed 25 Mar 2026 05:46:38 +0000 Manifest this update: Wed 25 Mar 2026 05:46:37 +0000 Manifest next update: Wed 01 Apr 2026 05:46:37 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: dvFlHJ6A8ElzakH4LN2YY7IyqjjAbVPJuWzisICmlt8=) 2: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: 9uHtfwpw61IjWGgx6bmgLU+bHNZ+KryLG/rBQFV/qj0=) 3: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: Y1Px4R4PB1cOeUqqRsR8kGbEDg+/Xac+F7xJincQnK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Mar 25 05:46:37 2026 GMT Not After : Apr 1 05:46:37 2026 GMT Subject: CN=69c376bd-a378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:dd:93:49:d8:6b:98:29:29:01:c8:d2:51: 7e:50:7c:70:e0:ff:6f:f1:02:eb:fb:95:e9:d8:a1: 82:46:81:40:3b:8b:dd:3d:73:f1:1c:37:04:f3:a9: b4:f4:b1:c0:83:d4:1f:6d:69:fd:11:fa:63:ba:73: d6:80:c0:63:18:a3:0b:ec:45:3b:db:2f:b2:51:55: 0d:e1:69:7d:f3:53:9b:ed:03:48:1c:8b:8b:d6:d4: 69:6d:e4:26:04:89:d6:af:ef:81:fa:3b:f6:63:2a: b2:a0:37:8b:1c:c6:41:48:cf:db:3c:fa:39:36:be: 32:65:d8:3e:99:9e:79:dc:ba:d4:46:be:a3:b6:9c: b3:25:b1:f6:5f:e7:13:b4:02:2e:64:e0:e7:82:cd: 49:22:e8:63:6a:1b:27:0e:93:4c:8c:0d:d9:60:71: 19:ca:35:83:bf:9a:35:04:1f:e9:5c:12:18:48:20: c8:a1:e1:14:0b:b8:39:29:c1:8d:0f:04:5d:9c:57: 11:df:87:a2:66:7b:6e:06:59:1e:49:d8:88:25:06: 05:fc:08:9c:ac:0b:ca:72:34:78:ef:e1:8c:03:e4: d5:0d:33:12:d9:1c:3d:c8:57:e5:08:6f:49:c1:fa: aa:16:0f:1a:de:e4:d7:ee:d4:09:d6:69:04:c9:e4: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:60:80:C1:F0:20:B8:F6:FC:5B:5A:0F:BC:71:AF:31:8F:41:74 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:99:7d:8a:b3:6f:68:5f:dd:c7:1a:1b:1b:8a:4b:30:5b: 0d:a9:b4:34:56:20:08:3d:7f:7d:4b:7c:8d:cc:d6:63:38:18: b1:48:0d:3c:04:ee:20:61:9b:33:17:1b:22:1c:c0:7d:0b:92: 6d:4b:d9:fd:9c:93:4e:d7:e6:a6:02:5f:8b:60:1f:c1:7c:66: 35:24:ac:3b:54:ee:06:b7:12:a9:d8:04:56:c8:3d:3a:d7:86: 6a:4a:0d:45:71:cb:25:f7:81:68:b0:14:53:d1:ca:b7:81:42: d1:7b:da:49:2a:52:79:3a:6d:86:ba:54:8a:d2:80:43:51:76: a2:3f:2c:7a:46:84:d1:53:e7:40:71:01:b0:ef:52:b9:6f:7f: 19:4d:b1:e5:08:0f:f0:d4:34:19:be:70:42:49:6c:ae:fa:2a: 23:82:11:9d:4d:bd:f6:bb:58:5b:e9:90:ce:f5:9a:c6:bb:0d: a7:5f:67:13:4a:70:20:9b:60:6b:dd:cf:c7:22:94:d6:8e:4d: 24:1c:39:66:5b:0c:9a:30:ee:ba:f2:d0:4e:0b:d9:44:54:ae: 79:5b:c4:6a:9c:60:93:c2:82:85:5d:1c:2b:64:9d:dc:ab:9e: 7b:22:90:96:64:a0:fa:c1:53:f3:95:20:40:85:1d:6e:18:d7: 5c:d8:22:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxODAxMTAvBgNVBAUTKDg3REE0NEE0Q0Y4MzlDMzg4MUM2QkMzODY4M0NDREMz MDhDQTdDRTkwHhcNMjYwMzI1MDU0NjM3WhcNMjYwNDAxMDU0NjM3WjAYMRYwFAYD VQQDEw02OWMzNzZiZC1hMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYndk0nYa5gpKQHI0lF+UHxw4P9v8QLr+5Xp2KGCRoFAO4vdPXPxHDcE86m0 9LHAg9QfbWn9EfpjunPWgMBjGKML7EU72y+yUVUN4Wl981Ob7QNIHIuL1tRpbeQm BInWr++B+jv2YyqyoDeLHMZBSM/bPPo5Nr4yZdg+mZ553LrURr6jtpyzJbH2X+cT tAIuZODngs1JIuhjahsnDpNMjA3ZYHEZyjWDv5o1BB/pXBIYSCDIoeEUC7g5KcGN DwRdnFcR34eiZntuBlkeSdiIJQYF/AicrAvKcjR47+GMA+TVDTMS2Rw9yFflCG9J wfqqFg8a3uTX7tQJ1mkEyeRaYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJIYIDB 8CC49vxbWg+8ca8xj0F0MB8GA1UdIwQYMBaAFIfaRKTPg5w4gca8OGg8zcMIynzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDE4MC83NzQyODdGMkQ2 QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5EaUJ4cnc0YUR6Tnd3aktm T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5E aUJ4cnc0YUR6Tnd3aktmT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5CZfYqzb2hf3ccaGxuKSzBbDam0NFYgCD1/fUt8jczWYzgYsUgNPATuIGGb MxcbIhzAfQuSbUvZ/ZyTTtfmpgJfi2AfwXxmNSSsO1TuBrcSqdgEVsg9OteGakoN RXHLJfeBaLAUU9HKt4FC0XvaSSpSeTpthrpUitKAQ1F2oj8sekaE0VPnQHEBsO9S uW9/GU2x5QgP8NQ0Gb5wQklsrvoqI4IRnU299rtYW+mQzvWaxrsNp19nE0pwIJtg a93PxyKU1o5NJBw5ZlsMmjDuuvLQTgvZRFSueVvEapxgk8KChV0cK2Sd3KueeyKQ lmSg+sFT85UgQIUdbhjXXNgikg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:54 2026 by rpki-client