$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json) Hash identifier: KEGR6M1L3+NW+ofVbO++LFzGUHsQQQRwtfq7b31ZTv4= Subject key identifier: 32:E0:E8:30:F2:BA:5A:44:FD:70:D5:20:4E:5B:A1:BA:66:6E:5E:84 Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft Manifest number: 0369 Signing time: Fri 27 Mar 2026 00:38:23 +0000 Manifest this update: Fri 27 Mar 2026 00:38:22 +0000 Manifest next update: Fri 03 Apr 2026 00:38:22 +0000 Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: 35D5gZMpQcm4/gRdtpJbnu5cCnxY2Q3lsIx89mP1NrY=) 2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: 3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Validity Not Before: Mar 27 00:38:22 2026 GMT Not After : Apr 3 00:38:22 2026 GMT Subject: CN=69c5d17e-64c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:ae:3f:28:4d:a6:55:f5:0d:c4:e1:9d:c5: 0a:8a:00:59:08:a1:d2:de:19:34:b2:c4:45:6a:5c: 94:1e:14:b6:88:e4:5a:00:d1:16:81:f5:3e:82:ec: c1:a0:92:4c:48:40:05:20:e2:0d:08:37:93:ec:67: 66:54:f4:2b:ac:00:9c:02:96:87:03:8d:ae:cd:e8: 11:8f:c9:72:8c:38:ff:06:bc:ed:eb:9a:6c:2a:58: 52:e0:d5:c1:ab:18:eb:58:25:a4:59:3e:c8:94:98: 41:2a:bd:8d:ab:5c:77:0e:52:bf:ee:0e:9c:00:5c: 2a:ec:eb:01:0a:35:d7:d7:7c:b2:78:38:52:1c:8f: ee:62:e2:d4:67:b4:6d:f0:e9:14:48:71:8e:4c:cb: 19:e7:93:5e:f3:e7:05:fb:10:8a:a1:67:24:d5:b7: 03:2d:9d:37:8b:d8:63:2d:59:a6:ae:b9:8c:ea:a6: 5f:d7:e3:9d:be:e7:b8:3a:9f:a1:43:26:1b:1b:d7: 6d:8a:ed:e6:aa:e6:02:6e:95:dd:6e:77:7d:ac:8c: fe:84:cc:32:a7:bc:e6:b4:a2:b4:1d:e2:8e:8d:2f: 3d:4f:71:17:98:fb:b0:95:4a:dd:df:1d:2b:2d:fa: 9b:66:f0:c3:a1:3d:5d:5b:1e:58:9e:65:b1:bc:1f: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:E8:30:F2:BA:5A:44:FD:70:D5:20:4E:5B:A1:BA:66:6E:5E:84 X509v3 Authority Key Identifier: keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fb:94:35:86:5b:90:88:a2:04:af:d6:e5:36:25:4c:87:f1: 83:1c:1d:0a:7e:a5:70:32:a9:08:96:d2:37:7c:da:26:84:36: 50:45:10:8c:79:d8:0e:c2:38:f6:ce:1c:2b:73:7a:08:97:ae: f3:8e:c4:b9:79:8d:65:95:bb:3e:d0:74:d5:48:fc:db:3b:ea: f7:ee:6f:0a:c4:e2:10:50:9b:34:2c:0f:3d:5c:99:07:ee:12: 69:d3:53:08:85:5b:ae:2b:85:e7:53:a4:cf:db:8d:3e:1e:fe: 45:79:92:9b:08:95:0c:84:bd:15:0c:5a:3b:79:eb:16:23:31: 9f:c6:46:0f:a0:76:eb:02:62:19:5c:18:78:53:70:33:94:d9: 4d:95:f0:3f:3b:cb:ac:88:9b:e3:0c:25:c4:f2:f2:af:e6:b3: 61:c7:71:e2:12:5f:13:b2:0a:fd:58:b6:b2:68:b4:50:42:0b: 6f:8a:ba:b4:ae:9d:eb:37:48:b1:f3:76:a6:ad:4c:fa:54:cc: f1:b4:ef:78:22:70:3d:d8:38:1d:e7:bc:49:56:da:2b:83:e6: 29:3a:0c:27:18:ed:ca:5a:11:50:62:72:aa:b9:26:2d:cb:ee: a1:c6:5d:58:90:1d:f3:31:16:6d:f5:f2:10:f9:31:6d:93:94: eb:b9:ee:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGMkIxMTAvBgNVBAUTKDFDQkE4RDNEQUE4MDQ4ODkzMEE5OTI4QjE5NkVERUUw NzVGNDA5QTQwHhcNMjYwMzI3MDAzODIyWhcNMjYwNDAzMDAzODIyWjAYMRYwFAYD VQQDEw02OWM1ZDE3ZS02NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG2uPyhNplX1DcThncUKigBZCKHS3hk0ssRFalyUHhS2iORaANEWgfU+guzB oJJMSEAFIOINCDeT7GdmVPQrrACcApaHA42uzegRj8lyjDj/Brzt65psKlhS4NXB qxjrWCWkWT7IlJhBKr2Nq1x3DlK/7g6cAFwq7OsBCjXX13yyeDhSHI/uYuLUZ7Rt 8OkUSHGOTMsZ55Ne8+cF+xCKoWck1bcDLZ03i9hjLVmmrrmM6qZf1+Odvue4Op+h QyYbG9dtiu3mquYCbpXdbnd9rIz+hMwyp7zmtKK0HeKOjS89T3EXmPuwlUrd3x0r LfqbZvDDoT1dWx5YnmWxvB8V/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLg6DDy ulpE/XDVIE5bobpmbl6EMB8GA1UdIwQYMBaAFBy6jT2qgEiJMKmSixlu3uB19Amk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUYyQi81MzczMjJGQUVC QzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJa3dxWktMR1c3ZTRIWDBD YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMcU5QYXFBU0lrd3FaS0xHVzdlNEhYMENhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUYyQi81MzczMjJGQUVCQzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJ a3dxWktMR1c3ZTRIWDBDYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/uUNYZbkIiiBK/W5TYlTIfxgxwdCn6lcDKpCJbSN3zaJoQ2UEUQjHnYDsI4 9s4cK3N6CJeu847EuXmNZZW7PtB01Uj82zvq9+5vCsTiEFCbNCwPPVyZB+4SadNT CIVbriuF51Okz9uNPh7+RXmSmwiVDIS9FQxaO3nrFiMxn8ZGD6B26wJiGVwYeFNw M5TZTZXwPzvLrIib4wwlxPLyr+azYcdx4hJfE7IK/Vi2smi0UEILb4q6tK6d6zdI sfN2pq1M+lTM8bTveCJwPdg4Hee8SVbaK4PmKToMJxjtyloRUGJyqrkmLcvuocZd WJAd8zEWbfXyEPkxbZOU67nupw== -----END CERTIFICATE-----Generated at Sat Mar 28 11:04:19 2026 by rpki-client