$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: H9uDM47RXwCxrxWLRkL0Aklw7ZHyaakFv+mXEc2ixrw= Subject key identifier: 18:D0:B4:80:30:64:F1:B9:15:46:EB:FB:5E:49:18:FB:9D:51:FB:9F Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0838 Signing time: Tue 24 Mar 2026 20:41:29 +0000 Manifest this update: Tue 24 Mar 2026 20:41:29 +0000 Manifest next update: Tue 31 Mar 2026 20:41:29 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: VSI9M9/rgMfgHb12tWYV37g1S63ppZ1ExjJfaoun82I=) 2: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: qKtjyRx0lLlv/KwvG7LBwoOnxK1cXnW5MTg39ctLvtM=) 3: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Mar 24 20:41:29 2026 GMT Not After : Mar 31 20:41:29 2026 GMT Subject: CN=69c2f6f9-0d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:20:7a:6a:0a:b0:23:0a:51:29:33:f0:a8: 10:b6:08:15:02:0f:2a:72:ab:94:c1:24:9f:3d:39: 40:13:c3:80:fd:b5:0f:79:8d:5f:5c:21:ea:77:39: 70:04:86:0d:45:d0:6c:f3:85:3c:3a:66:89:bb:a7: cc:42:37:92:72:be:ec:82:15:97:6b:40:fb:3f:04: 6e:56:32:8f:e6:5d:54:d3:ac:49:02:c7:f4:97:e3: 60:58:39:1a:03:71:91:71:2d:f0:10:a5:a1:03:58: 1e:f5:ae:0e:60:6e:47:01:c2:fb:d0:34:7e:80:f2: af:53:f6:9e:81:32:1e:e8:5c:e5:8d:ef:0c:c7:0a: dc:f4:6f:09:9f:dc:5d:12:50:ac:42:f5:f4:15:e8: 4a:5d:86:1f:0d:7d:d7:0e:77:d8:71:97:93:b4:67: 27:b4:30:c7:d8:21:a4:49:4b:a8:a3:a9:4d:a7:9b: b9:9a:b5:f6:c4:23:4b:06:54:fc:99:86:8e:8f:84: 3a:d5:23:fe:b3:3f:02:13:13:4b:7b:87:5a:6d:67: 32:86:e2:f4:52:b2:f9:90:be:bf:78:43:8a:e1:31: be:7d:df:18:81:dc:c7:97:f3:a9:d1:e0:33:0a:f4: ec:18:29:48:ab:5e:14:08:6c:6c:25:a7:a7:cc:ad: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:B4:80:30:64:F1:B9:15:46:EB:FB:5E:49:18:FB:9D:51:FB:9F X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4e:52:54:f0:0c:69:e4:7e:c4:04:b9:08:a5:f0:a8:fc:81: 89:63:dd:cf:ee:36:6a:6c:2a:7b:a5:d8:fd:7d:97:02:0f:b4: 83:ca:69:40:ba:62:ea:21:0f:43:bf:69:32:b3:4c:2d:18:05: 5e:65:1f:f2:e3:ec:bc:4c:c5:92:6b:b2:92:f0:34:f4:28:d4: c7:1e:3a:fe:c0:67:3e:f0:aa:ca:fe:fb:78:7e:24:ca:02:15: 9b:27:71:22:ef:f5:8e:18:65:f5:c1:07:6e:88:99:75:f6:4d: f9:d7:d8:c0:ad:ee:81:5b:71:1d:fa:dd:df:52:5d:dd:30:ca: 14:58:fe:c3:0b:49:a9:5e:af:99:7c:6d:ff:3b:0f:5d:08:59: 91:d5:97:27:30:e8:cd:93:bd:6e:67:02:68:f8:3a:3a:14:df: ff:0a:f3:48:30:9a:73:90:68:5c:46:a5:d1:d7:b1:0c:e7:6f: 1c:a6:06:a7:35:78:ef:7c:72:f0:e7:3a:9d:9e:2f:a4:3e:64: 96:95:7d:33:64:4d:ed:e8:14:1a:fb:4f:7b:e1:a7:9b:23:b8: c1:1b:0a:62:b0:ab:f5:3c:c8:f3:40:45:b6:b6:13:da:a1:35: ce:4f:21:69:9e:14:48:5e:4a:3e:38:b7:84:82:2f:0d:47:83: 6f:f8:f9:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYwMzI0MjA0MTI5WhcNMjYwMzMxMjA0MTI5WjAYMRYwFAYD VQQDEw02OWMyZjZmOS0wZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9ggemoKsCMKUSkz8KgQtggVAg8qcquUwSSfPTlAE8OA/bUPeY1fXCHqdzlw BIYNRdBs84U8OmaJu6fMQjeScr7sghWXa0D7PwRuVjKP5l1U06xJAsf0l+NgWDka A3GRcS3wEKWhA1ge9a4OYG5HAcL70DR+gPKvU/aegTIe6Fzlje8Mxwrc9G8Jn9xd ElCsQvX0FehKXYYfDX3XDnfYcZeTtGcntDDH2CGkSUuoo6lNp5u5mrX2xCNLBlT8 mYaOj4Q61SP+sz8CExNLe4dabWcyhuL0UrL5kL6/eEOK4TG+fd8YgdzHl/Op0eAz CvTsGClIq14UCGxsJaenzK0CJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjQtIAw ZPG5FUbr+15JGPudUfufMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI05SVPAMaeR+xAS5CKXwqPyBiWPdz+42amwqe6XY/X2XAg+0g8ppQLpi6iEP Q79pMrNMLRgFXmUf8uPsvEzFkmuykvA09CjUxx46/sBnPvCqyv77eH4kygIVmydx Iu/1jhhl9cEHboiZdfZN+dfYwK3ugVtxHfrd31Jd3TDKFFj+wwtJqV6vmXxt/zsP XQhZkdWXJzDozZO9bmcCaPg6OhTf/wrzSDCac5BoXEal0dexDOdvHKYGpzV473xy 8Oc6nZ4vpD5klpV9M2RN7egUGvtPe+GnmyO4wRsKYrCr9TzI80BFtrYT2qE1zk8h aZ4USF5KPji3hIIvDUeDb/j5eg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:21 2026 by rpki-client