$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: psPCmKqHniNaCflK7bm1U4XJmUXezQOuEYgugpAY5tE= Subject key identifier: 1A:94:AD:FA:A8:01:C9:4E:B8:E3:89:BC:E0:ED:46:51:6A:10:92:4B Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CE3 Signing time: Tue 24 Mar 2026 18:08:59 +0000 Manifest this update: Tue 24 Mar 2026 18:08:59 +0000 Manifest next update: Tue 31 Mar 2026 18:08:59 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: xNXam2hJ1bhOYR3WRH90eX3f11GmJt6cjaep91kUwPU=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Mar 24 18:08:59 2026 GMT Not After : Mar 31 18:08:59 2026 GMT Subject: CN=69c2d33b-4781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:11:e7:1d:69:2b:2e:ea:70:92:b2:b3:98: 5c:4f:d1:f8:16:64:fb:c4:12:4c:7d:78:4f:6e:b8: ed:fd:57:98:61:dd:db:7c:8e:96:1a:7f:0a:9f:d2: 0c:2f:5c:12:49:4d:44:27:84:61:04:5e:d7:5d:ab: 9a:0c:c3:fc:cf:64:0a:9b:4b:c4:81:60:82:f3:fb: 11:fe:8d:c2:6d:72:ff:60:3c:de:db:54:a9:1c:cd: 5e:9a:d6:96:79:3b:72:f3:22:d7:5d:77:f3:91:6f: 06:d8:d8:e4:af:25:0e:89:3f:e0:b9:56:94:b5:07: 64:e3:83:32:10:9a:0a:35:f5:9f:d7:5b:61:e7:5b: 57:97:16:d9:48:42:b5:6f:c3:5a:70:c6:63:a8:38: f0:1a:4a:38:5b:22:56:7f:25:d5:54:34:5e:53:00: 9f:49:7e:db:42:97:fd:b1:6c:f4:0a:11:60:4f:7b: ad:40:c4:36:4d:54:03:da:95:1c:49:4a:6e:68:6f: 8f:84:5a:1f:d8:bd:da:3e:ed:28:93:15:c4:a9:50: 73:49:1d:f7:df:00:9a:3d:d8:33:97:3b:b0:7f:e3: 52:8a:0f:bf:88:8b:a4:6a:9f:42:9f:60:c3:42:05: 26:c1:1f:8d:cb:c0:da:d8:64:91:19:54:eb:4d:af: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:94:AD:FA:A8:01:C9:4E:B8:E3:89:BC:E0:ED:46:51:6A:10:92:4B X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:df:e3:ba:8c:f0:8d:cc:eb:eb:9f:4d:51:d8:1c:43:1c:74: 2d:99:3c:18:63:55:29:28:c0:4a:65:b0:41:15:cf:91:50:1b: f5:29:f4:12:6e:d3:f3:5a:0a:ff:67:95:b7:06:ed:1a:fb:30: 1d:5b:12:14:7c:a9:f0:9c:4d:22:9e:2a:84:31:7d:a6:04:4e: dd:3f:61:6b:4d:eb:5e:5a:9e:9d:4e:8a:9f:a6:4b:98:22:45: 7a:a6:59:48:49:b0:99:c6:6e:8b:4d:74:af:a9:d2:00:b7:c8: 83:87:cc:2e:f1:9c:fb:bf:4c:10:47:ae:ad:6d:eb:ce:1c:4e: ea:ea:3c:62:be:77:66:e3:d8:13:60:b4:f5:19:9e:a4:d3:94: 1b:8c:f2:c8:84:55:41:3b:fd:03:be:16:84:a9:df:cd:ba:21: 3e:69:42:e0:f5:24:b6:c7:bc:13:ba:47:0d:00:62:65:94:6c: d9:63:88:2b:72:2c:d7:58:04:e9:42:c1:3d:8d:09:19:75:d3: 62:57:a4:20:c9:a6:cf:00:9b:ab:8d:7b:9e:5f:4f:c4:95:dd: 7a:d9:91:f7:74:6c:60:bd:92:9a:40:5b:ae:67:7a:a7:0d:70: 32:9f:68:60:0e:87:ab:09:b6:20:8e:e8:78:ce:df:c4:ab:98: f8:47:fd:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwMzI0MTgwODU5WhcNMjYwMzMxMTgwODU5WjAYMRYwFAYD VQQDEw02OWMyZDMzYi00NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQAR5x1pKy7qcJKys5hcT9H4FmT7xBJMfXhPbrjt/VeYYd3bfI6WGn8Kn9IM L1wSSU1EJ4RhBF7XXauaDMP8z2QKm0vEgWCC8/sR/o3CbXL/YDze21SpHM1emtaW eTty8yLXXXfzkW8G2NjkryUOiT/guVaUtQdk44MyEJoKNfWf11th51tXlxbZSEK1 b8NacMZjqDjwGko4WyJWfyXVVDReUwCfSX7bQpf9sWz0ChFgT3utQMQ2TVQD2pUc SUpuaG+PhFof2L3aPu0okxXEqVBzSR333wCaPdgzlzuwf+NSig+/iIukap9Cn2DD QgUmwR+Ny8Da2GSRGVTrTa8sbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqUrfqo AclOuOOJvODtRlFqEJJLMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjd/juozwjczr659NUdgcQxx0LZk8GGNVKSjASmWwQRXPkVAb9Sn0Em7T81oK /2eVtwbtGvswHVsSFHyp8JxNIp4qhDF9pgRO3T9ha03rXlqenU6Kn6ZLmCJFeqZZ SEmwmcZui010r6nSALfIg4fMLvGc+79MEEeurW3rzhxO6uo8Yr53ZuPYE2C09Rme pNOUG4zyyIRVQTv9A74WhKnfzbohPmlC4PUktse8E7pHDQBiZZRs2WOIK3Is11gE 6ULBPY0JGXXTYlekIMmmzwCbq417nl9PxJXdetmR93RsYL2SmkBbrmd6pw1wMp9o YA6Hqwm2II7oeM7fxKuY+Ef96Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:22 2026 by rpki-client