$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: 5Zr7F3r6TeL6eYdP0T4L2rEIB9l+zGrwASSTZ0weSh8= Subject key identifier: CC:A5:61:CB:98:FE:7C:92:DF:80:A2:5B:CF:78:64:25:E0:3E:AE:33 Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 0280 Signing time: Wed 25 Mar 2026 01:20:47 +0000 Manifest this update: Wed 25 Mar 2026 01:20:47 +0000 Manifest next update: Wed 01 Apr 2026 01:20:47 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: XjiL5IrAnyUfeWfNzUb3p4UegGxZMvyfe3gHx3ilShA=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: eqDK5JxYlPrD2YI5tre8evg6C6tiJ/GL+g0KzbaQtNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Mar 25 01:20:47 2026 GMT Not After : Apr 1 01:20:47 2026 GMT Subject: CN=69c3386f-a005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:38:94:bb:30:b0:4f:d1:1c:21:4b:13:34: 9a:3b:1f:33:67:d8:7d:6b:c6:97:97:e2:e0:11:a8: 2e:00:23:c3:25:54:d5:64:5f:b6:b4:6d:3e:33:ad: c6:a8:f8:43:1b:ef:36:14:f2:10:c5:fc:b7:85:59: 92:7f:3c:8d:4e:f9:3e:a9:34:1b:0b:bf:18:e0:37: e2:48:53:1f:dc:39:1b:34:b8:d0:ff:46:13:dc:74: b2:02:71:f9:f1:b8:0f:27:0e:76:d5:9f:43:e4:e1: f0:f2:1d:63:49:d9:25:89:9f:d1:b5:28:60:d7:a3: df:e6:47:f3:c2:95:5c:90:77:2f:71:ee:ae:0d:9a: e5:29:de:9f:4d:91:2e:73:a5:27:2c:92:d8:45:e3: 7d:ca:92:92:ad:1b:44:40:dc:6d:25:47:d8:6a:83: d2:b2:48:f4:c7:27:c0:51:bf:0c:77:6b:b0:81:e2: 30:22:2f:7c:0f:49:c9:53:dc:4c:b4:86:b2:d8:0d: 61:26:81:98:1b:4b:fe:11:16:a6:f3:90:c3:86:5f: ea:45:9b:39:d8:30:1f:91:95:36:bd:a3:78:4a:06: 52:41:fe:85:8d:c4:23:7d:5d:99:e6:34:ec:82:08: 07:43:e6:88:0f:0a:59:4b:5d:b8:30:8a:d6:e8:9c: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A5:61:CB:98:FE:7C:92:DF:80:A2:5B:CF:78:64:25:E0:3E:AE:33 X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9d:69:81:0d:51:54:4e:22:f5:0a:50:78:ed:bd:a1:73:1d: ae:45:25:de:b1:bd:56:49:81:88:22:97:c2:e9:fe:34:de:a6: 89:78:93:2c:97:1b:a6:3b:af:3c:94:50:7b:85:aa:ba:9c:02: 59:84:21:69:80:02:b2:70:6b:79:3e:c8:f5:18:b4:df:84:7d: a6:f5:b2:ab:20:c5:e3:46:9d:4c:42:be:8f:d0:32:c6:92:eb: 6d:cd:d0:2d:07:0d:d0:d1:b0:69:b7:3b:d3:9f:a4:77:fe:ef: 67:04:33:1a:26:f2:d5:bb:ee:04:49:28:65:18:88:25:74:e7: cf:99:d5:19:a5:a3:cf:9d:df:c4:6b:cb:47:aa:3e:4d:8b:8e: b5:f3:1d:a9:e4:73:3f:80:42:5b:a6:3b:92:ff:56:89:8f:48: fd:c6:cc:1d:35:b3:6d:ae:6d:4f:72:e4:0b:31:f9:04:9f:9d: 4e:35:93:03:54:32:e1:d3:5e:3c:98:9d:bf:e2:0a:08:0d:7d: ed:41:9c:9f:86:58:28:0c:96:13:7d:d6:e7:8f:76:09:04:38: 2e:5c:92:ac:9b:5b:9e:35:c0:27:9a:9c:09:04:85:b1:e2:9d: 73:88:0b:ec:2f:22:03:61:9b:e5:35:cb:b6:7c:39:15:f2:e9: ae:09:2a:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjYwMzI1MDEyMDQ3WhcNMjYwNDAxMDEyMDQ3WjAYMRYwFAYD VQQDEw02OWMzMzg2Zi1hMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiww4lLswsE/RHCFLEzSaOx8zZ9h9a8aXl+LgEaguACPDJVTVZF+2tG0+M63G qPhDG+82FPIQxfy3hVmSfzyNTvk+qTQbC78Y4DfiSFMf3DkbNLjQ/0YT3HSyAnH5 8bgPJw521Z9D5OHw8h1jSdkliZ/RtShg16Pf5kfzwpVckHcvce6uDZrlKd6fTZEu c6UnLJLYReN9ypKSrRtEQNxtJUfYaoPSskj0xyfAUb8Md2uwgeIwIi98D0nJU9xM tIay2A1hJoGYG0v+ERam85DDhl/qRZs52DAfkZU2vaN4SgZSQf6FjcQjfV2Z5jTs gggHQ+aIDwpZS124MIrW6JyYEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMylYcuY /nyS34CiW894ZCXgPq4zMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARp1pgQ1RVE4i9QpQeO29oXMdrkUl3rG9VkmBiCKXwun+NN6miXiTLJcbpjuv PJRQe4WqupwCWYQhaYACsnBreT7I9Ri034R9pvWyqyDF40adTEK+j9AyxpLrbc3Q LQcN0NGwabc705+kd/7vZwQzGiby1bvuBEkoZRiIJXTnz5nVGaWjz53fxGvLR6o+ TYuOtfMdqeRzP4BCW6Y7kv9WiY9I/cbMHTWzba5tT3LkCzH5BJ+dTjWTA1Qy4dNe PJidv+IKCA197UGcn4ZYKAyWE33W5492CQQ4LlySrJtbnjXAJ5qcCQSFseKdc4gL 7C8iA2Gb5TXLtnw5FfLprgkqSg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:44 2026 by rpki-client