$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: ewyUs522QIze7rWEN9i5Efb4mKYvvRru+lMv6mtSG3c= Subject key identifier: ED:5C:5A:58:CF:0C:57:A8:7A:31:59:C1:5A:89:99:68:4F:D5:F7:12 Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: 0134 Signing time: Wed 25 Mar 2026 04:45:19 +0000 Manifest this update: Wed 25 Mar 2026 04:45:18 +0000 Manifest next update: Wed 01 Apr 2026 04:45:18 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: Fi7KtdSYnvYjhmrp9gPuO6c0D/JprFqNPfnv5Y8x44o=) 2: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=) 3: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: Mar 25 04:45:18 2026 GMT Not After : Apr 1 04:45:18 2026 GMT Subject: CN=69c3685f-9cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:14:85:d7:a6:3a:6d:87:12:50:37:fc:f4:19: ec:dd:d6:67:73:09:c5:5d:13:59:cf:c2:0b:ea:58: 8b:89:d1:73:bf:85:17:ac:3a:d0:44:4a:89:58:13: 3f:d0:24:da:21:22:8c:c3:38:81:6c:77:58:97:19: ed:38:f0:f5:ae:26:70:96:91:42:53:db:d4:ed:5d: f6:eb:5c:80:49:cc:ee:86:e3:4f:5a:32:31:ca:c2: 6d:cf:14:c6:30:73:7b:14:d1:6b:74:0a:dc:f7:2d: 8b:17:a7:b7:c9:1c:ca:ac:2d:bd:16:7e:ca:6e:99: 67:e8:21:f7:d2:94:0a:7a:2b:0e:30:e4:6d:87:7a: 61:2f:a4:a3:59:85:08:3b:47:98:0f:84:f5:e2:f6: b1:e7:e9:3e:af:47:92:39:52:22:18:2a:91:22:af: e7:e2:c0:b9:24:89:a8:11:98:e0:c7:af:da:99:fd: b8:4e:40:1c:66:46:4d:1b:50:78:d1:c5:3f:75:0c: 4a:79:10:65:b8:83:6b:c0:c5:64:4d:a5:7b:a2:e0: b8:53:d2:87:c7:23:52:a9:da:43:fd:b8:98:3d:ce: 4e:7d:f6:0e:df:0b:03:f9:14:4d:b3:4c:8c:ba:92: 3e:0f:d4:56:d0:29:7f:df:fb:b6:aa:a6:90:7d:dd: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:5A:58:CF:0C:57:A8:7A:31:59:C1:5A:89:99:68:4F:D5:F7:12 X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:25:9c:d6:aa:e0:20:08:ea:9e:a3:5e:50:a7:b7:f7:72: dc:94:bd:69:e4:fb:78:f9:94:04:be:85:89:83:ba:e1:3d:a4: c3:7d:f4:79:f0:55:f4:f5:28:d8:c4:4e:18:91:46:c4:3b:4c: 56:70:4c:1a:a3:57:3e:e9:30:93:70:65:26:ed:e5:80:78:cc: 5d:e9:2b:33:57:b4:44:81:cd:5d:9c:7c:1a:e4:4f:50:71:19: 4d:db:1e:4c:6e:d6:3c:85:bc:eb:40:56:63:65:07:3b:8b:77: 0d:97:57:b7:c6:0c:84:57:7e:7c:f2:5a:d4:2c:ee:99:60:86: 18:6d:ce:62:d1:42:c2:ce:23:e8:65:ed:e8:0f:89:fb:be:85: 1d:41:7f:90:ad:22:6e:63:ff:2e:45:02:a7:f8:36:46:d2:3e: 83:44:56:46:e7:53:d8:64:ec:5f:20:35:b3:00:10:b5:8b:af: 70:5a:5b:b4:7d:a0:ed:97:ac:c5:87:4b:07:37:43:8c:5f:f9: 8f:ca:6d:73:d4:f8:4a:e8:3f:fe:fc:23:7e:b7:e8:e9:52:39: c7:ed:13:9c:35:1e:57:20:ef:b3:9d:41:23:20:27:b4:2f:51: 2a:b6:5f:d7:70:68:a4:e1:14:96:80:df:c1:40:0b:da:f4:b5: 27:b5:73:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjYwMzI1MDQ0NTE4WhcNMjYwNDAxMDQ0NTE4WjAYMRYwFAYD VQQDEw02OWMzNjg1Zi05Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hSF16Y6bYcSUDf89Bns3dZncwnFXRNZz8IL6liLidFzv4UXrDrQREqJWBM/ 0CTaISKMwziBbHdYlxntOPD1riZwlpFCU9vU7V3261yASczuhuNPWjIxysJtzxTG MHN7FNFrdArc9y2LF6e3yRzKrC29Fn7Kbpln6CH30pQKeisOMORth3phL6SjWYUI O0eYD4T14vax5+k+r0eSOVIiGCqRIq/n4sC5JImoEZjgx6/amf24TkAcZkZNG1B4 0cU/dQxKeRBluINrwMVkTaV7ouC4U9KHxyNSqdpD/biYPc5OffYO3wsD+RRNs0yM upI+D9RW0Cl/3/u2qqaQfd2yBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1cWljP DFeoejFZwVqJmWhP1fcSMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuF8lnNaq4CAI6p6jXlCnt/dy3JS9aeT7ePmUBL6FiYO64T2kw330efBV9PUo 2MROGJFGxDtMVnBMGqNXPukwk3BlJu3lgHjMXekrM1e0RIHNXZx8GuRPUHEZTdse TG7WPIW860BWY2UHO4t3DZdXt8YMhFd+fPJa1CzumWCGGG3OYtFCws4j6GXt6A+J +76FHUF/kK0ibmP/LkUCp/g2RtI+g0RWRudT2GTsXyA1swAQtYuvcFpbtH2g7Zes xYdLBzdDjF/5j8ptc9T4Sug//vwjfrfo6VI5x+0TnDUeVyDvs51BIyAntC9RKrZf 13BopOEUloDfwUAL2vS1J7VzEw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:27 2026 by rpki-client