$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: ABElz+qOy2hbT/+++5cSD4C612QDxcw+yx1FcxL+Cag= Subject key identifier: 65:C0:DE:65:60:C3:40:51:43:50:C1:92:B1:C9:1E:81:2E:12:0F:EC Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 0289 Signing time: Wed 25 Mar 2026 01:14:19 +0000 Manifest this update: Wed 25 Mar 2026 01:14:19 +0000 Manifest next update: Wed 01 Apr 2026 01:14:19 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: 6zuQTLqyhz32cHNfAX9sOAfsHyU1Iek81vC5YaCetsQ=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: JEoXZriBqJJhzP1nkyHSHN9MJNXjkBusjNVR9oT/r4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: Mar 25 01:14:19 2026 GMT Not After : Apr 1 01:14:19 2026 GMT Subject: CN=69c336eb-f777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:cd:ca:91:5f:77:c1:b1:47:f5:4a:c5:e1: a9:a9:bf:4c:f3:20:3e:b5:a5:64:ab:dc:1c:ec:da: 21:01:44:8c:4c:1c:d2:e9:97:86:31:6a:c4:3d:61: f8:48:5d:f6:21:cc:a3:9d:4e:de:5b:70:0e:a7:05: d3:37:fb:bf:e1:cc:52:1e:ce:64:30:84:21:79:93: 64:84:74:55:4f:11:5f:a9:91:53:54:1b:7d:e0:b5: 87:2c:9a:ee:37:fe:27:83:00:49:ce:f0:4a:13:23: 16:3e:81:0d:87:2c:74:98:bc:85:a4:ed:35:61:38: 28:03:b1:c7:05:d4:d1:88:ee:3a:7a:79:1a:bb:01: 5a:a5:65:02:0b:25:2e:86:dc:82:33:bf:9a:19:da: c1:28:d1:d5:40:de:47:08:6b:d7:b4:b0:e8:b4:16: 34:2a:2b:a9:7b:49:03:c0:90:fc:82:f5:80:a6:64: 4e:37:5f:89:58:a0:f3:83:f8:7c:85:6e:ef:61:52: 99:9a:6d:1e:4a:4f:1d:33:17:95:bc:67:08:ce:a5: a7:f3:21:ad:c1:ce:ca:2d:0b:50:91:21:b1:64:34: a6:e5:42:99:58:6f:15:45:35:73:85:c6:58:07:46: 1f:13:55:f6:48:db:dc:52:76:aa:94:61:5d:ed:ed: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C0:DE:65:60:C3:40:51:43:50:C1:92:B1:C9:1E:81:2E:12:0F:EC X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:05:af:4e:5a:ef:95:15:2e:d1:90:61:ef:08:d3:18:b4: a1:71:df:4c:61:47:bd:f7:35:2a:75:c0:1b:8e:5f:a8:45:2d: f1:46:1b:ae:04:d8:7d:72:6b:b1:49:f2:ee:99:20:ce:08:e5: ea:f2:dc:87:64:5f:4b:33:dc:20:1e:83:5f:69:e5:3f:cf:e9: 48:a0:94:b3:c2:54:be:6c:19:d1:a3:fb:b5:a1:7b:4f:9a:ec: e7:aa:76:08:64:5b:cb:53:80:33:58:79:1c:c0:0a:83:95:38: 0d:c3:2c:83:70:63:9c:32:ba:01:8e:4f:da:48:37:50:69:2a: f2:1d:c3:e5:b8:c7:69:e3:f8:96:d4:15:da:73:2f:fa:fd:45: d3:dc:72:54:b5:16:f7:d0:ba:30:3b:bb:66:3d:8e:d8:b3:55: 95:5e:de:0d:55:38:ca:f4:bc:0b:3f:70:f5:bc:4c:06:c3:39: b0:45:ee:0c:64:03:48:b0:a4:ab:9c:99:10:bc:4b:8d:54:5d: 56:ef:b2:b8:a9:ab:15:2c:25:58:c2:6b:6b:35:03:05:46:da: 16:42:e6:79:c6:cc:65:26:b6:60:d8:f4:97:ed:0a:3b:fc:7d: fb:9c:c5:ad:d4:9d:f5:e6:f8:fe:b0:3f:bc:77:61:d0:60:52: 75:03:e8:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjYwMzI1MDExNDE5WhcNMjYwNDAxMDExNDE5WjAYMRYwFAYD VQQDEw02OWMzMzZlYi1mNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2PNypFfd8GxR/VKxeGpqb9M8yA+taVkq9wc7NohAUSMTBzS6ZeGMWrEPWH4 SF32IcyjnU7eW3AOpwXTN/u/4cxSHs5kMIQheZNkhHRVTxFfqZFTVBt94LWHLJru N/4ngwBJzvBKEyMWPoENhyx0mLyFpO01YTgoA7HHBdTRiO46enkauwFapWUCCyUu htyCM7+aGdrBKNHVQN5HCGvXtLDotBY0Kiupe0kDwJD8gvWApmRON1+JWKDzg/h8 hW7vYVKZmm0eSk8dMxeVvGcIzqWn8yGtwc7KLQtQkSGxZDSm5UKZWG8VRTVzhcZY B0YfE1X2SNvcUnaqlGFd7e3PcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXA3mVg w0BRQ1DBkrHJHoEuEg/sMB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIoMFr05a75UVLtGQYe8I0xi0oXHfTGFHvfc1KnXAG45fqEUt8UYbrgTYfXJr sUny7pkgzgjl6vLch2RfSzPcIB6DX2nlP8/pSKCUs8JUvmwZ0aP7taF7T5rs56p2 CGRby1OAM1h5HMAKg5U4DcMsg3BjnDK6AY5P2kg3UGkq8h3D5bjHaeP4ltQV2nMv +v1F09xyVLUW99C6MDu7Zj2O2LNVlV7eDVU4yvS8Cz9w9bxMBsM5sEXuDGQDSLCk q5yZELxLjVRdVu+yuKmrFSwlWMJrazUDBUbaFkLmecbMZSa2YNj0l+0KO/x9+5zF rdSd9eb4/rA/vHdh0GBSdQPo4Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:30:03 2026 by rpki-client