$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: 1QTIgIH90h8nf1bLHtuKIWdvwDk7bl3nLo4YME1N9/c= Subject key identifier: 5C:43:F0:EE:B5:DF:72:D2:20:00:D2:11:00:C9:1E:19:67:D2:9A:0C Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 47 Signing time: Wed 25 Mar 2026 07:30:41 +0000 Manifest this update: Wed 25 Mar 2026 07:30:41 +0000 Manifest next update: Wed 01 Apr 2026 07:30:41 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: 3xLHgWqTPrt36aOGweIoMq2VlYGlxBWFX/Po2k8vV4o=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Mar 25 07:30:41 2026 GMT Not After : Apr 1 07:30:41 2026 GMT Subject: CN=69c38f21-ce4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:7d:8d:00:ba:ef:d6:be:e5:58:10:d6:8e: 94:36:5f:f4:1c:10:c3:8d:44:89:f7:b8:3c:52:b4: 39:dc:3b:e8:9c:bb:c6:4d:5d:a3:6d:4c:56:67:3a: ad:9f:8a:a5:fa:3c:df:fb:79:8c:38:9f:1b:11:d4: f4:3f:a0:a3:0d:37:a6:a8:f5:0e:1d:44:b0:3b:48: 83:ff:7e:e3:ae:b1:c3:be:33:56:d2:6a:c1:8c:7a: ab:29:09:3f:50:0a:ae:8e:39:6a:8b:a4:9b:1e:62: 0d:d1:fc:f9:93:00:ac:43:09:34:f9:44:b1:17:41: 96:f9:e3:c5:59:ca:86:26:96:ee:72:81:89:6b:cd: aa:da:bb:92:63:69:70:1d:18:2e:ca:cd:cb:c6:1e: 84:0a:78:6a:a4:5e:c1:8b:fa:1f:2d:09:f8:74:92: bb:76:7b:01:f0:70:42:18:20:3a:90:ff:3e:c5:1d: 2e:77:ab:dc:0f:4b:65:df:94:a7:d8:6c:9c:e3:c7: e4:6a:04:a6:da:86:e9:4f:9b:00:fb:31:6d:1f:b7: d2:0f:75:cd:8e:e8:0f:d3:04:4d:25:cf:10:cd:c2: 23:54:d2:46:58:68:a5:bc:60:a1:67:6e:c7:1c:c6: 6c:bc:43:12:0b:73:6a:39:b7:9b:87:ce:87:b0:7f: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:F0:EE:B5:DF:72:D2:20:00:D2:11:00:C9:1E:19:67:D2:9A:0C X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:d5:1a:3e:01:9e:1d:d4:40:8d:1f:37:ea:c5:40:56:9f: 30:07:4c:1b:ee:28:46:f8:52:bd:62:bc:b5:d6:f6:84:78:94: b1:a2:75:c7:14:e7:86:1c:eb:c3:0d:a5:69:42:da:0c:42:46: d8:38:16:a9:0e:42:3f:83:5b:ce:b0:3b:92:1f:da:be:fa:fc: d3:0d:d5:c5:61:a8:62:10:72:c8:b7:05:c7:92:76:00:83:b1: 99:f5:bb:70:40:de:29:4e:17:7a:57:b9:f3:f1:29:10:91:74: 0b:51:13:be:5d:f8:77:07:d5:3e:65:ef:f1:fb:e2:20:4b:03: f9:8c:82:0e:4d:df:e2:25:66:52:ff:2e:65:7f:98:0e:bb:e6: 23:65:fb:a5:06:7c:d9:db:17:f2:35:a3:4f:81:2e:e1:5e:cd: 29:4d:d7:99:75:69:79:64:4f:f4:d9:2f:85:51:23:21:5a:a6: 4a:04:6c:84:88:8c:bb:93:08:fe:f7:84:99:a3:33:99:01:6a: 9f:3e:31:63:c6:4f:dd:0d:51:56:33:f0:c6:29:c8:d0:15:3a: 21:01:2a:91:5e:f5:17:43:7f:14:d0:19:f0:f1:91:20:6a:e1: 64:e2:50:ae:50:48:f3:5a:46:6b:f6:23:d1:3b:56:85:aa:d7: 36:b7:87:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNjAzMjUwNzMwNDFaFw0yNjA0MDEwNzMwNDFaMBgxFjAUBgNV BAMTDTY5YzM4ZjIxLWNlNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Cn2NALrv1r7lWBDWjpQ2X/QcEMONRIn3uDxStDncO+icu8ZNXaNtTFZnOq2f iqX6PN/7eYw4nxsR1PQ/oKMNN6ao9Q4dRLA7SIP/fuOuscO+M1bSasGMeqspCT9Q Cq6OOWqLpJseYg3R/PmTAKxDCTT5RLEXQZb548VZyoYmlu5ygYlrzarau5JjaXAd GC7KzcvGHoQKeGqkXsGL+h8tCfh0krt2ewHwcEIYIDqQ/z7FHS53q9wPS2XflKfY bJzjx+RqBKbahulPmwD7MW0ft9IPdc2O6A/TBE0lzxDNwiNU0kZYaKW8YKFnbscc xmy8QxILc2o5t5uHzoewf/UTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXEPw7rXf ctIgANIRAMkeGWfSmgwwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQs9UaPgGeHdRAjR836sVAVp8wB0wb7ihG+FK9Yry11vaEeJSxonXHFOeGHOvD DaVpQtoMQkbYOBapDkI/g1vOsDuSH9q++vzTDdXFYahiEHLItwXHknYAg7GZ9btw QN4pThd6V7nz8SkQkXQLURO+Xfh3B9U+Ze/x++IgSwP5jIIOTd/iJWZS/y5lf5gO u+YjZfulBnzZ2xfyNaNPgS7hXs0pTdeZdWl5ZE/02S+FUSMhWqZKBGyEiIy7kwj+ 94SZozOZAWqfPjFjxk/dDVFWM/DGKcjQFTohASqRXvUXQ38U0Bnw8ZEgauFk4lCu UEjzWkZr9iPRO1aFqtc2t4et -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:02 2026 by rpki-client