$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: rUF9ZYtrInwkcomrop+7yNqokw7BPb5JufkiGgu9peU= Subject key identifier: 90:63:DB:1E:FE:FE:26:C3:FE:84:C6:05:B4:FB:9E:D9:ED:03:05:FB Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: E8 Signing time: Wed 25 Mar 2026 05:42:39 +0000 Manifest this update: Wed 25 Mar 2026 05:42:39 +0000 Manifest next update: Wed 01 Apr 2026 05:42:39 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: f8vug3JHtdE/e+DjRccTuuNra4u2cKgAl+ralBaPwqU=) 2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: ss0YI+B1lf1/HyieA54sjFtoYFYl3d3YUcG8i2TmMR4=) 3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: F7qe28PpA345V26FD2oUaMsUxza0CcnCGUsZQT4PC2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Mar 25 05:42:39 2026 GMT Not After : Apr 1 05:42:39 2026 GMT Subject: CN=69c375cf-bbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:f6:58:6f:70:b4:4d:57:ad:e0:e3:fb:97: 8e:1d:ea:c1:58:8e:7a:af:1e:60:66:58:a1:94:31: fd:ac:78:f8:99:73:43:5c:2a:76:bb:2c:41:23:36: 54:66:d1:4f:b0:ea:2b:2e:b5:7d:de:cd:7b:d2:c7: 74:3f:49:3d:2f:43:d9:86:73:a5:63:fb:49:68:fe: fa:5c:ac:4b:a2:cc:63:17:ba:b7:fb:3b:4d:94:be: d6:c7:94:ee:d0:25:88:f5:91:86:af:d0:51:06:0b: 7e:3a:42:7c:d7:ee:af:43:5d:f0:8b:c6:74:ea:5a: 7b:78:f6:87:5e:ef:ab:7c:7c:26:47:e3:80:04:96: b5:c2:3d:6e:de:be:ff:76:54:be:86:ca:c7:ac:5d: f7:7b:48:ca:ba:6c:51:f5:4a:a6:5f:3f:6c:01:db: a3:5f:16:f3:16:31:f9:4d:93:99:13:c4:81:4a:43: cf:e0:0e:e4:98:96:b4:34:a8:b4:af:b6:72:86:c1: a0:b6:c9:77:8f:77:45:ac:41:b1:4e:8d:78:98:cd: 48:61:b0:62:07:b9:05:c9:86:2d:e9:6c:da:24:49: 83:52:96:4c:6a:2b:eb:6a:a7:f2:30:0a:3c:b1:95: 75:72:f0:6e:15:e0:45:19:61:64:82:ce:b0:fe:bb: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:63:DB:1E:FE:FE:26:C3:FE:84:C6:05:B4:FB:9E:D9:ED:03:05:FB X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6b:cb:22:db:e6:a9:5a:1d:5f:e5:38:c3:08:16:69:c7:d7: c1:e1:97:3e:ff:0d:98:e9:37:3e:2c:06:49:c5:0d:81:ab:53: 06:9b:95:d5:71:8a:de:88:fc:88:b5:9e:bf:35:95:bd:e0:33: 8a:92:ac:fd:3e:98:11:48:de:75:89:cf:43:cc:66:bd:a2:9e: 1f:0e:32:c8:bb:3b:4c:68:2b:fd:77:42:ce:47:34:d0:a4:cc: 0f:17:21:d5:c0:c6:ab:ff:99:2e:0f:04:67:c7:0b:a1:bd:5c: a7:68:59:30:31:84:5c:43:ac:d6:94:dd:34:b2:bf:f2:f8:36: 78:af:4f:24:35:e7:f5:fd:45:54:4e:4d:19:7e:bc:e2:27:e1: 00:32:6e:58:d4:24:f4:bd:eb:03:35:79:11:d7:a3:16:96:d0: 29:44:29:3c:46:1e:ab:41:74:f1:cd:ca:ed:5c:e5:4f:77:fd: 65:0a:a9:16:0f:e0:1e:1a:6f:2f:85:0f:74:db:17:a5:e2:a8: 2f:a0:b8:44:22:40:de:7a:11:e1:85:18:20:26:c7:1c:73:1f: 2d:ae:dc:19:da:66:d6:6b:52:69:fc:ff:e0:1f:f4:d2:23:de: a9:3b:39:f6:84:bc:5d:04:20:4f:df:02:3f:6e:2a:e7:ee:e3: af:1a:25:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjYwMzI1MDU0MjM5WhcNMjYwNDAxMDU0MjM5WjAYMRYwFAYD VQQDEw02OWMzNzVjZi1iYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN/2WG9wtE1XreDj+5eOHerBWI56rx5gZlihlDH9rHj4mXNDXCp2uyxBIzZU ZtFPsOorLrV93s170sd0P0k9L0PZhnOlY/tJaP76XKxLosxjF7q3+ztNlL7Wx5Tu 0CWI9ZGGr9BRBgt+OkJ81+6vQ13wi8Z06lp7ePaHXu+rfHwmR+OABJa1wj1u3r7/ dlS+hsrHrF33e0jKumxR9UqmXz9sAdujXxbzFjH5TZOZE8SBSkPP4A7kmJa0NKi0 r7ZyhsGgtsl3j3dFrEGxTo14mM1IYbBiB7kFyYYt6WzaJEmDUpZMaivraqfyMAo8 sZV1cvBuFeBFGWFkgs6w/rviRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBj2x7+ /ibD/oTGBbT7ntntAwX7MB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHmvLItvmqVodX+U4wwgWacfXweGXPv8NmOk3PiwGScUNgatTBpuV1XGK3oj8 iLWevzWVveAzipKs/T6YEUjedYnPQ8xmvaKeHw4yyLs7TGgr/XdCzkc00KTMDxch 1cDGq/+ZLg8EZ8cLob1cp2hZMDGEXEOs1pTdNLK/8vg2eK9PJDXn9f1FVE5NGX68 4ifhADJuWNQk9L3rAzV5EdejFpbQKUQpPEYeq0F08c3K7VzlT3f9ZQqpFg/gHhpv L4UPdNsXpeKoL6C4RCJA3noR4YUYICbHHHMfLa7cGdpm1mtSafz/4B/00iPeqTs5 9oS8XQQgT98CP24q5+7jrxolAQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:28:22 2026 by rpki-client