$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: UoL680whj5YJXCDQvtdiAv7DmTLI3s4ip6UB8R7ekO8= Subject key identifier: EC:28:5D:57:83:27:E7:B4:11:05:41:70:70:A0:34:E9:20:46:F5:E5 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0A8A Signing time: Tue 24 Mar 2026 19:21:26 +0000 Manifest this update: Tue 24 Mar 2026 19:21:26 +0000 Manifest next update: Tue 31 Mar 2026 19:21:26 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: G6uK6PNmeig042MAlbqOIl1T/6eRjmAo5/xbkIm+zTM=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0tnUQM8nUOKmP6zcIR5mibnCQ76vuNJWrUF9kNBfQsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Mar 24 19:21:26 2026 GMT Not After : Mar 31 19:21:26 2026 GMT Subject: CN=69c2e436-e377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:04:77:f3:8c:db:6c:9b:27:9c:04:e6:f7: 71:4b:8c:46:18:14:f0:f2:ac:2e:42:32:82:c1:8f: 9c:98:55:8b:e1:9f:af:88:6c:08:d3:c3:99:a1:b6: 7f:fc:7b:11:88:30:de:b3:4f:ae:89:1c:84:11:4e: 72:2d:7b:80:43:b7:05:1f:e3:e8:69:86:90:3b:ee: 94:bd:0f:56:c1:94:e3:38:23:6b:f7:44:91:9a:c1: 11:8d:64:02:a6:35:83:49:f4:28:0a:88:e9:a2:4e: 83:57:3b:28:94:6e:59:b5:05:74:39:73:67:3d:0e: 00:cf:e6:2c:be:32:f7:56:f1:74:31:3f:10:6b:cc: 77:80:f7:5a:f9:27:6a:30:2c:fa:f0:52:ea:1f:66: 63:95:f3:09:ce:a5:d4:af:7c:77:7f:e3:6c:f3:0c: c7:e7:0c:c2:d7:0d:9b:62:c8:d5:57:45:e1:de:11: 60:61:b3:3d:72:3a:ef:57:af:c4:cb:ec:4a:f7:f8: 40:e8:39:96:62:5f:16:58:75:78:bf:b3:71:67:50: 0e:58:1a:51:0d:31:f0:a4:6a:e7:43:a5:4a:f1:00: fe:c0:1e:dc:42:f3:ef:d1:89:78:35:5a:b3:54:53: d5:ce:5e:e0:b1:e0:0e:f4:d4:57:4b:f5:11:ca:f3: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:5D:57:83:27:E7:B4:11:05:41:70:70:A0:34:E9:20:46:F5:E5 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:5e:8a:9b:c4:0c:03:99:9a:46:cf:00:b5:2c:6c:6d:a5: 34:60:94:3f:b1:87:30:2a:e8:65:e9:7b:51:6f:6e:22:b4:bb: 90:95:ea:10:d4:cb:33:7d:d7:50:17:fd:91:ea:b6:b9:dc:ea: 1a:f8:8e:24:cd:a5:db:c8:be:cb:c8:e6:d8:9c:a3:a7:00:2e: 04:47:9a:ae:e9:f4:60:33:33:03:4c:ce:bd:cb:df:7a:73:86: 3e:92:38:d1:1f:8a:d3:94:97:c7:3c:f2:68:30:a9:3f:44:3c: 1e:b5:98:1d:a4:7b:3b:48:1f:1f:7e:01:e5:e4:7c:84:54:96: 98:62:d0:0a:c4:d1:11:27:36:bb:ed:02:e7:ca:17:ec:64:52: e3:0d:47:d0:57:0c:0c:34:06:c7:f4:7f:26:67:ce:53:31:56: ed:f2:ef:b1:a9:f7:fc:fb:d7:2a:0b:b5:a0:17:4d:d8:13:af: e4:0b:dc:94:e9:aa:cc:b0:a1:4b:d9:a1:49:ba:0c:51:be:17: 48:c2:b9:0f:b4:85:5b:ab:3a:85:0e:ca:81:51:2a:79:fe:53: ea:71:c7:c9:74:87:03:72:b3:ec:83:f3:f7:bd:c5:16:55:59: 66:41:4d:52:a5:26:f2:c2:c9:fe:3b:d9:7f:77:cf:0b:66:3d: bd:87:bf:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjYwMzI0MTkyMTI2WhcNMjYwMzMxMTkyMTI2WjAYMRYwFAYD VQQDEw02OWMyZTQzNi1lMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLoEd/OM22ybJ5wE5vdxS4xGGBTw8qwuQjKCwY+cmFWL4Z+viGwI08OZobZ/ /HsRiDDes0+uiRyEEU5yLXuAQ7cFH+PoaYaQO+6UvQ9WwZTjOCNr90SRmsERjWQC pjWDSfQoCojpok6DVzsolG5ZtQV0OXNnPQ4Az+YsvjL3VvF0MT8Qa8x3gPda+Sdq MCz68FLqH2ZjlfMJzqXUr3x3f+Ns8wzH5wzC1w2bYsjVV0Xh3hFgYbM9cjrvV6/E y+xK9/hA6DmWYl8WWHV4v7NxZ1AOWBpRDTHwpGrnQ6VK8QD+wB7cQvPv0Yl4NVqz VFPVzl7gseAO9NRXS/URyvMY8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwoXVeD J+e0EQVBcHCgNOkgRvXlMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlvReipvEDAOZmkbPALUsbG2lNGCUP7GHMCroZel7UW9uIrS7kJXqENTLM33X UBf9keq2udzqGviOJM2l28i+y8jm2JyjpwAuBEearun0YDMzA0zOvcvfenOGPpI4 0R+K05SXxzzyaDCpP0Q8HrWYHaR7O0gfH34B5eR8hFSWmGLQCsTRESc2u+0C58oX 7GRS4w1H0FcMDDQGx/R/JmfOUzFW7fLvsan3/PvXKgu1oBdN2BOv5AvclOmqzLCh S9mhSboMUb4XSMK5D7SFW6s6hQ7KgVEqef5T6nHHyXSHA3Kz7IPz973FFlVZZkFN UqUm8sLJ/jvZf3fPC2Y9vYe/ew== -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:14 2026 by rpki-client