$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json) Hash identifier: KTRiMSM7oEtrthtGMseov8oSEQC8F6ZRbUaQ6h3/Ybw= Subject key identifier: ED:10:E7:95:E0:85:62:05:F3:D4:9E:E0:FA:3B:8C:1A:0E:02:37:57 Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft Manifest number: 2177 Signing time: Thu 26 Mar 2026 15:54:46 +0000 Manifest this update: Thu 26 Mar 2026 15:54:45 +0000 Manifest next update: Thu 02 Apr 2026 15:54:45 +0000 Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: z3GmW3EiGyn9wIU2V5xfmGJCaO84L9TqMeDTzilKg00=) 2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: Vr+OkUJiOpOJbbcgen6Edgd3bJ5gBqJRbgUPVMaT334=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8600 (0x2198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Mar 26 15:54:45 2026 GMT Not After : Apr 2 15:54:45 2026 GMT Subject: CN=69c556c6-afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:7b:e2:f0:6c:3c:04:a2:cf:16:9a:a7:94: 9c:74:ea:1e:e5:48:7f:82:49:cf:92:4d:7d:7e:c0: f2:8b:35:c7:fa:09:3c:2d:d5:5b:d7:8d:8f:df:8a: 2b:c5:a5:ee:ac:70:c6:e5:ba:bb:5c:b7:c0:bc:26: c5:1c:e4:25:3c:e9:5e:28:b1:72:6c:2b:6a:60:d1: 1a:4d:61:01:da:7b:62:f9:0e:f7:af:28:aa:d9:6d: 24:2b:a9:80:9d:86:fa:77:74:5e:7b:fe:a6:f8:05: a0:8e:61:d7:56:2a:e9:c1:1f:50:f1:a0:19:f4:9b: 0b:ab:5c:3f:fb:f6:07:33:dd:17:a5:6f:55:db:fe: c8:28:0b:58:b8:7a:db:81:0e:97:ad:1c:64:18:78: 85:69:c8:a5:87:61:81:66:30:e7:5c:b4:f8:2e:64: f0:f2:c1:78:30:2d:ac:20:18:cc:68:e3:b8:b4:cd: e3:88:43:85:6a:f1:2e:90:1f:a1:f0:3f:0b:22:2a: 99:56:2d:cf:95:0c:b9:4d:69:49:56:28:ff:54:e7: ae:76:04:24:18:61:ba:da:d4:06:23:b7:65:70:d9: 68:bd:b6:ec:d3:87:0e:61:a7:dd:40:11:83:7c:43: 77:0c:14:ea:7d:ca:5a:36:e2:fc:2d:40:cc:da:2f: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:10:E7:95:E0:85:62:05:F3:D4:9E:E0:FA:3B:8C:1A:0E:02:37:57 X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:78:e6:c8:d9:6a:9f:62:1d:43:33:a4:91:72:e6:73:31: c7:dc:2d:85:8f:e0:02:e2:f1:c3:21:34:67:36:a7:50:d5:cb: 59:0e:31:6b:77:c2:4c:11:2f:07:53:8b:51:4c:62:f9:d3:56: 49:d3:b8:b3:70:ea:cb:94:08:39:6b:2e:77:df:7b:33:1a:1a: 2d:4d:4b:04:ee:d8:a3:f2:b5:29:59:d5:ee:46:5b:70:e6:71: 72:31:fd:b1:0d:a4:b6:30:3b:f7:f1:6b:56:47:40:89:ed:69: 6c:c6:db:02:23:b6:4e:0c:0c:82:2d:af:15:56:36:fb:22:ae: 91:e6:0e:a9:39:df:e0:72:26:df:4d:25:65:c0:4d:c9:a9:d6: d3:0b:2b:7f:56:41:eb:2c:a1:0a:76:70:a1:45:8a:ac:57:1b: dc:11:57:76:e4:53:65:3a:ac:01:bb:70:d2:0e:2c:e5:e0:f4: 90:a7:b1:95:fd:cb:fa:66:5d:eb:49:9c:05:85:ce:32:e1:49: fb:4b:85:fd:8b:5c:47:07:0c:c7:86:02:b9:8c:78:c5:f3:d6: 03:f9:11:6f:e7:6a:2b:ca:dc:0d:62:46:77:58:d1:b4:1c:a3: 18:fa:1d:a6:73:46:5c:91:2c:b7:ef:6b:6c:83:9e:d4:16:21: 0a:35:7e:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjYwMzI2MTU1NDQ1WhcNMjYwNDAyMTU1NDQ1WjAYMRYwFAYD VQQDEw02OWM1NTZjNi1hZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9d74vBsPASizxaap5ScdOoe5Uh/gknPkk19fsDyizXH+gk8LdVb142P34or xaXurHDG5bq7XLfAvCbFHOQlPOleKLFybCtqYNEaTWEB2nti+Q73ryiq2W0kK6mA nYb6d3Ree/6m+AWgjmHXVirpwR9Q8aAZ9JsLq1w/+/YHM90XpW9V2/7IKAtYuHrb gQ6XrRxkGHiFacilh2GBZjDnXLT4LmTw8sF4MC2sIBjMaOO4tM3jiEOFavEukB+h 8D8LIiqZVi3PlQy5TWlJVij/VOeudgQkGGG62tQGI7dlcNlovbbs04cOYafdQBGD fEN3DBTqfcpaNuL8LUDM2i8YPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0Q55Xg hWIF89Se4Po7jBoOAjdXMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT MS1DMTZZRFBrZHZmMHJ0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfe145sjZap9iHUMzpJFy5nMxx9wthY/gAuLxwyE0ZzanUNXLWQ4xa3fCTBEv B1OLUUxi+dNWSdO4s3Dqy5QIOWsud997MxoaLU1LBO7Yo/K1KVnV7kZbcOZxcjH9 sQ2ktjA79/FrVkdAie1pbMbbAiO2TgwMgi2vFVY2+yKukeYOqTnf4HIm300lZcBN yanW0wsrf1ZB6yyhCnZwoUWKrFcb3BFXduRTZTqsAbtw0g4s5eD0kKexlf3L+mZd 60mcBYXOMuFJ+0uF/YtcRwcMx4YCuYx4xfPWA/kRb+dqK8rcDWJGd1jRtByjGPod pnNGXJEst+9rbIOe1BYhCjV+Lw== -----END CERTIFICATE-----Generated at Fri Mar 27 08:10:58 2026 by rpki-client