$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: cAbTYrP9fl0uF2gJc8RVSnaJ/qprI3KUP6h6SCqBgSI= Subject key identifier: DA:75:C6:5E:07:1E:09:D6:D8:20:E8:78:9C:30:43:8E:DC:FB:AC:E3 Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: CF Signing time: Tue 07 Apr 2026 06:15:15 +0000 Manifest this update: Tue 07 Apr 2026 06:15:14 +0000 Manifest next update: Tue 14 Apr 2026 06:15:14 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: z6knSRpd7Cl9I8g30VPF9lLGlqhI9Y5kKaWKiH20s9U=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Apr 7 06:15:14 2026 GMT Not After : Apr 14 06:15:14 2026 GMT Subject: CN=69d4a0f3-15d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:a7:38:c4:c5:b5:e9:8d:87:46:8c:c2:8a: 40:fd:78:f9:71:fa:f2:d5:5c:ce:1b:cc:a6:1d:20: bf:61:26:89:26:9f:19:30:4e:d3:22:31:d3:a0:c1: 35:df:6f:36:14:cc:8f:cf:a7:80:cb:ab:da:eb:f4: 52:f3:d3:9c:ee:3b:7d:04:6f:09:88:aa:b9:1b:50: f3:4c:01:4c:68:d3:29:09:50:5f:91:15:8a:3d:93: 25:d0:88:46:36:14:2b:e5:66:67:fb:67:77:e9:e4: 48:38:11:4f:b0:dd:84:b9:59:0b:d5:46:5d:c4:7d: 6d:fc:24:49:d8:65:fc:f8:33:f5:98:30:41:f9:9c: 1d:cb:fd:d1:81:66:69:fc:82:d3:e4:7e:b3:a9:6b: d8:bd:86:3b:d5:54:6d:1a:9c:a1:55:dd:5d:64:58: ed:d9:65:0e:c9:a3:3c:47:75:0a:05:a9:38:a8:ef: 72:e6:da:9d:71:47:20:5a:7d:9d:4a:3b:a5:5e:8c: dd:68:97:18:a4:25:49:0a:97:6e:32:9e:d9:c3:ef: 55:64:0b:2d:a9:8e:25:66:32:b7:bc:fa:4f:6a:3d: 66:7d:07:1b:a9:5f:2f:6f:0b:1d:4a:56:81:ef:b3: 37:ce:86:89:9d:d6:9a:fa:63:89:15:3e:09:89:f3: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:C6:5E:07:1E:09:D6:D8:20:E8:78:9C:30:43:8E:DC:FB:AC:E3 X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:35:df:84:87:38:3a:3a:7f:fe:3d:a2:c4:62:e9:60:f8: 7e:b1:0d:64:9c:64:dc:1c:48:74:fc:5a:dd:8b:66:df:78:a3: f1:db:a0:37:ca:88:96:eb:71:d3:e4:f4:62:a3:35:84:54:96: 09:13:ee:29:d1:04:7b:a2:f1:fa:8a:31:c5:ea:c5:5e:16:98: 07:e8:9b:d1:25:b7:29:83:24:02:ca:5c:5b:c1:18:c9:d6:61: d8:cf:d9:ce:44:8e:21:28:d7:99:8f:d3:82:95:a9:22:d1:ca: 22:81:1a:95:6f:c0:a4:15:5e:b6:33:12:4f:99:d1:3f:dc:29: 2a:9b:90:ff:0d:6c:39:6a:3c:50:50:96:47:90:46:d9:af:39: 6e:73:48:ad:cb:27:d7:8c:2d:aa:9a:58:ed:39:85:78:e3:73: cf:c9:31:00:76:d5:08:4b:92:5b:f0:7f:06:f0:24:34:c8:fe: 61:19:5e:bc:a3:a9:58:0d:24:6f:2e:e4:fb:3c:80:4d:62:70: d6:9f:e2:4e:b4:f3:5c:f7:b7:3e:24:ae:9f:32:42:9c:8e:ea: fa:7f:6d:13:5a:49:e5:d3:7e:74:46:89:33:b5:ea:d4:85:79: 74:b3:b3:43:c7:82:6e:6d:0b:22:8d:90:9c:80:47:44:0c:cd: b2:83:8e:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE MjBFNjlBMjQwHhcNMjYwNDA3MDYxNTE0WhcNMjYwNDE0MDYxNTE0WjAYMRYwFAYD VQQDEw02OWQ0YTBmMy0xNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCSnOMTFtemNh0aMwopA/Xj5cfry1VzOG8ymHSC/YSaJJp8ZME7TIjHToME1 3282FMyPz6eAy6va6/RS89Oc7jt9BG8JiKq5G1DzTAFMaNMpCVBfkRWKPZMl0IhG NhQr5WZn+2d36eRIOBFPsN2EuVkL1UZdxH1t/CRJ2GX8+DP1mDBB+Zwdy/3RgWZp /ILT5H6zqWvYvYY71VRtGpyhVd1dZFjt2WUOyaM8R3UKBak4qO9y5tqdcUcgWn2d SjulXozdaJcYpCVJCpduMp7Zw+9VZAstqY4lZjK3vPpPaj1mfQcbqV8vbwsdSlaB 77M3zoaJndaa+mOJFT4JifP2KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNp1xl4H HgnW2CDoeJwwQ47c+6zjMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB TmZfNHh4empXZVhTRG1taVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuE134SHODo6f/49osRi6WD4frENZJxk3BxIdPxa3Ytm33ij8dugN8qIlutx 0+T0YqM1hFSWCRPuKdEEe6Lx+ooxxerFXhaYB+ib0SW3KYMkAspcW8EYydZh2M/Z zkSOISjXmY/TgpWpItHKIoEalW/ApBVetjMST5nRP9wpKpuQ/w1sOWo8UFCWR5BG 2a85bnNIrcsn14wtqppY7TmFeONzz8kxAHbVCEuSW/B/BvAkNMj+YRlevKOpWA0k by7k+zyATWJw1p/iTrTzXPe3PiSunzJCnI7q+n9tE1pJ5dN+dEaJM7Xq1IV5dLOz Q8eCbm0LIo2QnIBHRAzNsoOOEA== -----END CERTIFICATE-----Generated at Tue Apr 7 23:34:24 2026 by rpki-client