$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: MwddW3fMUf7EqBKAvDt/vKq71xDhUcQ3m1lWfnWMDGM= Subject key identifier: 8F:BB:71:13:DA:B9:FA:C3:06:24:EB:C6:C0:BA:F6:56:EA:5F:93:16 Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 0C Signing time: Sat 07 Mar 2026 08:22:47 +0000 Manifest this update: Sat 07 Mar 2026 08:22:47 +0000 Manifest next update: Sat 14 Mar 2026 08:22:47 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: PzE68BCjPEeoQYc0GRQ/4wkXuotXzs+pVS0YvCwf+Jc=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: Mar 7 08:22:47 2026 GMT Not After : Mar 14 08:22:47 2026 GMT Subject: CN=69abe057-a2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:f5:82:49:71:59:8a:d7:cb:ba:b3:75:17: 88:44:f6:61:3a:95:b0:ca:c8:fe:80:b8:00:5e:c7: 24:70:97:cf:4d:45:4c:e8:24:67:33:4f:3f:ff:3e: a8:8e:b6:76:27:51:87:96:91:6b:a8:11:49:f0:72: fa:30:9c:40:65:9a:2b:02:ff:da:ff:ce:59:ac:16: 6c:cf:aa:15:44:5f:9c:1d:dc:af:99:1c:b3:46:58: dc:6d:06:5a:69:53:3b:7c:34:85:89:3b:1f:24:a7: 31:db:a0:02:c2:64:55:23:83:17:0c:2f:04:14:c7: be:bd:74:d0:b4:6d:a9:e5:ca:a2:ba:55:6b:97:82: fe:5e:03:d4:5f:5d:3b:59:2d:4c:b4:55:2f:c5:81: 46:ca:4d:47:c1:1d:07:eb:e0:65:98:98:e4:89:61: 3c:39:b5:71:e0:f3:07:6f:92:5b:8c:42:b7:f7:96: a8:64:e5:a0:35:19:6f:cf:fe:4d:6c:e3:f4:d8:01: f4:82:ad:93:3d:33:3f:8f:9c:e0:ca:3d:2d:b3:a6: d2:0a:5e:4a:d1:14:c6:f7:3b:66:08:d2:b4:74:50: f7:6d:6b:fe:8a:39:6f:f5:4e:2d:fc:91:52:dd:a2: b2:1e:69:ba:70:86:cc:f1:7a:e3:ab:d3:e0:46:d0: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BB:71:13:DA:B9:FA:C3:06:24:EB:C6:C0:BA:F6:56:EA:5F:93:16 X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b0:91:ce:47:64:28:f4:14:b4:78:c3:15:c4:39:31:cc:b3: 34:06:92:03:f6:31:fb:02:45:cf:9d:7b:0a:89:93:fc:11:52: b9:e5:5e:66:42:66:ae:d5:d5:43:94:bb:c6:9d:8c:ab:6a:22: 52:35:f6:1d:8f:20:4e:41:f6:a5:4f:17:22:f2:ce:06:a1:88: d5:51:8c:b3:49:34:ba:6d:1d:90:81:0a:c1:4f:8b:b2:9b:6a: 29:67:e2:d7:ac:12:f9:87:31:14:2d:3e:d5:0a:a6:f3:f5:cd: 40:72:73:75:9e:50:6a:bb:93:e1:58:3e:ad:d8:cf:c8:97:64: 06:d9:69:a1:54:da:d7:2f:73:ed:31:a5:3b:3e:66:20:05:48: 7d:47:13:7a:42:58:de:72:cf:ff:f2:50:5f:1a:ba:62:73:fe: 14:1e:6e:4e:9f:84:ac:7c:f6:8b:ca:a1:42:43:e6:00:de:ed: 7c:84:7d:ad:6e:e9:4a:57:ab:49:99:af:3c:9f:19:56:9a:0a: 4f:0d:e6:4e:92:82:5e:03:68:a7:13:36:66:f2:72:8f:f9:24: 9e:98:00:8d:68:84:dc:75:87:e5:59:fa:34:58:1f:da:26:f5: d0:0c:a8:ca:b6:66:55:48:6c:b3:12:0c:14:ce:4f:f3:b1:1a: da:20:11:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjAzMDcwODIyNDdaFw0yNjAzMTQwODIyNDdaMBgxFjAUBgNV BAMTDTY5YWJlMDU3LWEyZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYfvWCSXFZitfLurN1F4hE9mE6lbDKyP6AuABexyRwl89NRUzoJGczTz//PqiO tnYnUYeWkWuoEUnwcvownEBlmisC/9r/zlmsFmzPqhVEX5wd3K+ZHLNGWNxtBlpp Uzt8NIWJOx8kpzHboALCZFUjgxcMLwQUx769dNC0banlyqK6VWuXgv5eA9RfXTtZ LUy0VS/FgUbKTUfBHQfr4GWYmOSJYTw5tXHg8wdvkluMQrf3lqhk5aA1GW/P/k1s 4/TYAfSCrZM9Mz+PnODKPS2zptIKXkrRFMb3O2YI0rR0UPdta/6KOW/1Ti38kVLd orIeabpwhszxeuOr0+BG0O7XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj7txE9q5 +sMGJOvGwLr2VupfkxYwHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdsJHOR2Qo9BS0eMMVxDkxzLM0BpID9jH7AkXPnXsKiZP8EVK55V5mQmau1dVD lLvGnYyraiJSNfYdjyBOQfalTxci8s4GoYjVUYyzSTS6bR2QgQrBT4uym2opZ+LX rBL5hzEULT7VCqbz9c1AcnN1nlBqu5PhWD6t2M/Il2QG2WmhVNrXL3PtMaU7PmYg BUh9RxN6Qljecs//8lBfGrpic/4UHm5On4SsfPaLyqFCQ+YA3u18hH2tbulKV6tJ ma88nxlWmgpPDeZOkoJeA2inEzZm8nKP+SSemACNaITcdYflWfo0WB/aJvXQDKjK tmZVSGyzEgwUzk/zsRraIBFr -----END CERTIFICATE-----Generated at Sat Mar 7 14:30:04 2026 by rpki-client