$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: S3FLztF4dOHYSLtKvbxl2WefUNdR7R5FpPWit3wfvVQ= Subject key identifier: 2B:18:38:BF:CB:DE:1D:F0:84:6D:E9:3A:E8:F2:CC:34:C1:01:21:2E Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0210 Signing time: Fri 03 Apr 2026 02:43:05 +0000 Manifest this update: Fri 03 Apr 2026 02:43:04 +0000 Manifest next update: Fri 10 Apr 2026 02:43:04 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: BqCNNLLpC2nvCjkrSU9aU0gVdnHZw12TK6pPX03iuDs=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: Sgjdzj5tp9q9wEyuOqsZn8n2Wldu0wGWUaDri0fULh8=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: ARjfoRR6gBhijQjc00z9F3525S4k5A3ymbqrmu60pzs=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: IVDzfIyDPy/oXR2LSXewFcluAy9TlGqq3Gn9o6zUm38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Apr 2026 02:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 3 02:43:04 2026 GMT Not After : Apr 10 02:43:04 2026 GMT Subject: CN=69cf2939-54c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:ad:ff:de:69:1f:4d:e0:38:3d:7b:f3:74: 2f:51:41:f0:70:26:25:d3:81:9d:07:fe:bc:04:af: eb:2d:c7:53:32:62:ab:e5:f4:ee:0a:fe:1b:26:28: 32:03:90:c5:66:8a:c0:53:a5:d5:9f:63:ce:e4:ab: 60:73:48:53:d0:dd:98:8e:03:47:fe:7f:59:69:a2: 12:a4:e5:67:67:c1:4b:47:bb:e3:01:7e:85:6c:5f: 91:bd:94:f8:ac:a7:16:dd:6b:dd:50:c9:15:4e:5b: 85:f6:90:60:21:f8:e8:a0:04:56:bc:05:19:de:c3: 4e:57:ec:c2:c6:c6:ca:b0:68:36:a1:9a:0a:2e:12: ba:70:c1:dc:9d:b5:22:cb:aa:68:8e:ce:97:69:3b: 96:80:bc:a9:93:81:70:55:ba:63:f5:0a:23:36:89: d3:f7:91:8a:fd:19:49:18:24:b8:b6:f8:e2:b4:39: d8:c0:d3:bb:17:8e:10:01:5d:2f:ea:8d:7e:11:67: 46:ff:bc:54:bc:77:a0:4e:21:de:67:6c:8f:60:d2: 6b:e0:4a:53:5e:48:7b:6c:c3:20:08:ca:7b:ba:01: 01:a2:04:55:9e:64:01:b1:55:50:5f:c1:f3:0f:cf: c0:a9:e2:0e:a4:52:fc:0a:31:07:42:2d:fd:e6:4c: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:38:BF:CB:DE:1D:F0:84:6D:E9:3A:E8:F2:CC:34:C1:01:21:2E X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:6d:e5:49:6e:8c:08:cc:1f:d1:a2:10:67:30:4e:3c:2a: a6:2a:1c:25:e5:42:47:56:41:9c:43:10:56:6e:2b:14:e8:58: d9:a9:c7:69:bd:fe:62:f6:87:76:1c:79:33:d4:14:c7:5b:c1: 3d:61:9b:9c:b3:d2:cc:a8:ec:10:07:3f:91:87:6e:ec:b6:45: 9b:0f:34:2b:6f:1c:36:d4:1e:c7:08:b2:1f:6c:49:d9:7b:00: 8a:b7:fa:b9:0c:eb:3d:5e:35:92:7b:e0:92:3a:e1:17:49:1f: be:82:98:df:1a:9f:40:f9:09:0c:a3:4f:0e:54:41:45:12:0a: c3:ba:33:0d:26:6f:78:71:49:6c:ab:35:df:7a:b3:b6:8e:ed: de:cb:07:ea:90:e4:2f:2d:4c:b2:03:f7:d0:9b:ab:71:35:14: 8d:8a:aa:fa:49:ab:40:2a:de:13:df:eb:5c:c0:8c:ef:6c:9e: d4:67:97:f3:e6:27:60:7b:13:f7:c1:a9:09:5b:91:dd:22:03: 96:ad:a7:a7:66:6c:1c:47:12:d2:57:d0:5e:7a:9e:ed:0c:1f: c8:b1:bb:16:7e:bb:2c:e1:98:55:15:1c:9d:27:21:60:d0:25: 1e:49:3e:5c:06:89:a3:ff:96:ac:f7:59:40:5f:7e:04:e7:66: 7a:24:f5:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNDAzMDI0MzA0WhcNMjYwNDEwMDI0MzA0WjAYMRYwFAYD VQQDEw02OWNmMjkzOS01NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLqt/95pH03gOD1783QvUUHwcCYl04GdB/68BK/rLcdTMmKr5fTuCv4bJigy A5DFZorAU6XVn2PO5Ktgc0hT0N2YjgNH/n9ZaaISpOVnZ8FLR7vjAX6FbF+RvZT4 rKcW3WvdUMkVTluF9pBgIfjooARWvAUZ3sNOV+zCxsbKsGg2oZoKLhK6cMHcnbUi y6pojs6XaTuWgLypk4FwVbpj9QojNonT95GK/RlJGCS4tvjitDnYwNO7F44QAV0v 6o1+EWdG/7xUvHegTiHeZ2yPYNJr4EpTXkh7bMMgCMp7ugEBogRVnmQBsVVQX8Hz D8/AqeIOpFL8CjEHQi395kzY6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsYOL/L 3h3whG3pOujyzDTBASEuMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAntpt5UlujAjMH9GiEGcwTjwqpiocJeVCR1ZBnEMQVm4rFOhY2anHab3+YvaH dhx5M9QUx1vBPWGbnLPSzKjsEAc/kYdu7LZFmw80K28cNtQexwiyH2xJ2XsAirf6 uQzrPV41knvgkjrhF0kfvoKY3xqfQPkJDKNPDlRBRRIKw7ozDSZveHFJbKs133qz to7t3ssH6pDkLy1MsgP30JurcTUUjYqq+kmrQCreE9/rXMCM72ye1GeX8+YnYHsT 98GpCVuR3SIDlq2np2ZsHEcS0lfQXnqe7QwfyLG7Fn67LOGYVRUcnSchYNAlHkk+ XAaJo/+WrPdZQF9+BOdmeiT14w== -----END CERTIFICATE-----Generated at Fri Apr 3 12:59:44 2026 by rpki-client