$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: a2cujqmFB/qBp24So2rbCtrgYrSCA6rXqNOOSHnIpQg= Subject key identifier: 6D:5D:57:E9:B6:A6:E5:13:1F:17:4A:14:9C:35:6E:A7:91:0C:2A:72 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 03F9 Signing time: Sun 29 Mar 2026 00:25:12 +0000 Manifest this update: Sun 29 Mar 2026 00:25:12 +0000 Manifest next update: Sun 05 Apr 2026 00:25:12 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: OiFo9Na051/GnF8QHx/Xxn5XMcOItHa5r9DqyjanndM=) 2: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: /cLK5jexlN6DgUe+xON5ereg8xX5VFWJjQmFvIgHP9A=) 3: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: v2CM5f+5i6jbSqappCikApO33EDWeQOMWIWMt9/A9D8=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: cinLm54N0lY1X5NKGIDUKpOhjjif9NOE96ZxaxPjlHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 00:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Mar 29 00:25:12 2026 GMT Not After : Apr 5 00:25:12 2026 GMT Subject: CN=69c87168-91c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:8f:5e:9c:84:2c:ee:23:b1:d2:af:fe:96: 36:59:8e:e2:ff:b4:ec:82:71:f3:21:dc:c3:a8:0f: 95:86:61:c3:88:31:f1:f1:7d:3c:ea:38:fa:68:2e: ed:99:7e:f4:5a:09:66:96:53:b1:53:cb:7a:8f:90: 50:d0:60:9f:0b:70:47:73:43:cd:3f:8e:61:25:03: 81:ce:8f:58:84:a6:b4:ab:b7:c9:13:f0:54:73:40: 6c:e4:3a:3e:c4:94:b7:dc:46:22:d3:ef:d9:fc:21: cc:8b:6a:25:41:cc:d8:e7:9b:93:0b:4a:b5:3f:83: 7a:44:7f:64:b4:c5:0c:6a:58:d9:8c:e7:28:c3:e6: f2:60:ff:a8:04:c7:9d:ab:43:26:9b:50:ac:3f:de: fd:ee:3c:50:6b:a4:52:3e:0f:5b:f4:0f:27:d1:2d: 68:3f:a7:94:4e:74:db:b2:ce:9a:06:5f:a6:a1:7f: f5:2b:2e:5b:51:15:56:96:f5:a6:ac:f6:f2:ce:07: 8b:42:d0:66:44:1a:12:a6:63:10:20:0f:c6:86:dd: b4:eb:cd:e9:b4:65:3f:ab:5b:d0:49:3b:19:f1:cf: 2a:ce:89:b5:56:e0:e2:ef:5a:36:b9:35:4f:b0:0f: 65:76:bc:e7:91:61:e8:b4:49:10:dc:d8:15:66:48: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:57:E9:B6:A6:E5:13:1F:17:4A:14:9C:35:6E:A7:91:0C:2A:72 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:61:00:d9:39:9c:37:c0:24:97:22:63:6d:2b:1f:56:6c: 75:78:ce:6f:3d:27:c5:f1:a3:10:50:be:87:89:eb:0f:29:ef: 7c:ed:f8:89:b3:76:09:6c:6d:f3:a3:da:b1:88:9b:8f:21:56: 74:cf:73:fc:56:13:dc:ed:de:ed:67:b1:c5:65:59:2f:54:a6: 4f:98:05:f4:51:be:e4:a0:ef:13:7c:32:bd:4b:c7:c6:31:a8: 32:e1:95:f3:04:36:0b:95:ed:e0:76:dc:12:42:04:f4:c1:82: a4:36:8d:a3:1d:2d:5e:7c:74:07:d5:5e:60:2c:ca:fa:f6:60: 62:21:0c:5a:1d:52:24:f7:a9:bb:90:ae:d1:58:0f:8b:c1:ba: 77:1d:05:6d:3f:07:7c:89:4a:b8:82:bf:9b:9a:0a:5e:0a:da: 12:ff:11:82:ce:5b:93:c6:91:28:01:bb:58:f8:a4:ec:2b:bf: 4a:c8:7e:82:a6:f3:a2:4e:05:c8:d9:40:25:30:3c:4a:50:fc: a0:d9:7e:c7:63:de:f7:80:30:cf:43:60:ee:11:b0:db:60:8e: 82:80:00:1b:11:43:2d:67:f8:55:28:92:1d:75:61:13:97:27: 64:7e:7e:30:a6:bd:9f:0a:a4:e1:05:38:db:a5:c2:9b:57:e3: 22:6a:dc:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwMzI5MDAyNTEyWhcNMjYwNDA1MDAyNTEyWjAYMRYwFAYD VQQDEw02OWM4NzE2OC05MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3WPXpyELO4jsdKv/pY2WY7i/7TsgnHzIdzDqA+VhmHDiDHx8X086jj6aC7t mX70WglmllOxU8t6j5BQ0GCfC3BHc0PNP45hJQOBzo9YhKa0q7fJE/BUc0Bs5Do+ xJS33EYi0+/Z/CHMi2olQczY55uTC0q1P4N6RH9ktMUMaljZjOcow+byYP+oBMed q0Mmm1CsP9797jxQa6RSPg9b9A8n0S1oP6eUTnTbss6aBl+moX/1Ky5bURVWlvWm rPbyzgeLQtBmRBoSpmMQIA/Ght20683ptGU/q1vQSTsZ8c8qzom1VuDi71o2uTVP sA9ldrznkWHotEkQ3NgVZkigHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1dV+m2 puUTHxdKFJw1bqeRDCpyMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATbRhANk5nDfAJJciY20rH1ZsdXjObz0nxfGjEFC+h4nrDynvfO34ibN2CWxt 86PasYibjyFWdM9z/FYT3O3e7WexxWVZL1SmT5gF9FG+5KDvE3wyvUvHxjGoMuGV 8wQ2C5Xt4HbcEkIE9MGCpDaNox0tXnx0B9VeYCzK+vZgYiEMWh1SJPepu5Cu0VgP i8G6dx0FbT8HfIlKuIK/m5oKXgraEv8Rgs5bk8aRKAG7WPik7Cu/Ssh+gqbzok4F yNlAJTA8SlD8oNl+x2Pe94Awz0Ng7hGw22COgoAAGxFDLWf4VSiSHXVhE5cnZH5+ MKa9nwqk4QU426XCm1fjImrcMQ== -----END CERTIFICATE-----Generated at Mon Mar 30 17:29:33 2026 by rpki-client