$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft File: rHwA15xPocI9OeJl5UPWJa-xcZE.mft (raw, json) Hash identifier: QfgJTI4248btrcQ7dfBxKNfej5qMLb48ZhHJ8w2UWKQ= Subject key identifier: 1D:1A:DA:4B:58:E8:D8:5D:B2:DA:16:C0:E6:DB:52:5B:4D:D9:76:27 Authority key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91 Certificate issuer: /CN=A917C876/serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft Manifest number: 09 Signing time: Tue 03 Mar 2026 08:51:04 +0000 Manifest this update: Tue 03 Mar 2026 08:51:04 +0000 Manifest next update: Tue 10 Mar 2026 08:51:04 +0000 Files and hashes: 1: rHwA15xPocI9OeJl5UPWJa-xcZE.crl (hash: UBf7OotyleXpUVHPdJDsR1D3nr3ibAdMVdwaR0V/gZM=) 2: AA5A77DE109211F1ADAE0457353D8C67.roa (hash: jc5OClYgMksYJNVDPr4GTz5NxRC+DAHLWpkP7eRJs/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191 Validity Not Before: Mar 3 08:51:04 2026 GMT Not After : Mar 10 08:51:04 2026 GMT Subject: CN=69a6a0f8-a33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:a5:53:68:4b:f7:88:74:70:18:03:3d:56: 4d:26:cd:cc:8a:f4:6e:0c:19:36:b3:79:c4:f1:e6: 98:f8:d4:eb:b8:ee:4e:5b:ac:49:59:8a:37:0c:94: 04:82:9c:3f:ff:16:b9:86:e8:a3:b9:59:76:df:d5: 94:bc:50:fa:fc:29:5d:ca:f0:34:bc:c0:f2:9c:e2: 43:3a:c0:93:41:e4:4b:de:ac:a5:f4:da:0f:27:f3: 60:c0:93:8b:35:ea:a8:89:18:62:10:bb:b9:7f:87: ca:19:7e:68:5e:1f:bb:b0:bd:3f:56:95:e7:61:87: a3:fe:97:5c:d6:64:fb:8f:ef:65:6d:eb:15:80:5e: ba:f8:75:d8:c8:ab:28:b7:14:e3:81:80:b7:88:d2: ee:53:2a:00:89:4d:92:63:b5:bb:1f:d3:d0:33:b5: c0:db:d0:27:b7:e0:a9:c3:cd:13:09:c4:ac:98:ab: ff:37:0e:52:10:bb:d6:f1:dc:45:1a:52:1a:82:f4: 34:9f:9b:b6:9d:c6:9c:68:a4:f7:f4:11:8a:2f:fe: 22:e2:c5:f8:c9:2d:9f:4c:57:b6:13:5e:cd:cf:7b: 19:20:42:79:05:7d:cf:e5:bf:cc:e8:a9:00:00:ee: 77:6f:fc:d9:cc:2b:8d:ef:94:ac:5f:9d:87:82:38: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:DA:4B:58:E8:D8:5D:B2:DA:16:C0:E6:DB:52:5B:4D:D9:76:27 X509v3 Authority Key Identifier: keyid:AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:72:b4:35:bb:1c:21:09:b9:ce:2e:e4:ed:38:fb:e7:6b:e2: 80:0e:da:b5:46:74:a2:75:07:be:8b:30:4d:d2:40:4d:c9:82: 7f:7d:7b:06:c4:00:a6:4b:e8:1a:23:ff:58:19:1b:58:dd:f1: e6:f5:ff:82:10:d5:9e:b8:65:1d:fa:f5:57:80:8c:3a:38:2d: 81:32:f2:12:cb:9b:11:91:0a:ec:fb:e3:59:82:56:2a:9e:45: 1d:a5:59:9e:68:c2:0c:9a:06:e7:82:94:fb:79:d8:4c:4b:84: 32:a1:66:e0:37:94:ef:bd:be:c9:a6:54:ff:ac:d9:2e:3d:49: ef:47:b7:bc:7c:3b:16:f5:2b:f1:36:ec:71:80:20:a1:fc:ac: 30:5a:01:bb:06:74:a3:1d:e7:3c:56:3a:b1:b0:bb:39:76:e7: 7d:02:65:96:79:d4:c5:9c:78:b6:1c:bd:34:7a:96:91:59:41: 13:7c:f7:f3:57:ac:7b:97:ce:d3:1a:d8:f0:8d:ab:f2:d8:9c: e0:85:7b:93:22:4d:32:37:01:da:c7:b7:7b:70:36:9e:5f:8e: 74:18:05:af:0e:b5:73:d5:1a:a8:17:b5:c7:68:a7:e2:90:1f: 3a:8f:bb:e1:76:a9:b3:f2:af:a8:d0:25:d1:5f:d7:3f:2c:8a: c3:d3:26:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Qzg3NjExMC8GA1UEBRMoQUM3QzAwRDc5QzRGQTFDMjNEMzlFMjY1RTU0M0Q2MjVB RkIxNzE5MTAeFw0yNjAzMDMwODUxMDRaFw0yNjAzMTAwODUxMDRaMBgxFjAUBgNV BAMTDTY5YTZhMGY4LWEzM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDATaVTaEv3iHRwGAM9Vk0mzcyK9G4MGTazecTx5pj41Ou47k5brElZijcMlASC nD//FrmG6KO5WXbf1ZS8UPr8KV3K8DS8wPKc4kM6wJNB5EverKX02g8n82DAk4s1 6qiJGGIQu7l/h8oZfmheH7uwvT9Wledhh6P+l1zWZPuP72Vt6xWAXrr4ddjIqyi3 FOOBgLeI0u5TKgCJTZJjtbsf09AztcDb0Ce34KnDzRMJxKyYq/83DlIQu9bx3EUa UhqC9DSfm7adxpxopPf0EYov/iLixfjJLZ9MV7YTXs3PexkgQnkFfc/lv8zoqQAA 7ndv/NnMK43vlKxfnYeCOG/nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHRraS1jo 2F2y2hbA5ttSW03ZdicwHwYDVR0jBBgwFoAUrHwA15xPocI9OeJl5UPWJa+xcZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDODc2L0U0QzBDNDE2MTA5 MDExRjE4MEJCQkZGRjMzM0Q4QzY3L3JId0ExNXhQb2NJOU9lSmw1VVBXSmEteGNa RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckh3QTE1eFBvY0k5T2VKbDVVUFdKYS14Y1pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD ODc2L0U0QzBDNDE2MTA5MDExRjE4MEJCQkZGRjMzM0Q4QzY3L3JId0ExNXhQb2NJ OU9lSmw1VVBXSmEteGNaRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGcrQ1uxwhCbnOLuTtOPvna+KADtq1RnSidQe+izBN0kBNyYJ/fXsGxACmS+ga I/9YGRtY3fHm9f+CENWeuGUd+vVXgIw6OC2BMvISy5sRkQrs++NZglYqnkUdpVme aMIMmgbngpT7edhMS4QyoWbgN5Tvvb7JplT/rNkuPUnvR7e8fDsW9SvxNuxxgCCh /KwwWgG7BnSjHec8VjqxsLs5dud9AmWWedTFnHi2HL00epaRWUETfPfzV6x7l87T Gtjwjavy2JzghXuTIk0yNwHax7d7cDaeX450GAWvDrVz1RqoF7XHaKfikB86j7vh dqmz8q+o0CXRX9c/LIrD0yZw -----END CERTIFICATE-----Generated at Wed Mar 4 13:44:55 2026 by rpki-client