$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: xxY9+AgKOOsKNueGQVe8q1R26dJTYlVAuDpKiCEuhNA= Subject key identifier: 32:1E:D6:EC:4D:CE:09:A3:3C:98:ED:2E:21:E4:F5:DF:ED:18:32:77 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0ABF Signing time: Sat 28 Mar 2026 19:33:13 +0000 Manifest this update: Sat 28 Mar 2026 19:33:12 +0000 Manifest next update: Sat 04 Apr 2026 19:33:12 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: CgLthOW20T3hoxvYQfU93AP8CG2g4SZ6GnEe67y/nSQ=) 2: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=) 3: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=) 4: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=) 5: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=) 6: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=) 7: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=) 8: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=) 9: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Mar 28 19:33:12 2026 GMT Not After : Apr 4 19:33:12 2026 GMT Subject: CN=69c82cf9-ab2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:fe:26:09:d9:8a:28:0b:15:7d:95:16:8d: b5:c4:56:b2:27:68:d8:97:74:ff:82:b5:24:b5:2a: 79:1d:49:3e:43:34:3e:95:52:75:30:69:7c:25:52: ef:1b:d2:18:f8:64:a8:fa:f2:1b:42:21:9e:f1:e2: ce:34:0b:c9:3e:1d:ce:65:61:4f:8c:84:fc:d6:de: 27:2e:d7:97:81:a7:dd:3f:38:60:90:5f:c6:35:11: 67:8c:87:3f:2f:44:c6:cf:89:c7:8d:60:09:08:32: ed:63:f5:ba:9f:d8:c2:cf:f0:09:e0:5f:ba:e8:8a: 43:3e:3b:5b:45:32:46:0f:4a:d3:e9:78:a5:e0:20: 04:22:28:30:e6:c0:8c:e9:88:3c:b9:b9:d6:bc:cd: 6f:89:fa:a7:58:3c:11:98:41:db:b9:ee:a8:6c:2f: 9b:5d:68:af:5e:08:2c:cc:3b:37:75:5e:95:84:38: 70:87:ac:7e:9b:9e:a9:da:ee:01:a3:85:ae:4f:3f: f2:99:5e:ab:6a:24:d1:76:fb:ce:eb:df:f3:a2:08: e6:86:83:97:62:37:4d:de:74:44:d0:8e:82:69:b1: 9e:46:d2:c4:aa:94:80:03:70:8d:b1:5c:e1:be:e1: 0f:9e:2b:67:34:42:92:ed:8b:ce:42:0f:8a:ee:a4: 16:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:D6:EC:4D:CE:09:A3:3C:98:ED:2E:21:E4:F5:DF:ED:18:32:77 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9d:07:b2:a1:d0:fc:19:64:7f:40:90:ba:0f:fe:69:06:bd: cf:40:4c:6a:50:c0:ce:5a:b9:d2:34:5b:d1:47:77:2a:be:f5: 8f:d5:9f:1c:35:da:e0:f9:80:40:ef:69:c9:aa:53:11:65:f7: 79:9b:9f:1b:b9:5c:cc:d4:41:0c:ee:7d:b2:33:4d:89:f0:cc: 53:fc:c9:fb:c5:a4:9c:81:cd:66:a4:64:7e:a7:1a:1c:1f:8f: 98:64:ab:cf:97:a9:1f:b2:54:6c:69:42:06:76:99:fd:cd:a0: 9d:f3:20:e0:6b:cc:3b:4a:5b:0d:9e:58:c6:4d:ee:e5:9c:07: ad:e0:1b:fd:14:3b:1f:56:c0:68:93:b3:db:1f:49:6b:16:b5: bc:2a:fd:80:de:d9:d0:6b:32:0a:bf:6b:f9:48:b8:dd:94:2c: eb:38:2b:8a:8b:aa:78:c9:4b:e8:5e:10:8b:0c:43:1a:bd:78: 33:90:dc:e7:2e:0f:d9:79:6e:42:6c:67:38:79:82:58:cd:28: 0a:15:4e:95:92:e2:6b:3b:bf:6b:28:c4:f9:dd:77:da:52:fb: 1c:52:15:4e:29:c0:e0:4d:65:e8:63:32:51:2f:c0:05:18:50: 01:e3:63:6d:79:56:62:6d:dc:66:0f:94:47:8b:34:86:ee:52: e0:bd:14:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjYwMzI4MTkzMzEyWhcNMjYwNDA0MTkzMzEyWjAYMRYwFAYD VQQDEw02OWM4MmNmOS1hYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLr+JgnZiigLFX2VFo21xFayJ2jYl3T/grUktSp5HUk+QzQ+lVJ1MGl8JVLv G9IY+GSo+vIbQiGe8eLONAvJPh3OZWFPjIT81t4nLteXgafdPzhgkF/GNRFnjIc/ L0TGz4nHjWAJCDLtY/W6n9jCz/AJ4F+66IpDPjtbRTJGD0rT6Xil4CAEIigw5sCM 6Yg8ubnWvM1vifqnWDwRmEHbue6obC+bXWivXggszDs3dV6VhDhwh6x+m56p2u4B o4WuTz/ymV6raiTRdvvO69/zogjmhoOXYjdN3nRE0I6CabGeRtLEqpSAA3CNsVzh vuEPnitnNEKS7YvOQg+K7qQWWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIe1uxN zgmjPJjtLiHk9d/tGDJ3MB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArZ0HsqHQ/Blkf0CQug/+aQa9z0BMalDAzlq50jRb0Ud3Kr71j9WfHDXa4PmA QO9pyapTEWX3eZufG7lczNRBDO59sjNNifDMU/zJ+8WknIHNZqRkfqcaHB+PmGSr z5epH7JUbGlCBnaZ/c2gnfMg4GvMO0pbDZ5Yxk3u5ZwHreAb/RQ7H1bAaJOz2x9J axa1vCr9gN7Z0GsyCr9r+Ui43ZQs6zgriouqeMlL6F4QiwxDGr14M5Dc5y4P2Xlu QmxnOHmCWM0oChVOlZLiazu/ayjE+d132lL7HFIVTinA4E1l6GMyUS/ABRhQAeNj bXlWYm3cZg+UR4s0hu5S4L0Ufw== -----END CERTIFICATE-----Generated at Mon Mar 30 17:10:18 2026 by rpki-client