$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: 7qms/hwxQ/aWKFvmYMWneySQ7/iSHBj+PJK0+edBLEQ= Subject key identifier: C3:A4:50:7D:B5:1D:51:56:80:69:89:CF:10:D2:ED:01:7C:54:C2:64 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0AC0 Signing time: Mon 30 Mar 2026 19:36:52 +0000 Manifest this update: Mon 30 Mar 2026 19:36:51 +0000 Manifest next update: Mon 06 Apr 2026 19:36:51 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: Rbwh3SEpzch6MPvYMllcaVl6rhe3oJ/o6Q1IeShM61I=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=) 3: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=) 4: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=) 5: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=) 6: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=) 7: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=) 8: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=) 9: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Mar 30 19:36:51 2026 GMT Not After : Apr 6 19:36:51 2026 GMT Subject: CN=69cad0d3-04cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:aa:07:4a:f3:48:07:94:f0:cd:e2:9d:35: 88:98:78:61:bb:a7:2a:3a:d5:37:32:eb:8d:12:c8: 5e:29:d4:18:1f:67:69:8d:d2:9b:f0:e2:07:14:76: 61:32:2d:7c:de:6f:37:e7:ef:95:ad:71:1b:7f:49: 6c:7d:49:74:0a:97:4f:4e:f5:81:cf:18:01:4d:6d: 32:39:55:7f:85:85:fb:64:da:f2:c9:24:12:a9:f5: 27:07:d6:77:5b:4d:54:bf:06:e6:be:1e:1e:f4:87: 1d:dc:6a:50:48:3c:4f:bd:dc:d0:33:52:4b:41:48: c3:02:f0:65:c8:6b:6c:af:0b:77:2f:8c:34:33:e2: 6d:8b:b8:18:3d:fb:1b:fb:d9:81:8d:d4:70:ef:76: ec:b3:7a:33:82:47:d6:a3:f5:d6:9f:21:a9:ad:e2: 5a:9b:68:6d:2a:c7:7f:29:f9:d0:fd:06:a5:f6:cf: 1a:c6:a0:04:a0:da:e2:26:ec:c2:eb:86:14:59:69: 86:d0:d4:c6:01:0b:f7:5f:24:64:08:76:23:1d:6c: a3:fc:53:03:4e:b1:b5:fa:8b:c5:6e:98:ac:b7:f9: a1:b7:77:1f:67:71:c6:02:b6:eb:82:94:e1:c9:53: fd:b2:8e:67:f4:7d:fd:9b:2e:fe:81:6c:41:17:56: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:50:7D:B5:1D:51:56:80:69:89:CF:10:D2:ED:01:7C:54:C2:64 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:25:06:62:18:22:95:08:8c:01:16:fd:5c:54:cb:88:c3:d4: 8b:13:f8:9d:31:27:9e:9a:59:f9:75:d0:b4:64:bb:e5:b1:e7: d7:58:ca:5c:0f:3d:7e:9b:cc:25:2d:4d:4c:2c:43:22:66:3c: 9a:77:77:99:13:a6:59:17:fc:c9:b4:54:9d:1e:e2:58:d1:0b: 4b:fc:c2:8a:42:2d:ff:23:a2:88:d5:8c:68:32:03:dd:d0:60: cd:e2:31:8a:c0:65:5b:c4:c6:3d:89:f2:95:62:13:76:0a:1b: 0d:3c:11:84:0c:84:71:c1:bc:b9:ea:aa:22:2a:c3:13:fa:1e: ea:ce:1f:35:7b:9b:54:1c:ec:b3:ed:56:f8:fc:c5:50:d3:17: e2:10:2a:45:ca:c1:00:d8:dc:58:d4:2b:1e:d4:14:ef:3f:41: f3:7f:03:9d:e5:ba:32:10:dd:c8:7c:9a:a0:4e:7c:9d:38:a9: 95:6f:d5:52:40:a3:53:9e:ed:f6:03:60:11:cc:2f:17:58:49: 25:62:27:1d:f4:aa:e0:e3:56:d4:1b:a6:32:b0:8e:b0:bc:4e: 60:65:97:4b:95:8a:9f:b2:2d:bf:cc:68:11:6f:ba:74:e4:fe: 95:cc:e6:51:d8:2b:74:a9:cb:cb:b1:9e:f7:ee:7a:25:df:7f: 1f:1d:02:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjYwMzMwMTkzNjUxWhcNMjYwNDA2MTkzNjUxWjAYMRYwFAYD VQQDEw02OWNhZDBkMy0wNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndiqB0rzSAeU8M3inTWImHhhu6cqOtU3MuuNEsheKdQYH2dpjdKb8OIHFHZh Mi183m835++VrXEbf0lsfUl0CpdPTvWBzxgBTW0yOVV/hYX7ZNryySQSqfUnB9Z3 W01Uvwbmvh4e9Icd3GpQSDxPvdzQM1JLQUjDAvBlyGtsrwt3L4w0M+Jti7gYPfsb +9mBjdRw73bss3ozgkfWo/XWnyGpreJam2htKsd/KfnQ/Qal9s8axqAEoNriJuzC 64YUWWmG0NTGAQv3XyRkCHYjHWyj/FMDTrG1+ovFbpist/mht3cfZ3HGArbrgpTh yVP9so5n9H39my7+gWxBF1aGtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOkUH21 HVFWgGmJzxDS7QF8VMJkMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAySUGYhgilQiMARb9XFTLiMPUixP4nTEnnppZ+XXQtGS75bHn11jKXA89fpvM JS1NTCxDImY8mnd3mROmWRf8ybRUnR7iWNELS/zCikIt/yOiiNWMaDID3dBgzeIx isBlW8TGPYnylWITdgobDTwRhAyEccG8ueqqIirDE/oe6s4fNXubVBzss+1W+PzF UNMX4hAqRcrBANjcWNQrHtQU7z9B838DneW6MhDdyHyaoE58nTiplW/VUkCjU57t 9gNgEcwvF1hJJWInHfSq4ONW1BumMrCOsLxOYGWXS5WKn7Itv8xoEW+6dOT+lczm UdgrdKnLy7Ge9+56Jd9/Hx0CjQ== -----END CERTIFICATE-----Generated at Tue Mar 31 15:34:37 2026 by rpki-client