$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft File: hhIZKNm0AeMdansgbrAWLThuBHI.mft (raw, json) Hash identifier: TPkkxpZVfa/XR2b3nv4l5n16YPNb2VioIUnmrXKnU5s= Subject key identifier: 49:55:CA:DF:2A:9B:2A:86:4E:06:91:1C:8E:72:A3:FE:28:AF:E6:65 Authority key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Certificate issuer: /CN=A91B8C6C/serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft Manifest number: 2F Signing time: Mon 02 Mar 2026 15:12:41 +0000 Manifest this update: Mon 02 Mar 2026 15:12:41 +0000 Manifest next update: Mon 09 Mar 2026 15:12:41 +0000 Files and hashes: 1: hhIZKNm0AeMdansgbrAWLThuBHI.crl (hash: dxW9dmZmlWL1Cd0fgdl9tmFSrJrgHpMriW5gMVrbVvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Validity Not Before: Mar 2 15:12:41 2026 GMT Not After : Mar 9 15:12:41 2026 GMT Subject: CN=69a5a8e9-62b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:8d:11:4d:f9:97:a2:d6:d5:6b:31:d1:a7: 0b:a7:4a:8d:e7:a3:7b:10:bc:00:70:e7:29:1e:a8: 14:7f:d8:d7:66:08:05:c6:4c:b6:23:19:00:e3:26: b4:23:b9:07:d8:57:96:70:31:91:0a:88:e0:d9:61: 82:49:f9:e8:9c:30:c9:25:d8:0a:8e:b7:d3:09:b0: 00:7f:df:15:13:83:b4:de:5e:42:66:ce:09:8a:d3: c1:0b:1d:59:a1:b3:3a:5b:77:6a:a7:01:57:7c:b8: 5a:11:3d:53:e0:46:51:16:0e:bc:b2:6f:9d:0f:e3: 27:8c:66:33:f1:84:e3:3a:5a:e5:6e:35:19:f9:8a: 56:13:4d:d1:e6:07:86:17:0a:1b:76:57:42:4f:e6: 51:ad:3f:81:6a:81:12:6f:27:60:94:55:c1:5a:36: 39:81:4a:f6:14:b0:0a:d6:16:6d:f1:c4:4e:30:f0: 6c:ff:f6:46:9b:44:03:ff:62:b0:ce:c7:cc:99:6d: d0:78:8f:eb:c2:fe:fd:62:83:0b:68:6a:fa:c9:17: 4d:33:58:5d:2c:6e:c5:9b:04:f2:b4:a6:52:b6:88: f6:f8:f1:cf:79:b9:a5:2b:d7:20:0a:91:1b:90:ef: 97:30:56:fb:5c:6d:43:76:5e:a7:09:07:5b:6f:a1: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:CA:DF:2A:9B:2A:86:4E:06:91:1C:8E:72:A3:FE:28:AF:E6:65 X509v3 Authority Key Identifier: keyid:86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:50:c7:c4:21:29:f9:bf:35:21:15:60:8f:bd:bb:41:7b:d2: 06:71:0f:70:6c:55:44:7e:4f:75:da:0e:d1:1a:a4:4f:44:8e: bb:b5:ce:4b:d1:28:91:db:20:4b:b6:10:32:e6:ce:82:6b:15: 0e:93:f1:d6:aa:72:4f:7e:af:b2:df:5d:68:96:fe:50:52:9b: 50:96:60:af:4d:4d:ac:ef:6c:ba:1c:98:1d:d7:0b:6d:12:89: fe:13:d6:a2:6f:a2:28:f8:11:c6:47:6e:89:bb:98:11:fe:46: 92:ad:3b:f9:eb:c9:1c:6b:6f:ea:23:48:2b:7e:f2:7c:3c:59: d3:f2:05:3e:31:0a:9a:ad:83:f1:14:e6:73:9a:6f:7c:0d:00: 2d:07:c6:0d:c5:a7:6b:08:12:d8:66:61:df:8a:ce:a1:d4:25: 1b:2e:5e:34:cf:66:2d:07:f5:46:f7:89:8f:1d:cc:66:7a:1e: c9:9d:d6:16:30:1e:50:58:8a:95:51:68:9e:e7:dd:48:27:e3: 9b:b8:5c:4e:34:d3:ec:f3:86:2d:27:c2:a8:5f:b7:f0:84:aa: c6:6e:f2:fd:d9:45:ec:f5:61:eb:a9:31:5a:a3:bd:1f:46:61: b1:4f:eb:96:80:44:a0:70:8f:61:9d:d7:f1:d3:35:05:b8:3a: a5:73:b9:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEM2QzExMC8GA1UEBRMoODYxMjE5MjhEOUI0MDFFMzFENkE3QjIwNkVCMDE2MkQz ODZFMDQ3MjAeFw0yNjAzMDIxNTEyNDFaFw0yNjAzMDkxNTEyNDFaMBgxFjAUBgNV BAMTDTY5YTVhOGU5LTYyYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXxo0RTfmXotbVazHRpwunSo3no3sQvABw5ykeqBR/2NdmCAXGTLYjGQDjJrQj uQfYV5ZwMZEKiODZYYJJ+eicMMkl2AqOt9MJsAB/3xUTg7TeXkJmzgmK08ELHVmh szpbd2qnAVd8uFoRPVPgRlEWDryyb50P4yeMZjPxhOM6WuVuNRn5ilYTTdHmB4YX Cht2V0JP5lGtP4FqgRJvJ2CUVcFaNjmBSvYUsArWFm3xxE4w8Gz/9kabRAP/YrDO x8yZbdB4j+vC/v1igwtoavrJF00zWF0sbsWbBPK0plK2iPb48c95uaUr1yAKkRuQ 75cwVvtcbUN2XqcJB1tvobM9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSVXK3yqb KoZOBpEcjnKj/iiv5mUwHwYDVR0jBBgwFoAUhhIZKNm0AeMdansgbrAWLThuBHIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QzZDLzMwQTU0RjZDRDY1 RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVNZGFuc2dickFXTFRodUJI SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaGhJWktObTBBZU1kYW5zZ2JyQVdMVGh1QkhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QzZDLzMwQTU0RjZDRDY1RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0wQWVN ZGFuc2dickFXTFRodUJISS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFUMfEISn5vzUhFWCPvbtBe9IGcQ9wbFVEfk912g7RGqRPRI67tc5L0SiR2yBL thAy5s6CaxUOk/HWqnJPfq+y311olv5QUptQlmCvTU2s72y6HJgd1wttEon+E9ai b6Io+BHGR26Ju5gR/kaSrTv568kca2/qI0grfvJ8PFnT8gU+MQqarYPxFOZzmm98 DQAtB8YNxadrCBLYZmHfis6h1CUbLl40z2YtB/VG94mPHcxmeh7JndYWMB5QWIqV UWie591IJ+ObuFxONNPs84YtJ8KoX7fwhKrGbvL92UXs9WHrqTFao70fRmGxT+uW gESgcI9hndfx0zUFuDqlc7mk -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:17 2026 by rpki-client