$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: 9HbpTEIrBXP3r7M7WmHS1c3YhQ4Sv6E/cn2flb+3LLo= Subject key identifier: A8:BB:3C:13:93:C2:1C:2E:B3:38:58:5D:59:B9:D4:4B:B8:C1:0D:D6 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 49 Signing time: Tue 03 Mar 2026 08:02:35 +0000 Manifest this update: Tue 03 Mar 2026 08:02:35 +0000 Manifest next update: Tue 10 Mar 2026 08:02:35 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: JuE9tTyS0g0QJ513AhEBpxbmo3+llylnqfeAyGN0NIU=) 2: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) 3: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Mar 3 08:02:35 2026 GMT Not After : Mar 10 08:02:35 2026 GMT Subject: CN=69a6959b-a8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:4d:e0:c2:b9:a9:44:44:cf:0b:14:c6:a1: d5:fe:5e:13:70:f2:54:9c:8c:be:fd:fd:19:5b:e7: 6f:e8:9a:a3:d0:95:09:55:8b:66:e0:8d:ae:ce:4e: 16:0b:29:44:29:10:49:15:ad:44:cb:47:ea:9c:e8: b4:91:f1:31:a0:0a:99:b7:d7:60:3f:28:f0:27:19: 25:34:2e:fd:7f:67:62:04:2c:ed:92:4c:59:76:8f: b8:af:ae:56:4c:2b:16:c6:60:ef:0a:da:63:e0:01: 2f:8d:7f:1e:54:04:44:7c:fd:96:a5:3d:9e:40:56: e3:6b:90:d0:04:bf:5c:3e:04:70:67:1f:3b:b4:ed: 51:0b:5f:d2:29:bf:a5:ac:fa:a0:f7:5c:b6:01:4b: 9c:00:a0:0a:44:bc:9c:d9:b2:9b:62:ae:2e:6e:2a: b5:de:32:3c:a0:8a:bb:bb:cb:e5:d1:b6:4c:b8:61: 48:e6:d2:9b:90:c0:f9:76:17:06:81:a1:9d:b6:df: cf:6d:b9:26:7e:98:86:7d:6d:e9:76:58:62:84:29: 0b:e6:14:fc:99:37:e7:04:41:e3:83:ab:35:7c:10: ae:58:67:db:72:11:4e:b7:95:78:60:ba:31:38:b3: 3c:51:6a:06:4b:cb:36:4a:95:59:3f:90:02:db:c2: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BB:3C:13:93:C2:1C:2E:B3:38:58:5D:59:B9:D4:4B:B8:C1:0D:D6 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c3:2a:51:43:c9:b4:04:93:5f:a8:f3:2e:19:b8:20:13:a5: 4b:41:5b:01:17:66:ed:8d:c2:bb:2a:3a:a8:57:36:e2:47:a1: 02:a1:3a:a4:74:f5:0b:de:5b:42:2c:be:c0:ca:d6:cb:ca:ab: 00:ff:6c:c7:fd:c8:a7:8d:38:de:5e:1f:13:12:ff:08:ca:6c: e4:9e:7b:ef:3e:60:49:9e:8f:f7:af:5c:56:6e:b5:74:d6:3d: 3a:83:e2:14:03:cd:9b:db:4b:c7:2c:e0:96:d8:d0:d2:aa:98: de:f7:4f:d8:57:10:58:9a:95:31:62:d3:03:39:4d:4c:2e:30: 9d:bb:a0:82:e7:8e:da:6a:e1:5c:ab:be:16:84:6b:2d:de:49: c1:d9:1c:6e:c8:9f:e0:6f:b2:07:cb:4a:e2:d2:54:40:d3:1e: fd:5a:de:94:1a:8e:34:2f:82:60:d3:82:58:8b:0f:d9:de:87: fc:17:7d:d7:ff:f6:17:87:7c:79:0b:60:43:bb:7b:25:6b:27: c0:8f:1a:e6:82:65:83:f4:a8:5c:58:d2:8b:31:1f:f0:39:19: 07:b7:f3:02:be:87:ea:f0:54:d3:87:22:a6:78:ec:9f:ff:d9: a0:1a:4c:1e:e5:29:6a:1d:10:80:0a:64:93:56:1e:9e:26:29: a2:4d:e0:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNjAzMDMwODAyMzVaFw0yNjAzMTAwODAyMzVaMBgxFjAUBgNV BAMTDTY5YTY5NTliLWE4YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqlk3gwrmpRETPCxTGodX+XhNw8lScjL79/Rlb52/omqPQlQlVi2bgja7OThYL KUQpEEkVrUTLR+qc6LSR8TGgCpm312A/KPAnGSU0Lv1/Z2IELO2STFl2j7ivrlZM KxbGYO8K2mPgAS+Nfx5UBER8/ZalPZ5AVuNrkNAEv1w+BHBnHzu07VELX9Ipv6Ws +qD3XLYBS5wAoApEvJzZsptiri5uKrXeMjygiru7y+XRtky4YUjm0puQwPl2FwaB oZ22389tuSZ+mIZ9bel2WGKEKQvmFPyZN+cEQeODqzV8EK5YZ9tyEU63lXhgujE4 szxRagZLyzZKlVk/kALbwocDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqLs8E5PC HC6zOFhdWbnUS7jBDdYwHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 OEE3L0ZBRTk2QzRBQjYyMDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1L RDhVR2ZXRkJHanRwVmxvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC6wypRQ8m0BJNfqPMuGbggE6VLQVsBF2btjcK7KjqoVzbiR6ECoTqkdPUL3ltC LL7AytbLyqsA/2zH/cinjTjeXh8TEv8IymzknnvvPmBJno/3r1xWbrV01j06g+IU A82b20vHLOCW2NDSqpje90/YVxBYmpUxYtMDOU1MLjCdu6CC547aauFcq74WhGst 3knB2RxuyJ/gb7IHy0ri0lRA0x79Wt6UGo40L4Jg04JYiw/Z3of8F33X//YXh3x5 C2BDu3slayfAjxrmgmWD9KhcWNKLMR/wORkHt/MCvofq8FTThyKmeOyf/9mgGkwe 5SlqHRCACmSTVh6eJimiTeAC -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:28 2026 by rpki-client