$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: cEBICumNVd+c5/vN4SDHdL89eFtTToOYJFJmn8oQGLw= Subject key identifier: BC:D5:5B:9D:28:56:24:53:B4:DE:B4:6D:9F:DB:41:4B:C0:A3:21:59 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 0130 Signing time: Sat 21 Mar 2026 04:30:57 +0000 Manifest this update: Sat 21 Mar 2026 04:30:56 +0000 Manifest next update: Sat 28 Mar 2026 04:30:56 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: HZ8zQLYpeIM0cRtQ28THYxJJVgRmK/KP7WBMlM2zCBs=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: vgtGXqZIotP7XALpdVVLNGiNYGh7f99bKJBaiOXmSGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Mar 21 04:30:56 2026 GMT Not After : Mar 28 04:30:56 2026 GMT Subject: CN=69be1f01-db5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:99:b0:9c:40:b4:8d:eb:40:78:b9:b7:04: a6:49:24:ce:a1:b7:8c:56:0d:d3:70:6f:c0:d6:8a: 90:62:36:db:28:fe:a6:a3:bc:ae:36:8d:86:d9:0d: a3:9a:43:ab:b0:1e:f3:f0:4f:b0:48:57:76:39:0c: ff:d3:60:82:e8:b4:b4:95:fa:6c:96:7c:09:a4:c9: be:89:fc:cd:c4:24:a3:8b:16:65:2f:26:d9:7c:1b: 68:4a:1b:e6:1c:6a:cf:fd:cc:40:0c:48:e9:1d:e2: 46:e8:2c:78:57:f4:9f:cd:f2:6d:6b:2a:35:10:78: 2b:e2:02:76:99:5e:bb:59:7a:7a:18:15:f7:b4:84: f9:a6:93:e0:76:1b:df:94:72:20:15:10:1e:36:aa: 0e:1e:30:d4:f0:76:e6:1e:1e:c6:73:fd:b0:29:f2: 09:88:48:ab:df:e4:a5:27:25:6e:67:1a:18:5f:4d: ce:7b:c7:41:aa:30:1a:30:53:4d:b4:87:74:ef:e8: 00:44:70:22:69:d3:4f:29:f3:5b:e2:1e:6d:81:9e: 5d:b2:21:58:48:04:b1:1d:3f:04:e6:fc:c3:e9:d1: 21:fe:cf:8b:32:23:99:81:2f:ac:8b:9a:88:db:fa: 48:f6:40:a2:c7:a2:f6:ef:ff:0c:61:9d:b9:f3:bd: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D5:5B:9D:28:56:24:53:B4:DE:B4:6D:9F:DB:41:4B:C0:A3:21:59 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f1:48:fa:8a:7f:51:2d:2b:36:63:1f:1f:dc:b5:97:38:3a: 5f:40:2c:ae:75:6b:9e:31:48:37:e5:3f:3b:d0:63:0f:bc:9d: 21:b5:2f:29:40:57:d2:aa:f2:45:d4:3b:9f:1c:71:33:50:97: ef:00:cb:66:3f:ea:f4:a4:29:41:76:d1:c4:c2:b5:7f:7e:9b: 02:8c:a4:ad:ec:82:51:cb:0b:58:24:e9:cd:91:45:a2:6f:fa: b7:c8:c6:06:35:1a:75:e4:e6:e2:f2:18:09:07:2c:0a:97:f5: 1e:59:59:81:e4:cf:11:f0:2f:b2:ea:fa:5c:e3:32:c2:0b:6a: ab:a7:55:44:43:79:84:39:1f:d5:16:85:c4:16:a8:d6:83:87: cc:6a:0e:44:16:03:fa:47:1b:97:b9:46:c7:2d:13:29:78:88: 56:15:22:5f:94:26:ef:54:38:f6:7c:80:c6:58:b5:15:da:4b: 0b:1e:02:48:d1:5a:03:79:45:e2:08:a8:9a:ac:31:7a:81:87: a0:9c:b1:54:f6:87:ac:7a:6d:82:ae:2e:da:a3:fe:03:15:d8: e8:d2:7d:04:88:88:61:5c:12:26:26:5e:7e:4b:30:46:d1:15: 46:27:b4:73:27:89:02:8f:70:dc:6a:9f:50:e8:05:40:f3:07: c8:67:6c:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjYwMzIxMDQzMDU2WhcNMjYwMzI4MDQzMDU2WjAYMRYwFAYD VQQDEw02OWJlMWYwMS1kYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnq2ZsJxAtI3rQHi5twSmSSTOobeMVg3TcG/A1oqQYjbbKP6mo7yuNo2G2Q2j mkOrsB7z8E+wSFd2OQz/02CC6LS0lfpslnwJpMm+ifzNxCSjixZlLybZfBtoShvm HGrP/cxADEjpHeJG6Cx4V/SfzfJtayo1EHgr4gJ2mV67WXp6GBX3tIT5ppPgdhvf lHIgFRAeNqoOHjDU8HbmHh7Gc/2wKfIJiEir3+SlJyVuZxoYX03Oe8dBqjAaMFNN tId07+gARHAiadNPKfNb4h5tgZ5dsiFYSASxHT8E5vzD6dEh/s+LMiOZgS+si5qI 2/pI9kCix6L27/8MYZ25873eHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzVW50o ViRTtN60bZ/bQUvAoyFZMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvPFI+op/US0rNmMfH9y1lzg6X0AsrnVrnjFIN+U/O9BjD7ydIbUvKUBX0qry RdQ7nxxxM1CX7wDLZj/q9KQpQXbRxMK1f36bAoykreyCUcsLWCTpzZFFom/6t8jG BjUadeTm4vIYCQcsCpf1HllZgeTPEfAvsur6XOMywgtqq6dVREN5hDkf1RaFxBao 1oOHzGoORBYD+kcbl7lGxy0TKXiIVhUiX5Qm71Q49nyAxli1FdpLCx4CSNFaA3lF 4giomqwxeoGHoJyxVPaHrHptgq4u2qP+AxXY6NJ9BIiIYVwSJiZefkswRtEVRie0 cyeJAo9w3GqfUOgFQPMHyGdsog== -----END CERTIFICATE-----Generated at Sat Mar 21 23:47:17 2026 by rpki-client