$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: ZEeRuKBUU0I1FM+zvBx5wkz1xGmcswJ9hK2bIWxzJn0= Subject key identifier: 08:3C:29:11:E6:DB:BF:72:E4:1E:EA:88:25:A2:C1:1B:E1:9A:17:16 Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: 37 Signing time: Thu 05 Mar 2026 07:27:09 +0000 Manifest this update: Thu 05 Mar 2026 07:27:09 +0000 Manifest next update: Thu 12 Mar 2026 07:27:09 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: jBxZhkxfrdmLHYA6iySTAXCgC8UeedzkZWSEiITqKbg=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 07:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Mar 5 07:27:09 2026 GMT Not After : Mar 12 07:27:09 2026 GMT Subject: CN=69a9304d-0ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:fb:ae:e0:5c:80:8a:23:f2:36:93:ac:b7: 10:d4:06:3e:f3:bb:18:ae:24:6f:13:89:30:66:2d: 36:0b:22:aa:1c:fb:83:33:1d:33:b5:e7:19:a0:af: 01:14:b4:ae:0a:93:64:da:d6:ff:db:3e:bf:bf:41: 3b:fd:0a:05:08:89:8c:e5:fc:11:0f:8f:04:31:4d: 82:b3:81:ac:2c:e9:5d:62:b2:60:46:95:ad:12:ad: a5:5d:14:ae:1b:e1:d2:13:b0:db:14:85:fb:f7:23: 03:d0:8b:5b:f0:ec:b6:67:78:84:ec:36:7a:ab:c3: 08:3b:99:9e:57:39:28:cf:99:74:26:94:4e:89:e8: c9:e4:f9:6a:fb:90:5a:01:d5:9a:fc:c3:81:ec:f3: b4:2c:51:c5:6e:3e:f8:bd:e0:48:c6:ac:65:e9:e5: 45:e8:cd:01:82:9d:7e:e7:8d:2c:4c:88:54:0b:dc: 45:0e:29:df:c1:30:b7:81:f2:85:3e:9c:2d:64:e0: eb:56:1b:4c:1d:b3:c2:ee:e2:c6:c8:93:99:74:f8: 39:3c:c9:92:5b:eb:e5:6d:38:5b:40:3b:1f:07:31: 77:9e:78:f9:79:d9:1c:15:cc:11:ea:ee:44:f9:cb: 55:14:62:7f:e2:0d:ed:76:9b:f0:6a:5c:eb:b9:a4: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:29:11:E6:DB:BF:72:E4:1E:EA:88:25:A2:C1:1B:E1:9A:17:16 X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:1a:fa:30:02:4e:ae:97:ba:a8:e5:ca:82:9e:e4:51:2a: 43:f7:25:10:b9:b1:1b:35:0b:39:9d:5f:8c:89:b7:9a:46:b0: 56:81:07:88:ec:f2:3c:b2:d3:7f:d5:6a:95:69:e8:0d:d0:e4: 83:63:39:87:26:b6:50:c1:1e:e1:e5:3e:d6:a9:6c:fb:a5:b7: 5f:b3:8a:1c:ca:fd:0a:26:ec:f0:41:f8:4a:22:34:6f:8c:b0: 7d:13:1a:e0:0f:ce:c2:00:fd:53:08:d4:02:ce:57:5b:30:07: 23:44:53:b9:a1:68:10:ab:04:44:ef:92:a5:45:50:06:f5:57: 16:13:39:aa:96:64:6a:0b:67:53:8b:36:43:38:b5:9b:58:61: e5:1c:a0:df:73:8c:88:65:46:1a:5e:c5:54:22:54:08:82:79: 48:fd:2e:33:fb:8c:f8:c4:7e:d5:54:a1:be:79:8c:8e:f1:d4: 76:bb:21:81:ef:85:86:f0:d8:f5:98:ab:cc:e3:6e:a6:98:3b: 6b:f2:cd:ee:4e:1f:a3:93:4f:51:2d:65:e2:ce:81:28:46:32: d5:a1:fc:fc:9f:8f:fc:cf:b1:cd:e1:ce:e8:b3:e8:72:f1:68: 51:73:d6:48:6a:ab:f2:57:7b:3f:06:b3:8b:9f:64:ee:69:5b: 1e:dc:9c:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG NEYwQkJCMzAeFw0yNjAzMDUwNzI3MDlaFw0yNjAzMTIwNzI3MDlaMBgxFjAUBgNV BAMTDTY5YTkzMDRkLTBhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvJfuu4FyAiiPyNpOstxDUBj7zuxiuJG8TiTBmLTYLIqoc+4MzHTO15xmgrwEU tK4Kk2Ta1v/bPr+/QTv9CgUIiYzl/BEPjwQxTYKzgaws6V1ismBGla0SraVdFK4b 4dITsNsUhfv3IwPQi1vw7LZneITsNnqrwwg7mZ5XOSjPmXQmlE6J6Mnk+Wr7kFoB 1Zr8w4Hs87QsUcVuPvi94EjGrGXp5UXozQGCnX7njSxMiFQL3EUOKd/BMLeB8oU+ nC1k4OtWG0wds8Lu4sbIk5l0+Dk8yZJb6+VtOFtAOx8HMXeeePl52RwVzBHq7kT5 y1UUYn/iDe12m/BqXOu5pESrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCDwpEebb v3LkHuqIJaLBG+GaFxYwHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53 WE9NZXFESXI4ZF9Ud3U3TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCOChr6MAJOrpe6qOXKgp7kUSpD9yUQubEbNQs5nV+MibeaRrBWgQeI7PI8stN/ 1WqVaegN0OSDYzmHJrZQwR7h5T7WqWz7pbdfs4ocyv0KJuzwQfhKIjRvjLB9Exrg D87CAP1TCNQCzldbMAcjRFO5oWgQqwRE75KlRVAG9VcWEzmqlmRqC2dTizZDOLWb WGHlHKDfc4yIZUYaXsVUIlQIgnlI/S4z+4z4xH7VVKG+eYyO8dR2uyGB74WG8Nj1 mKvM426mmDtr8s3uTh+jk09RLWXizoEoRjLVofz8n4/8z7HN4c7os+hy8WhRc9ZI aqvyV3s/BrOLn2TuaVse3JwM -----END CERTIFICATE-----Generated at Fri Mar 6 17:03:20 2026 by rpki-client