$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json) Hash identifier: aTx0q9Ldx/wvqJjIX7AfLKbTu+7dAKe+OWdtBk/QndM= Subject key identifier: 81:8D:06:F3:1C:D3:FA:8E:D0:FB:F7:3C:58:85:47:9D:85:50:B4:6D Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Certificate serial: 17F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft Manifest number: 17D5 Signing time: Tue 26 May 2026 16:34:18 +0000 Manifest this update: Tue 26 May 2026 16:34:17 +0000 Manifest next update: Tue 02 Jun 2026 16:34:17 +0000 Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: y2NM9i5dddckscTm8ofKwoqyw+fbc5liZYjRVf4cIdM=) 2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: cKQ+GalQu9XNt/5RvNMkJ98r6wqBmv6X34kALjzsemM=) 3: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=) 4: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: trynK1wLeS7SLenEVjxu6KuwoiTckqP52hJXG4iHXr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jun 2026 16:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C Validity Not Before: May 26 16:34:17 2026 GMT Not After : Jun 2 16:34:17 2026 GMT Subject: CN=6a15cb8a-546a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:c3:a7:0f:53:fb:25:a9:a8:d3:eb:0f:e7: 5a:2d:15:e7:51:07:56:0f:1a:e0:1d:12:94:4e:ad: c6:15:a7:d9:24:24:0e:e4:b1:a6:be:6a:04:4f:44: de:79:88:cd:d1:cb:b3:1c:b8:76:17:aa:29:79:75: f4:05:47:5c:dc:75:df:78:0a:28:28:c3:52:26:e6: fb:30:90:70:a0:9d:36:4d:17:43:57:f2:09:a1:ec: 66:52:2b:06:40:a9:53:ae:77:9f:e3:9c:a3:4e:73: 13:9f:89:12:fd:bf:15:02:e7:14:a6:b1:24:0b:27: 98:89:4e:b0:5f:cd:75:1a:2f:17:20:f2:fd:96:93: c5:8e:b1:87:7b:a8:db:5c:79:40:a9:0d:5d:61:c0: ed:c4:82:13:6d:8f:22:99:47:68:6c:8c:55:85:9f: 3a:e4:9d:ac:6c:39:ba:49:eb:fc:b5:21:5c:df:79: 4f:12:94:27:99:89:d9:55:74:ca:2f:92:d1:6b:ca: 89:ab:b6:bd:3a:c9:f4:e1:4a:6a:7b:fb:bb:da:9c: 15:3b:8d:1b:81:36:f5:6f:8c:bd:e3:8c:1d:2e:72: d0:74:f0:17:85:f0:66:7d:14:07:ad:11:8f:73:75: e6:6b:82:74:5c:fb:f3:6f:b0:9a:1c:3f:b3:a7:21: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8D:06:F3:1C:D3:FA:8E:D0:FB:F7:3C:58:85:47:9D:85:50:B4:6D X509v3 Authority Key Identifier: keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:a4:c6:c6:4d:6b:b2:ef:dd:a2:33:56:e9:f9:f4:fc:e8:12: 5f:8a:3f:64:ee:89:7f:a9:73:e6:c9:05:c7:f9:c3:6b:bb:7b: a5:80:c5:16:53:ba:1b:bb:1f:0e:9b:77:cb:3b:b3:29:a3:fe: 5b:78:94:93:78:a0:96:0a:fb:7a:00:85:d0:c7:ad:57:59:9c: 97:ea:a5:1c:a4:b6:b9:a9:32:1f:e4:5e:56:7a:b9:8c:5a:a9: 80:8b:cd:68:9e:3e:2b:0e:e9:e2:9f:35:f9:0b:da:d8:f1:b4: 5d:2c:0b:e7:99:99:23:03:e5:f6:f5:b6:1c:8a:44:ef:c8:3a: 81:db:d5:93:12:11:26:60:2a:4e:f7:cd:c8:24:48:a2:d7:3e: d1:02:ac:93:db:8e:b6:c7:1d:1a:e7:85:38:d4:7b:b6:18:69: a8:3e:f0:27:7c:c8:a5:3c:ec:0e:0e:08:1f:39:e7:ab:90:db: d8:70:65:bd:d8:db:13:20:e2:8e:49:50:93:37:4c:fa:7b:ff: 08:54:95:86:a0:f4:00:fd:2e:67:fd:45:dc:d9:9a:18:67:ca: 9e:29:ab:a6:01:bc:4b:7f:70:30:7e:1f:89:23:50:5c:74:f5: 65:4f:51:bd:b5:34:65:22:31:bb:eb:d8:0b:26:49:06:1a:e6: 95:b4:1b:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3OTUxMTAvBgNVBAUTKDg3MEFFNTlBNEIzOERBRkM2QTMxQUJFMzI5Q0NGODc4 RkRGNzJBOEMwHhcNMjYwNTI2MTYzNDE3WhcNMjYwNjAyMTYzNDE3WjAYMRYwFAYD VQQDEw02YTE1Y2I4YS01NDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlDDpw9T+yWpqNPrD+daLRXnUQdWDxrgHRKUTq3GFafZJCQO5LGmvmoET0Te eYjN0cuzHLh2F6opeXX0BUdc3HXfeAooKMNSJub7MJBwoJ02TRdDV/IJoexmUisG QKlTrnef45yjTnMTn4kS/b8VAucUprEkCyeYiU6wX811Gi8XIPL9lpPFjrGHe6jb XHlAqQ1dYcDtxIITbY8imUdobIxVhZ865J2sbDm6Sev8tSFc33lPEpQnmYnZVXTK L5LRa8qJq7a9Osn04Upqe/u72pwVO40bgTb1b4y944wdLnLQdPAXhfBmfRQHrRGP c3Xma4J0XPvzb7CaHD+zpyF1PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGNBvMc 0/qO0Pv3PFiFR52FULRtMB8GA1UdIwQYMBaAFIcK5ZpLONr8ajGr4ynM+Hj99yqM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDc5NS85OTI5NjlGQUU2 QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2eHFNYXZqS2N6NGVQMzNL b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3cmxta3M0MnZ4cU1hdmpLY3o0ZVAzM0tvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDc5NS85OTI5NjlGQUU2QUUxMUU3ODAwQTdDNjNDNEY5QUUwMi9od3JsbWtzNDJ2 eHFNYXZqS2N6NGVQMzNLb3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz6TGxk1rsu/dojNW6fn0/OgSX4o/ZO6Jf6lz5skFx/nDa7t7pYDFFlO6G7sf Dpt3yzuzKaP+W3iUk3iglgr7egCF0MetV1mcl+qlHKS2uakyH+ReVnq5jFqpgIvN aJ4+Kw7p4p81+Qva2PG0XSwL55mZIwPl9vW2HIpE78g6gdvVkxIRJmAqTvfNyCRI otc+0QKsk9uOtscdGueFONR7thhpqD7wJ3zIpTzsDg4IHznnq5Db2HBlvdjbEyDi jklQkzdM+nv/CFSVhqD0AP0uZ/1F3NmaGGfKnimrpgG8S39wMH4fiSNQXHT1ZU9R vbU0ZSIxu+vYCyZJBhrmlbQbgA== -----END CERTIFICATE-----Generated at Wed May 27 18:42:34 2026 by rpki-client