$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: 0vNuJ0tG7ho7uI36fx9HVWlwrri+UXmnzW4jZlMKVgQ= Subject key identifier: 87:C7:06:C2:BB:A8:E4:03:0B:7B:93:1F:42:CC:06:FE:6E:71:70:F9 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A7E Signing time: Sat 04 Apr 2026 19:23:18 +0000 Manifest this update: Sat 04 Apr 2026 19:23:18 +0000 Manifest next update: Sat 11 Apr 2026 19:23:18 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: /DKvCa4jcGyHGPeXDyCsWse7C82a1H88+4ThVbr4hrk=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Apr 4 19:23:18 2026 GMT Not After : Apr 11 19:23:18 2026 GMT Subject: CN=69d16526-7f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:93:39:28:6e:c4:ec:76:19:05:06:a3:fa: 19:4d:f9:35:a3:cc:15:32:bb:cc:d1:af:c8:ca:be: 8d:06:a0:41:65:e5:f1:ca:b0:70:f6:ce:e3:a9:29: 6f:f2:04:a7:50:ad:d5:d5:07:de:1a:02:76:7d:bf: 6e:e7:be:55:d1:45:4f:ae:86:05:da:27:1c:45:52: 1d:a7:2a:79:2f:43:a7:9a:2b:bd:96:9e:28:cb:d5: 4f:b3:c6:9d:3a:b7:0b:5a:cd:e2:77:ca:f2:e4:01: 6d:fa:49:e0:63:07:0b:1a:e7:d8:f7:00:04:59:12: 92:bd:ae:92:9f:df:6a:b4:94:29:4f:7d:7f:3d:49: ab:cb:d0:9d:f6:0c:c1:21:72:ec:1f:1b:74:76:95: 3b:ae:ba:f8:ef:e3:3d:fd:dd:ce:19:fe:58:b0:1f: b8:59:03:33:f4:4e:0e:55:72:e9:9f:bb:63:77:54: 49:c5:3c:2d:9c:b1:9c:a0:f0:74:4b:db:f3:07:b4: 04:f6:01:63:0f:33:e1:93:78:ad:da:38:fd:4a:ba: 99:ad:e5:57:36:ed:45:42:b5:8e:40:34:14:4b:52: 6c:2b:fa:23:ec:55:2e:74:e3:22:77:d9:7e:33:e0: 2d:77:35:5a:a6:34:d8:ff:aa:32:77:35:0f:12:84: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:06:C2:BB:A8:E4:03:0B:7B:93:1F:42:CC:06:FE:6E:71:70:F9 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9d:0e:c7:ba:39:54:d3:bf:0d:4e:4a:f5:eb:47:8d:48:02: de:f4:c8:ea:fe:5c:fc:1c:39:a6:bf:08:5b:30:e4:c3:8c:63: 28:92:a8:4c:55:8e:15:d6:e1:e3:59:f8:c0:d4:86:e8:d8:79: 37:4b:c9:e6:33:ae:b7:4c:a1:a1:69:68:7e:bd:ab:2f:04:20: e1:3e:8b:58:74:dc:41:4e:d7:b7:60:64:9d:f3:53:6b:74:7b: 01:79:18:64:06:43:1a:0e:49:db:66:ec:5c:6f:46:5a:a3:ba: 07:f4:b4:5e:1c:09:67:1b:c4:af:d4:69:03:8b:43:d1:68:f5: 2a:81:49:f1:30:d3:3d:ea:60:05:89:df:1f:33:f6:01:ef:80: f2:be:82:b2:93:f1:5a:7f:d1:09:2b:c4:f1:86:f6:71:9c:3e: 80:fb:d1:89:d1:80:a0:cf:80:dc:bc:8f:ce:dd:e9:cb:d2:e9: df:ed:e6:f6:14:8e:d5:d3:b5:82:26:73:f1:41:ec:ef:8b:88: 80:89:02:eb:3d:42:e8:09:57:b4:03:0e:f7:d8:42:e8:89:64: 17:e2:6d:b7:30:b1:cb:46:c4:dd:88:43:50:e3:8b:e2:f5:6f: 6f:31:2f:55:0c:10:e7:94:cf:d6:c1:b3:fb:af:74:60:c7:d3: 92:e9:51:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjYwNDA0MTkyMzE4WhcNMjYwNDExMTkyMzE4WjAYMRYwFAYD VQQDEw02OWQxNjUyNi03ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4iTOShuxOx2GQUGo/oZTfk1o8wVMrvM0a/Iyr6NBqBBZeXxyrBw9s7jqSlv 8gSnUK3V1QfeGgJ2fb9u575V0UVProYF2iccRVIdpyp5L0Onmiu9lp4oy9VPs8ad OrcLWs3id8ry5AFt+kngYwcLGufY9wAEWRKSva6Sn99qtJQpT31/PUmry9Cd9gzB IXLsHxt0dpU7rrr47+M9/d3OGf5YsB+4WQMz9E4OVXLpn7tjd1RJxTwtnLGcoPB0 S9vzB7QE9gFjDzPhk3it2jj9SrqZreVXNu1FQrWOQDQUS1JsK/oj7FUudOMid9l+ M+AtdzVapjTY/6oydzUPEoTKHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfHBsK7 qOQDC3uTH0LMBv5ucXD5MB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiJ0Ox7o5VNO/DU5K9etHjUgC3vTI6v5c/Bw5pr8IWzDkw4xjKJKoTFWOFdbh 41n4wNSG6Nh5N0vJ5jOut0yhoWlofr2rLwQg4T6LWHTcQU7Xt2BknfNTa3R7AXkY ZAZDGg5J22bsXG9GWqO6B/S0XhwJZxvEr9RpA4tD0Wj1KoFJ8TDTPepgBYnfHzP2 Ae+A8r6CspPxWn/RCSvE8Yb2cZw+gPvRidGAoM+A3LyPzt3py9Lp3+3m9hSO1dO1 giZz8UHs74uIgIkC6z1C6AlXtAMO99hC6IlkF+JttzCxy0bE3YhDUOOL4vVvbzEv VQwQ55TP1sGz+690YMfTkulRqw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:07 2026 by rpki-client