$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: y67iRBvAre/FU4cddbCjTegnDamij8v1dSYTmN/OrTI= Subject key identifier: E6:A5:8A:55:F8:D8:0D:60:01:A6:84:05:0A:49:53:75:74:7F:B7:97 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0AC3 Signing time: Tue 18 Aug 2026 19:44:19 +0000 Manifest this update: Tue 18 Aug 2026 19:44:19 +0000 Manifest next update: Tue 25 Aug 2026 19:44:19 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: 6KpFjXQgUDtoxMY0sgwWKP64x6h5f/iUtIDgMESYRoo=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Aug 18 19:44:19 2026 GMT Not After : Aug 25 19:44:19 2026 GMT Subject: CN=6a84b613-e65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:0a:aa:a6:b1:6b:bb:cc:0b:a6:3d:43:c2: f0:d5:f2:22:d5:7f:b4:13:50:4c:28:60:3d:e6:e6: ba:9e:74:16:42:5d:06:a4:68:e9:db:a4:ee:de:cc: ef:02:00:e5:f3:84:6a:77:87:ac:e1:5e:7e:7a:34: c7:4f:6b:bd:62:58:6b:c1:cb:64:6e:ae:61:85:dc: 5f:1e:50:6f:3a:a9:3d:5b:43:1e:48:cb:68:be:ef: a4:50:0b:83:c2:c0:5d:d8:7b:ff:18:b1:e7:09:0e: b2:03:6e:06:0f:cc:9c:ac:d3:a0:c8:33:67:00:fd: 08:55:2a:e9:43:5e:97:81:d0:03:42:c2:03:7a:3b: 84:2f:13:c0:41:0c:96:90:d6:f4:bc:24:89:39:96: fe:f1:0a:e4:13:1f:98:ec:35:e1:2f:35:89:0d:5e: 29:40:b8:bb:32:50:60:8b:5e:4e:18:b0:f0:3d:72: f5:26:14:56:84:48:b2:91:72:59:0b:26:aa:cb:53: 14:55:d2:23:c5:17:8e:b0:23:d7:ee:37:82:57:6f: f0:5a:1c:0f:fc:ec:8a:ea:e2:11:69:53:f8:97:6d: 39:51:0b:f3:50:a7:7f:13:b5:97:ae:e3:5a:94:cb: 8e:ed:3d:3b:02:a7:70:6e:63:6d:84:f9:14:dd:9e: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A5:8A:55:F8:D8:0D:60:01:A6:84:05:0A:49:53:75:74:7F:B7:97 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f3:f9:36:b7:db:d7:10:9c:38:c8:a2:24:37:97:08:87:cc: a8:f2:17:33:ce:63:07:8f:72:4a:1b:b6:0f:da:df:39:34:ac: 01:02:a6:dc:6c:62:1a:1a:4d:af:00:48:c2:0c:ae:7c:cb:72: 9e:5b:f5:99:5d:8d:95:0f:61:e1:09:d9:73:63:ee:b6:06:0e: 08:47:0b:36:cf:43:7d:f7:90:c6:eb:06:cf:e3:96:95:da:6f: 3b:c3:fe:3d:9d:48:f6:ab:3f:77:c2:6b:17:1e:fa:45:58:0b: f0:e4:1f:7e:a6:ca:db:23:9e:37:fd:83:c2:6e:a4:95:be:73: 64:6d:bb:5f:23:c6:9b:d1:de:7b:ba:af:18:50:96:27:b6:89: 92:0f:f8:b9:3d:31:6d:a9:c8:8d:bb:c8:5d:48:76:6f:77:bf: e2:a6:1a:e6:36:a3:bc:71:23:8c:30:8f:9d:bd:77:00:a6:88: d1:41:84:0a:d2:a0:ea:c9:30:ff:9a:62:d4:a7:a2:bc:68:28: 60:ac:cc:25:8d:8a:f2:cd:8d:76:e9:a9:f0:c9:9b:67:ef:cb: 24:89:65:f6:0d:ff:8b:63:70:41:0f:57:1a:61:15:3c:91:6f: 90:eb:87:56:7d:0c:67:0a:6b:74:8b:34:60:23:a2:0c:37:d5: 65:c9:db:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjYwODE4MTk0NDE5WhcNMjYwODI1MTk0NDE5WjAYMRYwFAYD VQQDEw02YTg0YjYxMy1lNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2AKqqaxa7vMC6Y9Q8Lw1fIi1X+0E1BMKGA95ua6nnQWQl0GpGjp26Tu3szv AgDl84Rqd4es4V5+ejTHT2u9Ylhrwctkbq5hhdxfHlBvOqk9W0MeSMtovu+kUAuD wsBd2Hv/GLHnCQ6yA24GD8ycrNOgyDNnAP0IVSrpQ16XgdADQsIDejuELxPAQQyW kNb0vCSJOZb+8QrkEx+Y7DXhLzWJDV4pQLi7MlBgi15OGLDwPXL1JhRWhEiykXJZ Cyaqy1MUVdIjxReOsCPX7jeCV2/wWhwP/OyK6uIRaVP4l205UQvzUKd/E7WXruNa lMuO7T07AqdwbmNthPkU3Z5QWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOalilX4 2A1gAaaEBQpJU3V0f7eXMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlfP5Nrfb1xCcOMiiJDeXCIfMqPIXM85jB49yShu2D9rfOTSsAQKm3GxiGhpN rwBIwgyufMtynlv1mV2NlQ9h4QnZc2PutgYOCEcLNs9DffeQxusGz+OWldpvO8P+ PZ1I9qs/d8JrFx76RVgL8OQffqbK2yOeN/2Dwm6klb5zZG27XyPGm9Hee7qvGFCW J7aJkg/4uT0xbanIjbvIXUh2b3e/4qYa5jajvHEjjDCPnb13AKaI0UGECtKg6skw /5pi1KeivGgoYKzMJY2K8s2Ndump8MmbZ+/LJIll9g3/i2NwQQ9XGmEVPJFvkOuH Vn0MZwprdIs0YCOiDDfVZcnb7A== -----END CERTIFICATE-----Generated at Wed Aug 19 11:47:06 2026 by rpki-client