$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: 59CDHqayy9uSILGs+yIkLcagjsfxoEk6xoTRYJu6oEU= Subject key identifier: 4C:53:76:70:C5:16:7E:53:DB:AE:21:4E:63:40:86:96:A4:A3:58:2C Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 0409 Signing time: Thu 21 May 2026 00:30:58 +0000 Manifest this update: Thu 21 May 2026 00:30:58 +0000 Manifest next update: Thu 28 May 2026 00:30:58 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: EHs9tyuWlZ7J68m6qXXL6SiKW6BGh0PYNwyjeKhgyAo=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=) 3: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: DAX9aDACQRDZ+tftq+yUNOaT2K9U/BHvepIgwRyOpVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: May 21 00:30:58 2026 GMT Not After : May 28 00:30:58 2026 GMT Subject: CN=6a0e5242-1164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:50:d7:04:af:e8:6a:f7:ad:fd:ac:ce:82: 08:a5:15:42:b4:13:fa:61:c6:6f:e6:1b:7d:1a:0c: 6b:d8:80:27:05:93:9e:da:50:40:5a:2d:be:c9:63: 6e:e4:5f:34:98:29:df:54:e4:62:ed:4b:14:e4:47: 08:20:05:4e:00:1c:81:e3:5d:26:95:5a:bf:53:8f: 22:1c:39:d6:af:ca:c6:96:b6:dd:c3:11:d6:ea:a8: a6:ef:ad:a4:09:3e:78:8c:27:ea:d0:77:31:1c:51: 8c:ed:d3:5a:61:df:ca:84:b5:5e:a9:ba:db:45:28: 78:bf:b1:50:1e:21:7b:b5:c9:1a:40:bf:23:4f:6d: 64:ee:d5:a7:91:96:0a:a1:a6:7e:eb:60:7c:62:34: 50:4c:2e:33:59:3b:42:66:f7:11:01:cc:b4:15:db: 31:3e:58:76:f6:7a:fa:f3:d1:02:bb:0d:f5:bc:b3: d6:04:ff:13:bc:86:74:00:ec:f9:6b:43:21:8f:dc: a1:bb:4c:32:2e:75:c6:a0:ff:bb:2a:c2:6a:af:d3: ce:b5:4d:e2:04:f5:81:71:af:20:a2:5b:01:c5:9c: 39:5c:cd:63:73:f9:a2:d5:ba:66:be:89:73:13:25: 5e:36:3a:1d:af:2e:f1:22:bd:71:77:dd:ee:7e:f2: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:76:70:C5:16:7E:53:DB:AE:21:4E:63:40:86:96:A4:A3:58:2C X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:de:e9:cd:22:21:45:e2:51:0f:17:c5:f7:34:ee:f4:ce:c5: 22:5e:cb:39:ae:bc:e4:11:a9:df:8f:cf:d0:89:52:73:df:07: 6f:be:06:40:6f:17:de:3a:ee:07:59:f1:51:ac:ad:a4:30:56: 7f:c8:95:6d:b2:eb:0f:42:8b:71:6b:73:e3:de:b9:cf:03:3c: 4b:33:27:c1:3b:a0:a0:76:9c:7c:55:1e:07:e6:e3:1a:11:f0: 79:64:e4:a7:b8:7b:83:d3:3a:d7:0a:24:33:96:57:a8:8d:15: cc:4e:af:3d:1f:a7:64:6d:a7:62:9d:26:8b:a1:28:9d:50:82: 25:28:83:c3:1a:f2:77:60:8a:d9:29:50:5e:11:c1:fa:71:1e: 07:ae:0d:33:fa:9f:8a:11:1b:36:a8:33:b3:6a:c9:93:ee:ac: 2c:37:9d:eb:52:0a:62:62:46:a6:f6:1a:40:d0:f0:b7:d3:7a: 03:b6:14:a3:5a:b4:be:0a:6f:88:08:16:ea:fb:38:23:b3:54: 5f:95:ef:98:25:bc:c8:71:1a:7b:07:cb:6e:4f:86:ea:2d:ae: 27:79:45:73:7c:7f:63:20:8b:18:a1:ef:91:e8:b9:2d:17:36: 95:48:83:16:32:4e:41:75:dc:c5:8d:46:8e:31:0b:95:8d:5e: 82:6e:59:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYwNTIxMDAzMDU4WhcNMjYwNTI4MDAzMDU4WjAYMRYwFAYD VQQDEw02YTBlNTI0Mi0xMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFJQ1wSv6Gr3rf2szoIIpRVCtBP6YcZv5ht9Ggxr2IAnBZOe2lBAWi2+yWNu 5F80mCnfVORi7UsU5EcIIAVOAByB410mlVq/U48iHDnWr8rGlrbdwxHW6qim762k CT54jCfq0HcxHFGM7dNaYd/KhLVeqbrbRSh4v7FQHiF7tckaQL8jT21k7tWnkZYK oaZ+62B8YjRQTC4zWTtCZvcRAcy0FdsxPlh29nr689ECuw31vLPWBP8TvIZ0AOz5 a0Mhj9yhu0wyLnXGoP+7KsJqr9POtU3iBPWBca8golsBxZw5XM1jc/mi1bpmvolz EyVeNjodry7xIr1xd93ufvI49QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExTdnDF Fn5T264hTmNAhpako1gsMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI97pzSIhReJRDxfF9zTu9M7FIl7LOa685BGp34/P0IlSc98Hb74GQG8X3jru B1nxUaytpDBWf8iVbbLrD0KLcWtz4965zwM8SzMnwTugoHacfFUeB+bjGhHweWTk p7h7g9M61wokM5ZXqI0VzE6vPR+nZG2nYp0mi6EonVCCJSiDwxryd2CK2SlQXhHB +nEeB64NM/qfihEbNqgzs2rJk+6sLDed61IKYmJGpvYaQNDwt9N6A7YUo1q0vgpv iAgW6vs4I7NUX5XvmCW8yHEaewfLbk+G6i2uJ3lFc3x/YyCLGKHvkei5LRc2lUiD FjJOQXXcxY1GjjELlY1egm5Zeg== -----END CERTIFICATE-----Generated at Thu May 21 09:35:48 2026 by rpki-client