$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: uPCCLWdNwIF5g708DkHpzBVzReJ3BeW1lXI0P1Ja5TU= Subject key identifier: 40:CD:9E:07:19:64:6C:FE:DE:BF:4C:74:74:D8:0D:E3:FD:96:F2:3B Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 042B Signing time: Mon 27 Jul 2026 01:21:31 +0000 Manifest this update: Mon 27 Jul 2026 01:21:31 +0000 Manifest next update: Mon 03 Aug 2026 01:21:31 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: SMSvcgt32VVtmR0ZA8CM14L6ZK2g6N+IrRPKVP9tOxk=) 2: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: DAX9aDACQRDZ+tftq+yUNOaT2K9U/BHvepIgwRyOpVA=) 3: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Jul 27 01:21:31 2026 GMT Not After : Aug 3 01:21:31 2026 GMT Subject: CN=6a66b29b-f9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:3c:ee:fe:a4:4e:6a:5b:97:c0:94:46:c9: 6f:c1:d9:bc:03:98:61:56:f9:5e:ee:b8:5f:a3:b4: 7d:50:0a:ef:41:f1:96:ed:b9:57:8e:ca:7f:d0:72: da:fb:57:da:ff:c2:8e:8f:7b:3a:5c:51:40:f1:64: 82:d4:0b:f0:ec:0b:9e:09:15:78:42:4f:6b:a1:46: 81:55:7a:12:02:42:c4:00:b0:90:09:e6:bb:fd:a8: d2:5c:ff:dc:8b:09:7c:c8:77:16:1e:b8:b9:07:63: 99:1d:f2:51:2f:87:ad:24:0a:c5:8a:19:25:6d:ff: 17:28:ea:0a:81:40:d1:6a:3b:da:74:04:8a:4b:ed: 74:9e:ad:0f:3c:61:5e:11:e1:44:70:91:b8:04:fb: 6d:80:39:2b:b3:0d:1e:a9:69:ad:4f:4f:69:31:8d: d7:d0:fa:5c:3c:09:1a:2c:f2:95:bc:8b:ca:08:cc: 74:76:fa:6f:14:7b:97:b1:b3:4b:8c:ef:3f:bf:c6: fc:66:b9:51:d9:8e:e8:06:9f:67:4a:f5:7e:6b:76: b8:53:a4:81:9f:a2:06:39:b1:d6:09:ad:05:51:e8: f4:3b:ec:3d:a7:7a:07:8a:af:64:4f:a1:ef:14:eb: d4:57:71:5e:26:2b:cb:cb:0b:b2:23:9c:b6:dc:08: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CD:9E:07:19:64:6C:FE:DE:BF:4C:74:74:D8:0D:E3:FD:96:F2:3B X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:f2:a0:0b:bc:87:33:a1:9f:88:df:c6:ef:5d:3f:6a:7c: 49:ee:b2:a2:f8:4b:73:fd:bb:02:9f:1d:a8:94:0d:98:68:ff: e3:30:64:e9:fc:2a:b8:89:f5:a0:df:1b:ea:ff:15:45:1c:1b: 11:bf:38:43:27:93:0f:35:81:63:2a:d4:00:6f:31:d5:8d:ce: 47:ff:33:d4:45:67:05:38:c2:0e:f1:3d:ee:4e:d9:4b:b8:ff: 70:8c:e4:b2:b5:8b:d2:76:26:e9:45:6b:9e:26:3e:40:53:f7: 18:bd:c2:f6:26:3e:92:89:e5:5d:23:82:aa:96:6a:79:08:3c: 03:8b:d3:f5:af:4f:b1:83:ac:e7:91:e5:d4:9c:a1:b0:dc:61: 32:10:51:49:8e:11:9f:ac:ee:f7:4b:06:7a:72:51:38:6f:de: d1:36:43:71:16:bb:ff:c0:6b:aa:4f:57:81:4c:28:88:49:b6: ed:1d:d4:7f:c0:9d:5c:0e:f1:0f:e5:e6:1f:3f:5c:3f:58:ea: 84:9d:59:68:9c:24:49:23:1f:a8:fe:30:5c:cb:19:9a:25:70: f3:af:89:6c:5d:ee:e4:36:95:dd:09:51:d3:1a:8d:12:a8:81: b1:ef:ea:63:1c:d3:14:ac:33:6c:42:f8:28:c8:78:83:32:7e: 89:36:68:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYwNzI3MDEyMTMxWhcNMjYwODAzMDEyMTMxWjAYMRYwFAYD VQQDEw02YTY2YjI5Yi1mOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyo87v6kTmpbl8CURslvwdm8A5hhVvle7rhfo7R9UArvQfGW7blXjsp/0HLa +1fa/8KOj3s6XFFA8WSC1Avw7AueCRV4Qk9roUaBVXoSAkLEALCQCea7/ajSXP/c iwl8yHcWHri5B2OZHfJRL4etJArFihklbf8XKOoKgUDRajvadASKS+10nq0PPGFe EeFEcJG4BPttgDkrsw0eqWmtT09pMY3X0PpcPAkaLPKVvIvKCMx0dvpvFHuXsbNL jO8/v8b8ZrlR2Y7oBp9nSvV+a3a4U6SBn6IGObHWCa0FUej0O+w9p3oHiq9kT6Hv FOvUV3FeJivLywuyI5y23AjNBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDNngcZ ZGz+3r9MdHTYDeP9lvI7MB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvhvyoAu8hzOhn4jfxu9dP2p8Se6yovhLc/27Ap8dqJQNmGj/4zBk6fwquIn1 oN8b6v8VRRwbEb84QyeTDzWBYyrUAG8x1Y3OR/8z1EVnBTjCDvE97k7ZS7j/cIzk srWL0nYm6UVrniY+QFP3GL3C9iY+konlXSOCqpZqeQg8A4vT9a9PsYOs55Hl1Jyh sNxhMhBRSY4Rn6zu90sGenJROG/e0TZDcRa7/8Brqk9XgUwoiEm27R3Uf8CdXA7x D+XmHz9cP1jqhJ1ZaJwkSSMfqP4wXMsZmiVw86+JbF3u5DaV3QlR0xqNEqiBse/q YxzTFKwzbEL4KMh4gzJ+iTZoDw== -----END CERTIFICATE-----Generated at Tue Jul 28 02:07:27 2026 by rpki-client