$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: xAg2M5HDAExJ8bxRvWRAAbOuidsRmdUZZ8XBSgdZfuk= Subject key identifier: 07:53:86:FC:A2:6C:4C:D1:26:BB:25:A5:BA:AC:3D:A2:C9:92:E1:BF Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 03F0 Signing time: Sun 05 Apr 2026 00:16:24 +0000 Manifest this update: Sun 05 Apr 2026 00:16:24 +0000 Manifest next update: Sun 12 Apr 2026 00:16:24 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: qH47yyQLgz9VxoZDBvSfLadISZ5L7BVc6IfTV/GXSiw=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: fPiSn9EKp07Pksf7OzdvkznMDYTa4tFQoVJ+7TRcTvU=) 3: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: SDIwrvKhvQfNC2FFKTmp/C4FfAE+5eImdfafppjPTLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Apr 5 00:16:24 2026 GMT Not After : Apr 12 00:16:24 2026 GMT Subject: CN=69d1a9d8-b609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:cb:9c:38:aa:64:09:eb:e7:90:68:7d:f6: 51:f6:32:51:cb:e4:cf:57:50:b6:0a:34:13:c7:62: c3:15:df:7b:af:7e:1e:20:67:2e:d1:4f:37:3b:40: 06:b5:f6:8c:08:57:e5:2e:23:44:06:f8:f7:97:a3: f5:c4:6e:1a:09:f3:7c:10:3a:69:55:6c:c0:f9:48: 70:1b:b5:4b:47:f3:d2:60:ac:a3:90:ca:bd:6d:92: b7:0a:d0:d0:35:5a:7a:ee:3a:44:a2:67:31:59:f3: 5a:14:55:67:e5:eb:89:1e:dd:c9:64:05:17:44:19: a6:95:65:c8:cf:61:b6:8b:21:1a:05:1a:79:e4:67: dc:b7:d9:0e:c3:40:63:38:4a:4c:08:f5:83:f8:e7: 1d:4c:85:a5:e6:f0:63:68:2b:63:17:fe:69:2e:a4: 9f:24:f2:46:cf:84:17:7b:d1:c5:8b:22:9a:32:4c: 1d:62:28:ac:0b:8d:d2:ae:25:c5:52:b9:af:ea:9b: 14:c8:6b:8a:40:0d:38:85:62:b6:98:c1:60:29:9f: f9:5a:68:d0:3f:b6:21:4c:f1:bb:63:76:6e:e6:23: 6b:53:0b:0a:9a:bf:09:f6:64:bb:e6:b6:f7:ed:2b: 10:af:22:18:71:01:42:a8:2d:7b:25:c0:d5:b4:3a: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:86:FC:A2:6C:4C:D1:26:BB:25:A5:BA:AC:3D:A2:C9:92:E1:BF X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:c5:b6:86:41:b3:fe:42:a7:30:a5:62:b2:72:47:be:86:76: 8e:66:2b:c1:3a:8e:b0:e2:bc:ef:6e:52:7c:21:d4:1c:ef:ca: 9f:5f:df:61:bf:c4:28:bb:59:9e:50:77:4a:fd:f8:ab:7b:31: 90:d0:d9:2e:b0:35:18:c1:9a:e0:a1:57:d3:f8:ea:f2:a7:d2: 44:14:7b:65:af:d4:3c:91:62:92:9f:8e:cb:48:cd:28:b7:74: 75:7f:28:36:7b:d4:52:f3:79:aa:75:34:ae:c9:61:9c:bd:8b: 57:c7:0c:4c:f3:9f:f7:7f:47:68:bf:b6:28:34:4c:b8:eb:52: 71:ec:f0:0b:33:fa:4b:3c:6e:ac:3d:04:ef:d3:ce:a9:f6:ab: 0f:48:dc:97:d7:be:7a:0b:96:fe:b6:a2:51:57:8b:78:4b:0b: 63:d4:07:e2:e5:de:b3:7d:bf:35:b1:a5:f9:d8:4d:5b:00:8c: 75:bf:b4:82:c5:ac:75:d4:e2:20:7b:a3:3e:b3:1e:ad:7f:40: 1a:18:cc:9a:2e:84:e7:e1:06:91:a2:7a:8c:20:79:62:29:d1: 32:75:3b:84:21:ec:fb:ae:d1:50:8b:d3:1e:e6:ba:5a:ac:3c: d6:b7:46:1d:84:99:ba:f7:86:9a:4a:de:47:68:6b:69:bb:d1: d5:36:54:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYwNDA1MDAxNjI0WhcNMjYwNDEyMDAxNjI0WjAYMRYwFAYD VQQDEw02OWQxYTlkOC1iNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCDLnDiqZAnr55BoffZR9jJRy+TPV1C2CjQTx2LDFd97r34eIGcu0U83O0AG tfaMCFflLiNEBvj3l6P1xG4aCfN8EDppVWzA+UhwG7VLR/PSYKyjkMq9bZK3CtDQ NVp67jpEomcxWfNaFFVn5euJHt3JZAUXRBmmlWXIz2G2iyEaBRp55Gfct9kOw0Bj OEpMCPWD+OcdTIWl5vBjaCtjF/5pLqSfJPJGz4QXe9HFiyKaMkwdYiisC43SriXF Urmv6psUyGuKQA04hWK2mMFgKZ/5WmjQP7YhTPG7Y3Zu5iNrUwsKmr8J9mS75rb3 7SsQryIYcQFCqC17JcDVtDrLWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdThvyi bEzRJrslpbqsPaLJkuG/MB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwsW2hkGz/kKnMKVisnJHvoZ2jmYrwTqOsOK8725SfCHUHO/Kn1/fYb/EKLtZ nlB3Sv34q3sxkNDZLrA1GMGa4KFX0/jq8qfSRBR7Za/UPJFikp+Oy0jNKLd0dX8o NnvUUvN5qnU0rslhnL2LV8cMTPOf939HaL+2KDRMuOtScezwCzP6SzxurD0E79PO qfarD0jcl9e+eguW/raiUVeLeEsLY9QH4uXes32/NbGl+dhNWwCMdb+0gsWsddTi IHujPrMerX9AGhjMmi6E5+EGkaJ6jCB5YinRMnU7hCHs+67RUIvTHua6Wqw81rdG HYSZuveGmkreR2hrabvR1TZUbQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:24:46 2026 by rpki-client