$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: rGNRF72cOI28RvazI9tCLN9nvyL/GUimcCcKdYqbE78= Subject key identifier: 62:2C:E7:ED:C0:FB:A6:63:DD:DD:20:B7:E2:CC:5B:83:B7:D6:0E:67 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 06A3 Signing time: Sat 18 Apr 2026 22:19:24 +0000 Manifest this update: Sat 18 Apr 2026 22:19:24 +0000 Manifest next update: Sat 25 Apr 2026 22:19:24 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: TagWS0BGT6HS4V7gX6do5CXdPiNWygE4p4jqIUb8DWQ=) 2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) 3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) 4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 22:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Apr 18 22:19:24 2026 GMT Not After : Apr 25 22:19:24 2026 GMT Subject: CN=69e4036c-c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:12:b0:2e:5c:96:ae:ac:83:39:d8:8d:da: 1a:d6:f7:8c:a8:5d:6c:87:57:46:08:b0:c8:67:5c: 70:92:2c:45:a6:10:d1:82:ff:78:82:c9:b4:24:0f: df:ed:f7:14:28:ca:fe:27:c7:80:79:8c:b9:c5:a4: 6f:bd:93:b9:0e:56:50:d0:84:d6:f8:71:d8:71:e0: 57:e8:fb:a8:61:99:7a:52:58:0c:aa:62:15:c4:ab: f8:0e:a0:f0:77:67:f4:c4:90:d0:38:f9:75:d1:c1: de:b3:a7:f4:d6:40:07:ce:dc:56:cc:9d:9e:b4:13: dd:b1:c1:39:1a:1e:60:d9:3b:3a:9a:ec:7e:02:54: dd:81:10:ad:9d:79:6e:ba:06:f1:40:f2:f9:94:e6: 88:5f:44:26:b7:04:74:cd:fc:0d:20:42:a8:0a:6f: 56:09:c3:d9:74:be:0f:47:7c:b5:d5:d5:f8:ec:39: 5b:b2:fe:57:bc:be:fc:ef:11:e7:f6:4f:3d:c7:ce: 5c:01:d8:7b:30:73:b2:fb:b8:f9:f5:9c:8c:41:b3: 0c:28:db:11:6f:b8:26:1e:42:47:d3:76:f7:f9:93: 8a:88:6b:e7:54:06:be:be:02:e1:58:00:0a:6e:b9: cf:30:64:fa:dd:f6:6f:58:bf:b3:f8:a9:4c:d4:19: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:E7:ED:C0:FB:A6:63:DD:DD:20:B7:E2:CC:5B:83:B7:D6:0E:67 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a2:48:3f:ed:d0:69:4b:c9:b1:44:00:bb:22:a7:57:02:0a: c0:54:c0:29:46:b6:fb:75:66:ae:03:c3:2c:72:aa:14:7c:ac: c1:b2:bb:43:7a:16:b5:11:c4:1e:3d:6e:2f:a1:76:ac:df:00: 2d:5a:da:74:fd:bf:58:83:ad:0e:32:1c:c9:dd:bb:a5:cb:2b: fc:ec:22:d9:d9:b5:a2:8b:15:8f:db:0f:42:07:13:73:b6:7f: f0:fa:6e:d9:be:be:81:41:ad:0c:76:08:91:e7:3e:39:93:e5: f9:a6:bd:e2:16:e6:2e:5f:cd:a5:c1:53:e2:68:17:98:16:7d: 46:16:93:c9:14:6e:2e:4d:9a:04:0c:5b:62:95:07:e4:de:c3: 28:b8:9e:06:3b:cf:3f:96:bc:8d:5d:66:fc:0d:67:3b:b0:67: 1f:5c:36:79:02:94:26:f3:83:5e:a2:57:b0:7e:47:9a:e9:32: 29:89:2b:29:0f:29:3b:23:7d:1e:71:f3:69:86:91:7e:e8:b4: d8:ad:4b:87:9b:18:d5:02:bd:99:0a:97:be:7a:93:46:a5:ff: a5:58:9c:dc:b8:e9:41:56:b5:aa:82:af:71:9d:e8:bf:72:2a: f2:c9:1a:12:4e:c7:b4:18:5a:9c:f8:59:6b:d6:ac:62:e5:33: b1:d6:42:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwNDE4MjIxOTI0WhcNMjYwNDI1MjIxOTI0WjAYMRYwFAYD VQQDEw02OWU0MDM2Yy1jMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY0SsC5clq6sgznYjdoa1veMqF1sh1dGCLDIZ1xwkixFphDRgv94gsm0JA/f 7fcUKMr+J8eAeYy5xaRvvZO5DlZQ0ITW+HHYceBX6PuoYZl6UlgMqmIVxKv4DqDw d2f0xJDQOPl10cHes6f01kAHztxWzJ2etBPdscE5Gh5g2Ts6mux+AlTdgRCtnXlu ugbxQPL5lOaIX0QmtwR0zfwNIEKoCm9WCcPZdL4PR3y11dX47Dlbsv5XvL787xHn 9k89x85cAdh7MHOy+7j59ZyMQbMMKNsRb7gmHkJH03b3+ZOKiGvnVAa+vgLhWAAK brnPMGT63fZvWL+z+KlM1Blc+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIs5+3A +6Zj3d0gt+LMW4O31g5nMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKJIP+3QaUvJsUQAuyKnVwIKwFTAKUa2+3VmrgPDLHKqFHyswbK7Q3oWtRHE Hj1uL6F2rN8ALVradP2/WIOtDjIcyd27pcsr/Owi2dm1oosVj9sPQgcTc7Z/8Ppu 2b6+gUGtDHYIkec+OZPl+aa94hbmLl/NpcFT4mgXmBZ9RhaTyRRuLk2aBAxbYpUH 5N7DKLieBjvPP5a8jV1m/A1nO7BnH1w2eQKUJvODXqJXsH5HmukyKYkrKQ8pOyN9 HnHzaYaRfui02K1Lh5sY1QK9mQqXvnqTRqX/pVic3LjpQVa1qoKvcZ3ov3Iq8ska Ek7HtBhanPhZa9asYuUzsdZCmg== -----END CERTIFICATE-----Generated at Mon Apr 20 09:39:21 2026 by rpki-client