$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: 9vUF5//z8uhWEQWnzgjfr9TSETWIbmxYEy+kb0w+9Uw= Subject key identifier: 6B:28:58:97:F8:0C:50:EA:AC:5C:12:AA:CD:2D:2F:50:A2:BC:C5:F2 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 06A1 Signing time: Tue 14 Apr 2026 22:17:56 +0000 Manifest this update: Tue 14 Apr 2026 22:17:55 +0000 Manifest next update: Tue 21 Apr 2026 22:17:55 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: XoJ4JComghujJ0NXNkBQWgZ1MWPyQjY2YKvWNQwFH2g=) 2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) 3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) 4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) 5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) 6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Apr 14 22:17:55 2026 GMT Not After : Apr 21 22:17:55 2026 GMT Subject: CN=69debd14-d827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:12:15:d7:68:ce:3a:bd:e3:e2:ec:64:64: 9c:60:e5:e4:55:ac:18:1b:b2:de:ad:85:f7:0b:22: 72:df:7a:29:08:78:39:8b:5c:f3:d6:91:c2:4e:75: 43:19:47:5e:53:19:b3:03:73:ed:3f:21:f0:37:98: 3d:96:32:e8:a7:0d:30:8d:3d:0f:ec:6f:9d:c7:16: f4:99:20:b8:c1:a6:1a:af:d7:0c:a3:4a:98:90:bb: 9e:7a:ac:54:3e:82:e5:c5:e9:2d:82:2a:3a:a8:1f: a7:60:48:0f:4d:00:f6:ca:39:34:d7:f8:58:6f:fe: e8:30:f8:83:7e:4c:e2:b0:d8:7f:ac:8f:3d:cc:1b: bc:76:3a:82:47:a2:5f:0c:3a:ad:c9:23:ce:28:1e: 11:53:2f:57:63:b0:e6:e9:c5:6b:77:fe:cb:ac:30: f1:90:41:26:dc:20:88:0b:87:49:07:d8:a0:9f:5f: 63:2e:ac:2e:81:1f:fc:76:25:2f:ce:1d:12:3d:8e: ac:40:eb:38:e2:fe:ee:55:6d:eb:1d:f5:4c:24:80: d3:42:81:d8:d9:64:6f:68:92:05:86:2d:f7:4c:4f: 22:36:e4:b6:55:76:03:73:ab:ce:00:8a:93:59:b2: 69:6c:60:b0:e6:dc:25:e7:26:2e:29:33:ca:78:16: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:28:58:97:F8:0C:50:EA:AC:5C:12:AA:CD:2D:2F:50:A2:BC:C5:F2 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4b:e5:e8:05:2f:38:5c:51:6b:01:d9:1d:8f:9b:1c:e7:1a: 54:4b:c3:9d:7c:62:da:41:4b:62:ff:c8:42:fe:58:6b:af:93: 70:f4:46:c0:28:66:38:44:cc:d4:27:d8:6a:bd:22:24:84:e2: 08:d1:0e:72:6d:68:c9:f1:70:fd:7b:87:5a:9e:4f:c1:34:09: c0:97:2d:f9:52:4b:73:55:c7:c1:c5:e4:83:83:9f:f2:17:46: 95:a3:50:10:61:df:72:9a:a6:ed:b8:ff:07:c4:52:91:9d:d6: cf:e2:21:6b:95:0d:34:6e:b8:bc:aa:71:7c:ac:47:fa:25:f2: 3a:e8:64:49:ca:1c:53:80:7d:12:f4:32:69:68:86:99:66:81: 0b:17:aa:b0:7b:cc:18:84:7c:c0:32:27:97:70:72:c1:2c:2d: d7:c4:30:a5:5c:1c:52:f6:ec:64:bb:5d:4a:54:88:1c:32:61: 9f:83:86:89:85:13:1f:c8:07:6f:93:1a:d6:a4:9c:db:23:5a: b6:73:11:1f:a2:20:92:83:99:62:99:18:78:b7:55:55:b1:64: 8a:09:25:c1:52:ec:48:0a:b6:1a:bb:2e:45:0e:68:01:08:80: 31:72:67:96:49:e7:24:28:c4:86:b8:42:7a:a2:ce:37:a7:4d: ec:6a:c0:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwNDE0MjIxNzU1WhcNMjYwNDIxMjIxNzU1WjAYMRYwFAYD VQQDEw02OWRlYmQxNC1kODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5ESFddozjq94+LsZGScYOXkVawYG7LerYX3CyJy33opCHg5i1zz1pHCTnVD GUdeUxmzA3PtPyHwN5g9ljLopw0wjT0P7G+dxxb0mSC4waYar9cMo0qYkLueeqxU PoLlxektgio6qB+nYEgPTQD2yjk01/hYb/7oMPiDfkzisNh/rI89zBu8djqCR6Jf DDqtySPOKB4RUy9XY7Dm6cVrd/7LrDDxkEEm3CCIC4dJB9ign19jLqwugR/8diUv zh0SPY6sQOs44v7uVW3rHfVMJIDTQoHY2WRvaJIFhi33TE8iNuS2VXYDc6vOAIqT WbJpbGCw5twl5yYuKTPKeBa7QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsoWJf4 DFDqrFwSqs0tL1CivMXyMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmkvl6AUvOFxRawHZHY+bHOcaVEvDnXxi2kFLYv/IQv5Ya6+TcPRGwChmOETM 1CfYar0iJITiCNEOcm1oyfFw/XuHWp5PwTQJwJct+VJLc1XHwcXkg4Of8hdGlaNQ EGHfcpqm7bj/B8RSkZ3Wz+Iha5UNNG64vKpxfKxH+iXyOuhkScocU4B9EvQyaWiG mWaBCxeqsHvMGIR8wDInl3BywSwt18QwpVwcUvbsZLtdSlSIHDJhn4OGiYUTH8gH b5Ma1qSc2yNatnMRH6IgkoOZYpkYeLdVVbFkigklwVLsSAq2GrsuRQ5oAQiAMXJn lknnJCjEhrhCeqLON6dN7GrALg== -----END CERTIFICATE-----Generated at Wed Apr 15 04:05:15 2026 by rpki-client