$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: qQgfTWgXsSAeVb5Tnnqv393qYeM4cgk2Qrzjrp9X5eo= Subject key identifier: AF:EA:07:D4:EC:30:67:5C:AE:C5:AF:D7:65:EB:77:14:70:52:F2:75 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0694 Signing time: Fri 20 Mar 2026 22:03:16 +0000 Manifest this update: Fri 20 Mar 2026 22:03:16 +0000 Manifest next update: Fri 27 Mar 2026 22:03:16 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: ++3lBOgsitbyGxUO1TXYs42l1Ojmh7CnmAiGn4LF+ww=) 2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) 3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) 4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) 5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) 6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Mar 20 22:03:16 2026 GMT Not After : Mar 27 22:03:16 2026 GMT Subject: CN=69bdc424-eda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:f8:6b:70:bb:62:3c:3c:82:b8:a8:3d:79: cd:96:f0:01:94:3b:2d:41:55:b8:80:47:81:d1:17: ac:9b:41:69:fd:2d:1e:2d:75:10:7d:d7:3a:22:c2: cf:2a:ed:5e:5c:86:1b:3e:56:ce:b5:56:40:87:bc: 54:83:65:a4:7f:b4:eb:3e:9d:92:27:c9:d0:7d:bd: d7:52:2c:ac:9c:d6:c9:9d:49:b3:01:ff:6e:46:8c: a6:bd:b3:75:57:1f:7f:12:90:f4:3d:6f:7d:28:d5: 31:ba:eb:83:e8:94:e7:3a:41:ac:be:4a:03:38:2d: a6:26:e4:7b:77:e3:47:4b:bb:c3:bb:cc:c0:2e:44: ae:ef:be:fc:a2:40:18:5a:a1:71:92:d2:d3:ac:76: 09:b8:ef:47:18:9b:fa:99:75:e3:9e:4c:a6:96:1d: 8a:4c:12:06:46:50:f3:6c:db:81:d1:26:f5:35:f4: 05:fd:1a:d7:8a:91:e6:25:43:72:3a:b8:ae:89:31: 2e:75:76:a8:b7:98:5e:ba:32:57:e8:c0:eb:d1:43: d3:e7:54:fe:60:70:c4:b0:51:24:60:38:61:b0:a1: ce:7a:98:b5:08:32:69:9e:61:8e:fe:62:1c:ff:9d: ac:65:eb:1f:2c:89:9b:0a:05:a4:f9:8c:58:89:d9: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:07:D4:EC:30:67:5C:AE:C5:AF:D7:65:EB:77:14:70:52:F2:75 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:11:e5:59:e3:c8:f1:58:09:ae:6b:bb:00:43:81:34:86:51: fb:75:9b:24:85:a6:94:a6:20:ee:b1:f4:ff:a2:0c:67:ff:d4: e2:29:c5:21:b6:e9:11:6a:ed:69:81:7d:a5:94:ce:9b:b6:85: c1:4a:e7:27:da:20:94:9a:10:1c:aa:5d:dc:95:1f:17:5c:45: a8:c9:c3:e6:9e:4c:95:af:2a:69:99:49:70:76:ad:bb:31:19: ea:2f:ab:95:fc:c6:16:bb:f0:b4:50:64:34:58:14:37:5b:bb: 21:b9:51:61:cd:a1:b4:66:53:8c:19:bc:fe:50:50:3c:d4:5a: 1f:d8:5b:36:ba:35:b6:30:43:5b:64:b4:85:af:bb:f1:fe:83: a1:27:59:64:73:55:5c:69:6f:01:e6:0d:03:93:50:39:96:a9: 4c:ae:22:17:45:cc:d9:cd:ef:7b:22:71:a4:f5:77:ef:96:f7: b6:bd:ce:05:a3:64:18:b1:0e:c6:ea:fb:93:22:98:af:01:bf: 16:01:b1:7e:49:53:c5:c4:6c:79:a2:28:33:4c:2d:fc:8e:b1: a7:05:70:de:62:7e:da:b6:c5:c5:87:ce:5b:93:ec:85:77:9d: 6b:67:68:ff:7d:79:44:b5:bf:bc:8e:cc:32:91:0d:96:50:f2: a8:af:3f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMzIwMjIwMzE2WhcNMjYwMzI3MjIwMzE2WjAYMRYwFAYD VQQDEw02OWJkYzQyNC1lZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Hf4a3C7Yjw8grioPXnNlvABlDstQVW4gEeB0Resm0Fp/S0eLXUQfdc6IsLP Ku1eXIYbPlbOtVZAh7xUg2Wkf7TrPp2SJ8nQfb3XUiysnNbJnUmzAf9uRoymvbN1 Vx9/EpD0PW99KNUxuuuD6JTnOkGsvkoDOC2mJuR7d+NHS7vDu8zALkSu7778okAY WqFxktLTrHYJuO9HGJv6mXXjnkymlh2KTBIGRlDzbNuB0Sb1NfQF/RrXipHmJUNy OriuiTEudXaot5heujJX6MDr0UPT51T+YHDEsFEkYDhhsKHOepi1CDJpnmGO/mIc /52sZesfLImbCgWk+YxYidkESQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/qB9Ts MGdcrsWv12XrdxRwUvJ1MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxHlWePI8VgJrmu7AEOBNIZR+3WbJIWmlKYg7rH0/6IMZ//U4inFIbbpEWrt aYF9pZTOm7aFwUrnJ9oglJoQHKpd3JUfF1xFqMnD5p5Mla8qaZlJcHatuzEZ6i+r lfzGFrvwtFBkNFgUN1u7IblRYc2htGZTjBm8/lBQPNRaH9hbNro1tjBDW2S0ha+7 8f6DoSdZZHNVXGlvAeYNA5NQOZapTK4iF0XM2c3veyJxpPV375b3tr3OBaNkGLEO xur7kyKYrwG/FgGxfklTxcRseaIoM0wt/I6xpwVw3mJ+2rbFxYfOW5PshXeda2do /315RLW/vI7MMpENllDyqK8/Aw== -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:31 2026 by rpki-client