$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: yu3xJXw0e4Z3iUTxSO6FR3koM7j2G8ozcGLOpD9t0Zo= Subject key identifier: E7:2A:BA:4A:31:AE:75:65:04:14:DA:54:B0:F6:19:F8:A6:D5:9F:0C Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 069A Signing time: Tue 31 Mar 2026 22:35:16 +0000 Manifest this update: Tue 31 Mar 2026 22:35:15 +0000 Manifest next update: Tue 07 Apr 2026 22:35:15 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 2EwBf/B++ogQithUOxLTCpIdThG3rrgsxVpdcjbkz/Y=) 2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) 4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) 5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) 6: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Mar 31 22:35:15 2026 GMT Not After : Apr 7 22:35:15 2026 GMT Subject: CN=69cc4c23-a8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:3d:b8:6e:60:93:e3:ca:2e:f8:11:43:a6: 4e:a5:16:a5:5e:9e:ed:0f:8e:19:c0:99:dc:7e:39: 8c:2b:ca:1b:c5:ac:5f:0d:23:b6:3e:4f:5e:8e:6d: c6:6c:af:19:8b:08:28:45:f3:aa:df:7d:af:cf:8a: 4f:bf:30:e1:58:f4:cf:66:5b:75:df:e4:33:67:0a: c8:f6:09:0f:41:f6:e9:66:9c:fc:13:25:b4:88:d9: 14:9d:e3:d6:a2:14:cb:36:43:82:6c:ac:b6:f6:ba: 65:81:8e:23:54:d8:11:11:da:2e:1d:c4:07:42:22: 03:78:85:5f:4e:69:e5:5d:ef:08:ca:f8:60:8f:86: ec:b5:97:70:e6:79:f2:7c:12:d8:11:f1:97:c4:8e: f4:32:c9:7c:d5:61:84:13:55:95:76:c9:33:89:9f: 2f:7f:70:7c:6e:c5:8a:8d:27:62:1e:3a:14:11:6a: c7:05:09:14:51:b2:91:9c:60:f8:57:39:2a:51:89: e3:e6:ce:79:ca:32:94:1f:76:e9:f9:55:9c:f6:80: c6:e7:d1:29:da:9f:1c:2c:06:c4:45:6b:fd:14:d3: 55:01:ed:05:35:07:fa:e4:40:64:de:59:9d:39:0d: 72:e5:a2:54:dc:8e:bf:61:05:9b:be:91:1f:db:b2: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:BA:4A:31:AE:75:65:04:14:DA:54:B0:F6:19:F8:A6:D5:9F:0C X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:ce:c8:24:c9:ca:c9:7d:93:8d:15:dd:37:b8:d5:66:25: 7b:03:bb:e4:0a:2a:e0:5d:6e:cc:61:db:a6:46:6c:70:ce:2a: 01:f7:25:88:fe:dd:87:95:55:94:63:43:df:39:3f:64:c6:4c: 06:9c:1d:55:11:02:0b:35:c8:10:50:89:b1:f9:d3:07:0a:bb: d8:90:23:b4:db:2d:18:43:f8:93:32:26:87:90:ee:f9:c1:5d: b5:d7:31:20:41:b9:94:1a:08:f2:ee:70:0d:b5:f5:b4:9a:e6: d0:c4:2f:66:74:bc:3a:82:05:56:94:0c:ed:f8:f2:8c:68:cf: a6:bc:34:3e:86:a5:d0:d2:d2:a1:d8:9f:8b:73:07:39:f3:fe: 08:18:53:6b:83:d3:34:f2:fb:39:f2:eb:63:fd:5e:dd:9b:44: 37:a8:48:e5:d7:86:8e:24:b9:a5:72:a6:ec:43:ad:be:fa:cb: db:20:f1:64:3a:c2:75:3e:cd:21:d1:74:51:f7:ab:2b:3c:7d: e0:07:2b:8d:e1:53:e3:05:5a:a5:0c:9c:ab:ad:b9:95:2e:a8: 20:86:ad:e6:f4:e8:01:06:cc:5d:44:96:40:b4:87:84:c3:e1: 49:4b:82:1c:6e:66:81:24:8e:14:19:69:80:74:65:48:ed:11: 9f:3c:de:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMzMxMjIzNTE1WhcNMjYwNDA3MjIzNTE1WjAYMRYwFAYD VQQDEw02OWNjNGMyMy1hOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9o9uG5gk+PKLvgRQ6ZOpRalXp7tD44ZwJncfjmMK8obxaxfDSO2Pk9ejm3G bK8ZiwgoRfOq332vz4pPvzDhWPTPZlt13+QzZwrI9gkPQfbpZpz8EyW0iNkUnePW ohTLNkOCbKy29rplgY4jVNgREdouHcQHQiIDeIVfTmnlXe8Iyvhgj4bstZdw5nny fBLYEfGXxI70Msl81WGEE1WVdskziZ8vf3B8bsWKjSdiHjoUEWrHBQkUUbKRnGD4 VzkqUYnj5s55yjKUH3bp+VWc9oDG59Ep2p8cLAbERWv9FNNVAe0FNQf65EBk3lmd OQ1y5aJU3I6/YQWbvpEf27JFsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcqukox rnVlBBTaVLD2Gfim1Z8MMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHzbOyCTJysl9k40V3Te41WYlewO75Aoq4F1uzGHbpkZscM4qAfcliP7dh5VV lGND3zk/ZMZMBpwdVRECCzXIEFCJsfnTBwq72JAjtNstGEP4kzImh5Du+cFdtdcx IEG5lBoI8u5wDbX1tJrm0MQvZnS8OoIFVpQM7fjyjGjPprw0Poal0NLSodifi3MH OfP+CBhTa4PTNPL7OfLrY/1e3ZtEN6hI5deGjiS5pXKm7EOtvvrL2yDxZDrCdT7N IdF0UferKzx94AcrjeFT4wVapQycq625lS6oIIat5vToAQbMXUSWQLSHhMPhSUuC HG5mgSSOFBlpgHRlSO0RnzzeOg== -----END CERTIFICATE-----Generated at Wed Apr 1 01:53:23 2026 by rpki-client