$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: JYUXO88UP7VnK+GCchsRF/q5ckVn2I21zI7LKRGp7VM= Subject key identifier: 13:1B:6B:FC:EA:4B:52:D0:BC:A2:E2:11:E4:AB:F1:DF:E0:6A:9C:D2 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 068F Signing time: Tue 10 Mar 2026 22:02:28 +0000 Manifest this update: Tue 10 Mar 2026 22:02:27 +0000 Manifest next update: Tue 17 Mar 2026 22:02:27 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: f5OHPEgaFdqmWJ6E4FxoES8rzUDBYeYpUsW1j1ZugzA=) 2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=) 3: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=) 4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=) 5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=) 6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Mar 10 22:02:27 2026 GMT Not After : Mar 17 22:02:27 2026 GMT Subject: CN=69b094f4-9d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:32:96:04:71:59:36:aa:96:40:6c:b6:22: 92:41:3c:59:d7:0a:39:68:52:f1:40:37:2c:b4:a9: a0:a7:ca:c8:28:94:2f:ed:3d:9b:9a:0a:a4:75:eb: b4:10:19:b5:57:a9:a2:a0:a9:fe:59:88:f6:ec:c6: e9:3f:eb:57:ec:25:b7:07:49:1f:a0:0d:6d:c4:e1: 37:14:a5:9b:fb:2b:e9:ea:85:e5:d7:da:32:3f:66: c4:7b:d9:ac:04:c7:7c:2e:8f:a1:ab:21:bb:77:58: 96:8e:6c:c0:d5:3e:bf:d1:fe:aa:d6:4d:8f:21:05: 43:fd:00:96:49:a5:0a:6f:d5:23:f9:dd:e3:dc:70: 0d:85:7a:c8:dc:56:de:90:f8:8f:29:30:28:73:94: 90:3b:b1:fb:61:17:6e:f9:6f:4d:27:fb:8e:7c:2f: e5:80:b2:e1:e5:82:e6:c8:de:6d:e2:fe:d6:ac:17: 8b:e4:b6:e1:44:d4:1d:27:73:80:6c:e7:78:ca:b4: 48:18:7f:3f:42:e9:13:37:c1:50:8f:ef:0c:f1:8a: a2:3d:78:bf:4c:b9:7c:e7:bf:5b:c3:fc:75:6e:82: 8e:94:ff:e8:fe:9a:e9:83:97:df:f8:b4:9b:9e:4a: 05:6d:5c:08:a4:3f:54:6b:89:8f:fb:2c:f4:91:df: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1B:6B:FC:EA:4B:52:D0:BC:A2:E2:11:E4:AB:F1:DF:E0:6A:9C:D2 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:c1:23:7f:af:16:b8:7b:80:c2:00:a0:a9:cc:e4:56:f9: 2e:81:0f:a6:31:43:3a:c0:dd:99:a9:9b:47:99:ac:4f:7f:fa: 6f:60:c4:be:dd:6b:70:2f:3d:8b:fc:16:b2:61:88:f5:27:f9: 8a:aa:af:14:8f:65:18:a7:47:74:39:8a:24:f2:bb:d5:72:5a: 52:90:23:a2:2f:19:ef:2b:ab:68:00:c5:09:66:19:11:23:50: 6e:f9:a2:ad:51:92:6e:53:82:aa:e5:d2:e2:c8:2d:1d:4d:de: 9a:06:a9:1b:94:1f:4f:03:44:f4:51:6e:f9:15:c9:81:53:35: 25:40:1a:80:bc:89:3d:91:a1:d3:7d:2f:f6:42:f6:8e:c3:d9: 50:d2:8b:82:a3:7c:15:7b:1c:5f:16:6a:b5:1c:10:ed:87:92: 21:d0:94:0c:5f:a6:0c:86:f4:f5:02:8e:88:09:94:ab:d2:7b: 7e:69:d9:82:c8:62:7e:75:2f:46:36:82:29:5d:99:59:bf:b3: 70:95:5e:d8:4d:2e:b6:ab:b4:9f:92:8f:11:46:46:e3:b9:5b: a4:70:96:3d:44:59:2b:b0:94:42:05:86:0b:a3:f3:2e:07:ee: c8:91:b1:ab:88:ef:1f:dd:51:ab:47:8b:69:e3:4e:c3:20:94: 64:41:9e:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMzEwMjIwMjI3WhcNMjYwMzE3MjIwMjI3WjAYMRYwFAYD VQQDEw02OWIwOTRmNC05ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbgylgRxWTaqlkBstiKSQTxZ1wo5aFLxQDcstKmgp8rIKJQv7T2bmgqkdeu0 EBm1V6mioKn+WYj27MbpP+tX7CW3B0kfoA1txOE3FKWb+yvp6oXl19oyP2bEe9ms BMd8Lo+hqyG7d1iWjmzA1T6/0f6q1k2PIQVD/QCWSaUKb9Uj+d3j3HANhXrI3Fbe kPiPKTAoc5SQO7H7YRdu+W9NJ/uOfC/lgLLh5YLmyN5t4v7WrBeL5LbhRNQdJ3OA bOd4yrRIGH8/QukTN8FQj+8M8YqiPXi/TLl8579bw/x1boKOlP/o/prpg5ff+LSb nkoFbVwIpD9Ua4mP+yz0kd96HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMba/zq S1LQvKLiEeSr8d/gapzSMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8DBI3+vFrh7gMIAoKnM5Fb5LoEPpjFDOsDdmambR5msT3/6b2DEvt1rcC89 i/wWsmGI9Sf5iqqvFI9lGKdHdDmKJPK71XJaUpAjoi8Z7yuraADFCWYZESNQbvmi rVGSblOCquXS4sgtHU3emgapG5QfTwNE9FFu+RXJgVM1JUAagLyJPZGh030v9kL2 jsPZUNKLgqN8FXscXxZqtRwQ7YeSIdCUDF+mDIb09QKOiAmUq9J7fmnZgshifnUv RjaCKV2ZWb+zcJVe2E0utqu0n5KPEUZG47lbpHCWPURZK7CUQgWGC6PzLgfuyJGx q4jvH91Rq0eLaeNOwyCUZEGeHw== -----END CERTIFICATE-----Generated at Wed Mar 11 09:44:38 2026 by rpki-client