$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft File: HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json) Hash identifier: QLPrsMsqBUodQ0cQbG0EwdjBPUPSkbNesuR4023q7pA= Subject key identifier: CC:22:75:E8:CF:FA:5C:AD:1E:9A:EE:25:B1:40:60:C5:26:3A:36:20 Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33 Certificate issuer: /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233 Certificate serial: 11AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft Manifest number: 1A35 Signing time: Sat 04 Apr 2026 17:05:01 +0000 Manifest this update: Sat 04 Apr 2026 17:05:01 +0000 Manifest next update: Sat 11 Apr 2026 17:05:01 +0000 Files and hashes: 1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: 81n/jZPDmWrj7Yhxc6+c/tP2c6ex/TFZSLC75p2KMqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4524 (0x11ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233 Validity Not Before: Apr 4 17:05:01 2026 GMT Not After : Apr 11 17:05:01 2026 GMT Subject: CN=69d144bd-e737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:0c:25:4e:45:be:7f:17:af:cd:85:00:9f: 86:5e:e8:db:ec:49:3c:0e:91:5c:63:fa:63:08:da: 27:fb:18:16:2a:67:35:3e:d0:95:1e:1c:6e:47:eb: 82:d1:cf:e2:28:3b:a4:e5:71:88:37:68:b5:0b:b3: 0c:73:cd:2b:b3:a9:b7:d0:36:c3:1b:b8:b1:c1:6c: a9:38:ee:1b:55:95:e3:e5:23:07:f0:66:1c:50:b4: 6d:51:8e:16:72:fd:b7:8b:04:6a:85:c8:e2:fe:9c: b8:29:ff:17:d4:b3:c7:2f:e5:0c:3c:83:e9:3d:d0: 51:64:91:e6:2a:be:50:46:6b:f9:80:68:47:25:97: b8:b1:bd:73:47:ad:1d:d3:4b:d6:d9:3d:70:a4:ab: 17:a6:cc:82:17:1a:22:63:fc:70:5a:c5:d4:33:22: ff:cd:d7:81:bc:56:04:30:34:5d:44:6d:ca:86:2c: fc:ab:37:d4:06:15:31:a5:06:13:40:34:99:ab:57: a0:e9:66:0e:11:ab:46:c9:82:8b:84:83:21:cb:3f: 35:f1:f0:ca:69:9d:e3:25:bd:9e:0e:3f:75:76:4c: 2c:a9:7b:18:f9:71:54:33:d4:05:fe:2d:ee:03:59: d9:fc:8b:d9:2c:2f:13:a3:b0:e3:4a:e5:ff:da:5f: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:22:75:E8:CF:FA:5C:AD:1E:9A:EE:25:B1:40:60:C5:26:3A:36:20 X509v3 Authority Key Identifier: keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:20:95:68:8b:0b:14:3f:c3:56:5a:5e:19:43:49:d9:e2:8d: a1:bf:08:6e:d9:21:c5:44:85:9b:50:81:33:19:10:17:e3:47: 9f:75:47:72:62:5c:0e:fc:66:9d:88:eb:c8:93:a7:03:bb:f9: 38:23:f0:87:08:53:5b:f8:45:6e:5c:da:1f:aa:2c:ee:08:be: db:72:f5:5f:37:b9:ce:61:de:b7:f3:81:60:12:e2:f8:e5:d3: 95:79:7b:4b:f2:97:9f:e9:c6:29:77:25:43:0d:3a:f3:1e:cf: a0:9a:19:77:af:01:99:20:44:81:cf:64:72:9c:26:58:f4:32: b0:25:75:0f:a8:0f:c1:bd:1f:89:2f:71:9a:15:3f:ef:8e:36: a9:cb:a2:37:88:78:09:c7:34:c6:81:2a:b3:88:15:c5:85:81: 66:cd:d1:79:0b:8d:ef:2b:fa:93:72:12:16:f1:9a:f2:51:ed: 10:48:c8:e2:c2:ca:87:cf:a3:69:0c:60:79:44:fd:e7:b8:89: 73:88:7e:74:ac:b7:2e:0a:7f:51:a7:7a:15:51:de:4a:d4:31: e7:2b:bb:31:7c:c7:90:0f:d2:02:fe:cd:49:5d:cf:c5:cc:5e: bf:3f:35:85:6c:93:65:42:fe:82:74:7f:5f:aa:15:57:46:0c: 60:79:bc:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDFENDVCNThBRTNBNjk1MjExMUI0MDk4NTREQTgzOTMx N0JFRTgyMzMwHhcNMjYwNDA0MTcwNTAxWhcNMjYwNDExMTcwNTAxWjAYMRYwFAYD VQQDEw02OWQxNDRiZC1lNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eMMJU5Fvn8Xr82FAJ+GXujb7Ek8DpFcY/pjCNon+xgWKmc1PtCVHhxuR+uC 0c/iKDuk5XGIN2i1C7MMc80rs6m30DbDG7ixwWypOO4bVZXj5SMH8GYcULRtUY4W cv23iwRqhcji/py4Kf8X1LPHL+UMPIPpPdBRZJHmKr5QRmv5gGhHJZe4sb1zR60d 00vW2T1wpKsXpsyCFxoiY/xwWsXUMyL/zdeBvFYEMDRdRG3Khiz8qzfUBhUxpQYT QDSZq1eg6WYOEatGyYKLhIMhyz818fDKaZ3jJb2eDj91dkwsqXsY+XFUM9QF/i3u A1nZ/IvZLC8To7DjSuX/2l8IzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwidejP +lytHpruJbFAYMUmOjYgMB8GA1UdIwQYMBaAFB1FtYrjppUhEbQJhU2oOTF77oIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9IVVcxaXVPbWxTRVJ0QW1GVGFnNU1YdnVn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVVzFpdU9tbFNFUnRBbUZUYWc1TVh2dWdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9IVVcxaXVPbWxT RVJ0QW1GVGFnNU1YdnVnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEiCVaIsLFD/DVlpeGUNJ2eKNob8IbtkhxUSFm1CBMxkQF+NHn3VHcmJcDvxm nYjryJOnA7v5OCPwhwhTW/hFblzaH6os7gi+23L1Xze5zmHet/OBYBLi+OXTlXl7 S/KXn+nGKXclQw068x7PoJoZd68BmSBEgc9kcpwmWPQysCV1D6gPwb0fiS9xmhU/ 7442qcuiN4h4Ccc0xoEqs4gVxYWBZs3ReQuN7yv6k3ISFvGa8lHtEEjI4sLKh8+j aQxgeUT957iJc4h+dKy3Lgp/Uad6FVHeStQx5yu7MXzHkA/SAv7NSV3Pxcxevz81 hWyTZUL+gnR/X6oVV0YMYHm8Bw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:55 2026 by rpki-client