$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: 6ZMcLaaLCTPfx5RaPjYZxQ4YXtE0IQ9HZs3dljAfPvo= Subject key identifier: 1A:E0:67:25:DA:27:04:7E:74:6E:34:71:99:49:5C:0B:45:74:ED:F2 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 023C Signing time: Thu 05 Nov 2026 03:27:21 +0000 Manifest this update: Thu 05 Nov 2026 03:27:20 +0000 Manifest next update: Thu 12 Nov 2026 03:27:20 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: WSEaQ+1ayaQtJfmEtAb83De77Ozj8iWcay4aPw/tzHA=) 2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) 3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Nov 5 03:27:20 2026 GMT Not After : Nov 12 03:27:20 2026 GMT Subject: CN=6aebf799-50f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b8:40:54:60:2d:9b:00:07:e6:c1:f0:72:b3: f1:c9:49:b5:42:d7:d2:c9:1f:65:7a:e2:c6:ca:84: 54:57:52:a8:31:a6:8b:68:93:b4:ea:ba:ec:a1:12: c1:d4:b3:b9:f8:bd:33:c0:6e:98:65:4c:c8:78:b1: cc:25:60:93:51:5b:82:ad:81:12:93:cb:6e:4f:75: d3:e9:ea:87:62:d1:68:53:ea:b0:68:97:2d:06:48: 5f:e2:c5:cf:f3:41:c1:8d:67:27:3d:be:53:c5:f6: a5:6d:ee:41:22:75:64:82:d7:98:d5:1b:b1:b4:9d: 98:7b:a0:e3:50:fc:63:2d:43:91:8e:26:8b:6a:f8: a2:c2:75:ca:b0:77:9b:e6:f0:1d:d4:ad:b5:83:35: 49:78:f0:8f:23:20:af:3d:ba:ef:68:60:70:4d:74: 52:a6:88:7c:39:e5:b4:58:94:67:01:1c:1c:98:e3: 3c:24:c9:9d:49:8d:89:c3:92:bf:b5:e0:0f:12:58: 10:d0:b4:23:2b:e1:52:78:2b:9b:38:9e:18:0d:01: 49:80:a5:9f:64:fe:c8:96:05:be:cf:cc:86:73:bc: e4:f3:f9:fe:c8:1f:37:0e:f0:bc:57:f9:d2:bd:93: f9:47:77:9b:39:01:9c:cf:75:12:2e:23:17:93:bc: 52:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E0:67:25:DA:27:04:7E:74:6E:34:71:99:49:5C:0B:45:74:ED:F2 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:32:4c:c3:05:14:c6:b0:78:2a:86:15:32:bf:a5:7a:2b:c5: 15:8c:96:2c:05:6b:0c:bc:50:eb:66:f8:6e:85:54:8c:c1:5b: 09:d5:be:01:8b:c0:65:90:5f:04:8f:ca:3a:ee:ce:cf:00:16: b8:47:c6:db:cc:6c:d9:03:72:f0:8e:0b:e7:48:6a:64:9b:d1: 75:c6:bc:9e:a1:ae:0b:20:f6:f4:41:c1:89:ac:43:de:6b:c8: c2:5d:65:4f:c0:a4:08:fc:4d:bb:ab:3b:f6:83:bb:d8:29:73: 4a:e7:22:dc:ac:68:8b:a4:34:67:4f:f7:a1:7a:52:d7:77:7d: a7:c9:4d:cd:14:19:7c:73:5b:c5:13:10:9b:23:97:9d:e1:93: 82:40:4a:bc:b6:c8:6e:bf:72:a5:7d:20:01:5f:2c:95:fd:e1: c8:7e:ec:9c:c6:ed:f1:68:eb:5f:b6:2e:d4:c8:66:2c:c2:a7: 08:e6:ed:18:ab:03:2c:4b:8b:10:b5:a8:4f:dc:05:73:05:9d: 43:d5:a1:d3:49:53:dc:43:f5:99:62:99:4e:37:7d:c3:a7:d0: 29:05:54:12:5c:19:03:a7:ca:d7:b8:9a:9d:4a:6f:2d:03:0b: 87:09:32:92:1d:4c:7a:f6:65:fe:07:db:5f:fa:6a:05:a0:37: b7:ff:7a:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYxMTA1MDMyNzIwWhcNMjYxMTEyMDMyNzIwWjAYMRYwFAYD VQQDEw02YWViZjc5OS01MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77hAVGAtmwAH5sHwcrPxyUm1QtfSyR9leuLGyoRUV1KoMaaLaJO06rrsoRLB 1LO5+L0zwG6YZUzIeLHMJWCTUVuCrYESk8tuT3XT6eqHYtFoU+qwaJctBkhf4sXP 80HBjWcnPb5Txfalbe5BInVkgteY1RuxtJ2Ye6DjUPxjLUORjiaLaviiwnXKsHeb 5vAd1K21gzVJePCPIyCvPbrvaGBwTXRSpoh8OeW0WJRnARwcmOM8JMmdSY2Jw5K/ teAPElgQ0LQjK+FSeCubOJ4YDQFJgKWfZP7IlgW+z8yGc7zk8/n+yB83DvC8V/nS vZP5R3ebOQGcz3USLiMXk7xSqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrgZyXa JwR+dG40cZlJXAtFdO3yMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAETJMwwUUxrB4KoYVMr+leivFFYyWLAVrDLxQ62b4boVUjMFbCdW+AYvAZZBf BI/KOu7OzwAWuEfG28xs2QNy8I4L50hqZJvRdca8nqGuCyD29EHBiaxD3mvIwl1l T8CkCPxNu6s79oO72ClzSuci3Kxoi6Q0Z0/3oXpS13d9p8lNzRQZfHNbxRMQmyOX neGTgkBKvLbIbr9ypX0gAV8slf3hyH7snMbt8WjrX7Yu1MhmLMKnCObtGKsDLEuL ELWoT9wFcwWdQ9Wh00lT3EP1mWKZTjd9w6fQKQVUElwZA6fK17ianUpvLQMLhwky kh1MevZl/gfbX/pqBaA3t/968w== -----END CERTIFICATE-----Generated at Thu Nov 5 15:21:27 2026 by rpki-client