$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: 98xOBGp4isNmW+z6UrbNInQr0OmLUgbyc5bUnK1wHPU= Subject key identifier: F5:DA:AC:01:99:B7:83:D4:0E:36:84:4A:6A:95:83:71:D4:3A:F5:82 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 0223 Signing time: Thu 17 Sep 2026 03:08:09 +0000 Manifest this update: Thu 17 Sep 2026 03:08:08 +0000 Manifest next update: Thu 24 Sep 2026 03:08:08 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: 3qpQkSEA8UAVSZB1IO3kKs3GHc9rLbuYUN/gbcxm19g=) 2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) 3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Sep 17 03:08:08 2026 GMT Not After : Sep 24 03:08:08 2026 GMT Subject: CN=6aab5999-c0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:8f:e5:df:32:d2:61:85:e2:de:d6:7b:91: 4a:11:a8:c1:a3:b1:51:8c:32:18:2b:a9:7d:f0:c7: 7a:1e:c2:e9:46:65:cd:26:19:19:25:ca:d8:ca:e4: 17:d1:8f:81:34:14:40:ee:7c:1c:a0:04:50:3b:77: 62:ca:dd:d7:38:33:84:01:f8:e9:8e:b5:4c:f0:48: c4:e7:62:51:8e:d2:91:89:f5:0c:aa:88:00:03:2c: 94:7e:4b:9f:82:db:29:f5:ff:8e:5c:91:8c:92:5e: 76:04:1a:e7:36:e8:52:98:64:c1:b6:2a:35:e9:1b: 3c:e1:b9:eb:5a:22:0b:90:e3:33:e0:2a:2a:c2:50: ef:3f:a5:3a:6a:d1:8f:8c:28:eb:6c:ea:73:d4:88: ec:75:e8:8d:16:7d:f2:e0:b0:96:e5:f0:e6:38:12: 0e:de:70:46:5d:94:82:55:f8:95:ce:b2:00:59:26: de:00:89:d8:a7:08:d4:27:a4:da:9d:07:32:7e:a7: b3:9b:61:64:f0:8b:93:1e:c8:8d:70:13:6d:8d:8b: e3:79:71:7f:b8:26:c6:aa:67:12:75:76:e4:10:9a: b5:26:9d:12:6b:49:c6:68:74:1c:8b:25:52:a1:d0: f8:90:0d:d1:b5:80:10:fe:d6:0f:6c:92:04:ba:8e: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:AC:01:99:B7:83:D4:0E:36:84:4A:6A:95:83:71:D4:3A:F5:82 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:63:56:d3:62:b5:4e:22:87:60:e6:c1:0d:86:2f:12:3c:b9: 0b:8a:01:13:14:24:00:10:2b:ef:a3:f2:1a:89:d4:80:78:f4: c9:a5:42:6e:89:9a:20:ce:2a:03:79:79:6d:00:8b:95:17:38: 66:91:1d:e9:d8:52:71:c8:38:d1:d8:c8:d4:09:9d:65:ef:39: ce:4f:25:35:21:49:04:e4:f7:a2:48:3b:56:bd:8c:c4:ad:80: d5:74:2d:a1:a1:07:4d:3b:62:eb:f9:57:9c:71:b7:cc:a7:b6: 9a:12:32:7c:9e:b8:98:96:01:b7:5f:0b:f9:1d:d5:61:c2:7c: 99:c9:f7:66:fc:af:19:87:8f:29:56:ac:f0:8e:e6:d9:90:21: 34:4c:c9:f0:72:38:c0:9f:ab:6f:78:d9:92:6f:4b:56:0a:c6: 22:73:ae:9a:e9:7b:ae:55:95:dc:de:76:58:bd:66:4f:e4:9e: be:60:a7:ec:32:a7:2b:b7:cf:c2:3c:58:12:de:9c:47:3b:4a: bb:78:b3:66:e8:3d:19:03:3b:59:71:0b:9e:4b:c5:ab:e3:e1: 00:3d:f2:4e:2b:9d:49:80:55:00:88:03:d4:f6:c9:62:90:6b: 85:ac:e9:46:50:09:26:92:b1:3a:92:ea:2f:eb:b1:9d:5d:3d: ae:f2:30:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwOTE3MDMwODA4WhcNMjYwOTI0MDMwODA4WjAYMRYwFAYD VQQDEw02YWFiNTk5OS1jMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QCP5d8y0mGF4t7We5FKEajBo7FRjDIYK6l98Md6HsLpRmXNJhkZJcrYyuQX 0Y+BNBRA7nwcoARQO3diyt3XODOEAfjpjrVM8EjE52JRjtKRifUMqogAAyyUfkuf gtsp9f+OXJGMkl52BBrnNuhSmGTBtio16Rs84bnrWiILkOMz4CoqwlDvP6U6atGP jCjrbOpz1IjsdeiNFn3y4LCW5fDmOBIO3nBGXZSCVfiVzrIAWSbeAInYpwjUJ6Ta nQcyfqezm2Fk8IuTHsiNcBNtjYvjeXF/uCbGqmcSdXbkEJq1Jp0Sa0nGaHQciyVS odD4kA3RtYAQ/tYPbJIEuo73RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXarAGZ t4PUDjaESmqVg3HUOvWCMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEWNW02K1TiKHYObBDYYvEjy5C4oBExQkABAr76PyGonUgHj0yaVCbomaIM4q A3l5bQCLlRc4ZpEd6dhSccg40djI1AmdZe85zk8lNSFJBOT3okg7Vr2MxK2A1XQt oaEHTTti6/lXnHG3zKe2mhIyfJ64mJYBt18L+R3VYcJ8mcn3ZvyvGYePKVas8I7m 2ZAhNEzJ8HI4wJ+rb3jZkm9LVgrGInOumul7rlWV3N52WL1mT+SevmCn7DKnK7fP wjxYEt6cRztKu3izZug9GQM7WXELnkvFq+PhAD3yTiudSYBVAIgD1PbJYpBrhazp RlAJJpKxOpLqL+uxnV09rvIwxw== -----END CERTIFICATE-----Generated at Fri Sep 18 01:55:16 2026 by rpki-client