$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: L63Meb8Bn2d3rfrsuR5DMUqCJCf0jKs3ciQ0rol1d2A= Subject key identifier: B0:13:07:6B:BB:89:42:A1:28:8C:33:F0:BB:2A:3A:20:E3:C3:4D:50 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 01C7 Signing time: Thu 19 Mar 2026 03:04:05 +0000 Manifest this update: Thu 19 Mar 2026 03:04:05 +0000 Manifest next update: Thu 26 Mar 2026 03:04:05 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: ewBUquLrWUyUCwMIU7G4Wv3dn8jWVuarW456Xn4oEQY=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 03:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Mar 19 03:04:05 2026 GMT Not After : Mar 26 03:04:05 2026 GMT Subject: CN=69bb67a5-6af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:30:4f:b2:15:39:4a:50:75:bf:84:bf:e9: 7b:98:3f:08:10:01:e9:0a:c3:34:29:ab:a9:d5:56: 71:b9:52:3e:7b:87:7c:30:32:f0:41:ae:11:0f:5a: 6e:3a:70:7a:50:74:07:b9:d2:74:a5:01:3a:06:23: 09:dd:9c:d5:88:2b:fd:32:3a:9f:2a:50:e9:a4:f8: ad:b9:56:02:55:e6:0a:2a:ec:11:68:6a:94:2d:14: 54:44:a0:20:ca:25:5a:11:cc:be:84:82:fc:30:53: d6:d0:99:a6:12:ad:c7:e9:e3:52:35:f5:be:2f:b2: 42:14:cb:f1:8a:74:44:dc:0f:d5:ad:5e:1f:14:f7: 19:b1:c0:84:1b:74:f9:71:6f:4c:a9:5a:59:58:f6: b9:70:8a:16:7b:79:44:56:26:0a:ec:2f:0b:1b:f8: 00:37:b6:01:1b:4f:31:37:2e:3d:fe:a1:2f:cf:56: 14:f9:29:3a:37:22:24:25:5a:f3:54:90:57:06:4e: ec:07:d7:7b:2b:2b:38:11:f7:1e:e5:2d:7f:de:67: cc:74:af:9f:e0:73:a7:8d:cc:de:b2:7c:ab:0c:4e: 78:0c:e3:8a:73:73:ad:0a:22:94:bb:05:25:f9:5f: 91:52:39:3d:00:ef:b0:b3:f2:04:0b:d3:8f:09:4c: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:13:07:6B:BB:89:42:A1:28:8C:33:F0:BB:2A:3A:20:E3:C3:4D:50 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:b0:bf:1f:8e:8d:8f:95:b4:da:1f:b4:9c:27:bd:5b:56: c2:8f:08:e8:7d:7b:92:0e:da:93:a6:04:8f:73:85:7c:c8:d0: 8f:09:e2:a5:85:5a:fe:41:05:08:e0:30:dc:0f:cb:8c:e2:74: c0:0c:f9:6a:8f:83:44:a7:ad:19:fe:1e:9e:cb:0b:a7:84:c8: 35:f5:62:15:ad:7b:91:0d:46:31:52:08:91:46:4f:f6:40:3a: 87:cc:55:77:c2:78:89:3d:53:fe:3a:e8:93:08:3c:2e:a2:19: 9c:47:bc:66:53:e8:78:12:23:2f:be:7f:52:98:dc:94:65:43: 3e:bb:9c:c0:03:19:ca:f0:19:b8:93:de:fe:54:4f:d5:6e:82: d4:4a:d8:56:23:91:44:7c:8a:8b:1f:f8:0d:d4:34:13:4d:bc: 90:e9:20:dd:44:9b:7e:0c:8f:ed:48:3f:12:f8:4d:42:62:eb: 4b:a8:6b:7b:a1:e2:54:03:cf:b3:f8:56:02:3b:16:ab:a9:94: 6d:55:48:11:df:08:de:96:8c:84:1f:89:a7:27:d2:b3:51:0e: 5e:6e:52:ef:24:a2:b8:ae:46:ba:96:e3:b9:c2:93:d2:b6:d7: 3b:1a:50:66:26:a4:f0:8c:11:7c:65:5a:0c:f0:f6:03:81:c9: 75:d8:e1:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwMzE5MDMwNDA1WhcNMjYwMzI2MDMwNDA1WjAYMRYwFAYD VQQDEw02OWJiNjdhNS02YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww0wT7IVOUpQdb+Ev+l7mD8IEAHpCsM0Kaup1VZxuVI+e4d8MDLwQa4RD1pu OnB6UHQHudJ0pQE6BiMJ3ZzViCv9MjqfKlDppPituVYCVeYKKuwRaGqULRRURKAg yiVaEcy+hIL8MFPW0JmmEq3H6eNSNfW+L7JCFMvxinRE3A/VrV4fFPcZscCEG3T5 cW9MqVpZWPa5cIoWe3lEViYK7C8LG/gAN7YBG08xNy49/qEvz1YU+Sk6NyIkJVrz VJBXBk7sB9d7Kys4Efce5S1/3mfMdK+f4HOnjczesnyrDE54DOOKc3OtCiKUuwUl +V+RUjk9AO+ws/IEC9OPCUwYRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLATB2u7 iUKhKIwz8LsqOiDjw01QMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7+wvx+OjY+VtNoftJwnvVtWwo8I6H17kg7ak6YEj3OFfMjQjwnipYVa/kEF COAw3A/LjOJ0wAz5ao+DRKetGf4enssLp4TINfViFa17kQ1GMVIIkUZP9kA6h8xV d8J4iT1T/jrokwg8LqIZnEe8ZlPoeBIjL75/UpjclGVDPrucwAMZyvAZuJPe/lRP 1W6C1ErYViORRHyKix/4DdQ0E028kOkg3USbfgyP7Ug/EvhNQmLrS6hre6HiVAPP s/hWAjsWq6mUbVVIEd8I3paMhB+JpyfSs1EOXm5S7ySiuK5GupbjucKT0rbXOxpQ Ziak8IwRfGVaDPD2A4HJddjhAw== -----END CERTIFICATE-----Generated at Fri Mar 20 17:21:36 2026 by rpki-client