$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: a3cgsX8W+YU6EuxUNoXnMrbnU67zADAGVRQVoXydGNk= Subject key identifier: 51:74:AE:E4:E7:22:A1:8B:37:73:57:00:E9:2C:D7:90:BF:3E:DF:BE Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 01DE Signing time: Sun 03 May 2026 03:52:20 +0000 Manifest this update: Sun 03 May 2026 03:52:20 +0000 Manifest next update: Sun 10 May 2026 03:52:20 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: yTqLYW90MjOZwxNuIRH8Yb2uYHzopvA+mBlM2WDQvYo=) 2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) 3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: May 3 03:52:20 2026 GMT Not After : May 10 03:52:20 2026 GMT Subject: CN=69f6c674-06a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:ac:9b:7d:8b:a2:b3:a6:d9:37:d0:fc:a0: 6a:03:f3:58:e2:0a:cc:66:5b:7a:a9:99:15:21:bc: 60:c6:60:ff:5e:f4:24:99:27:a2:37:07:55:49:18: 6e:5c:d8:7a:3e:dd:1a:cb:71:b8:01:ad:8a:a0:c8: 30:00:f5:cc:fe:1b:77:26:25:2e:f7:6c:60:31:f9: d0:6b:89:af:9d:4d:31:90:c7:5d:25:59:38:ec:e8: f4:01:2a:16:f5:87:4c:23:4b:28:ba:16:b6:df:fe: a6:10:3f:72:e3:36:21:52:3f:d4:fe:a9:b3:a8:04: 2a:da:b8:ca:b5:51:e4:2c:73:0d:e7:76:84:22:d5: e5:19:93:e9:f3:44:ed:99:da:9e:73:26:ac:3b:fa: 2b:f5:bc:cd:05:de:01:bb:53:d1:6c:20:49:75:b1: 8c:22:6d:e7:c9:db:5c:d3:ae:f4:4b:6c:ae:a8:c4: b9:77:e9:3b:aa:6f:34:af:0c:8f:59:07:5b:17:d4: 39:a4:12:c7:60:6f:05:0b:78:3f:01:e1:a0:21:a8: c7:e4:b9:26:26:bc:9e:6a:88:dd:bd:ab:24:49:75: aa:d0:ed:49:3f:4d:26:24:c6:fd:63:d9:30:2b:16: 8a:06:51:fa:15:ba:8d:6b:70:ec:e0:37:cd:f3:d5: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:74:AE:E4:E7:22:A1:8B:37:73:57:00:E9:2C:D7:90:BF:3E:DF:BE X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:dd:91:d0:0f:f9:ac:93:ae:dd:8d:ac:07:93:27:51:55: b3:9b:b9:84:05:03:e8:6a:76:18:8e:ea:bf:4d:89:1a:77:77: 9d:cc:37:7f:07:ed:0c:e3:56:ed:33:7f:66:a5:3c:4e:7a:2b: 08:1a:f5:42:7c:83:b8:ce:4d:de:f1:c1:6a:b0:27:3d:e6:26: e6:e0:ea:1a:48:cd:8e:41:08:1e:44:34:39:b1:7c:c1:da:3b: 0c:08:8e:9e:3c:9a:f7:28:72:28:6e:18:f5:b7:c6:be:95:cd: f9:8c:14:cd:28:a0:89:7c:3d:07:95:eb:fd:64:1f:c0:cd:fe: 2c:85:34:26:38:e8:79:bc:95:41:36:62:ba:9f:78:92:51:48: 76:ca:84:75:74:fd:47:26:78:f3:d6:e0:2a:dc:3e:5b:60:78: 0f:ec:d9:fa:59:a8:f6:88:81:5b:a6:de:fc:bb:2d:25:05:15: e2:60:cf:b2:fa:d3:85:69:48:04:40:13:b5:e0:d3:46:f0:4f: 76:7a:7c:38:09:10:86:df:45:70:67:01:57:ea:06:a2:c3:7f: cb:88:82:4c:24:86:77:17:84:ba:57:65:96:0a:9a:56:cd:0b: 12:2c:06:b9:98:95:c1:3b:15:d1:2e:c3:49:92:a4:ad:30:b5: ec:c1:cc:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwNTAzMDM1MjIwWhcNMjYwNTEwMDM1MjIwWjAYMRYwFAYD VQQDEw02OWY2YzY3NC0wNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAng2sm32LorOm2TfQ/KBqA/NY4grMZlt6qZkVIbxgxmD/XvQkmSeiNwdVSRhu XNh6Pt0ay3G4Aa2KoMgwAPXM/ht3JiUu92xgMfnQa4mvnU0xkMddJVk47Oj0ASoW 9YdMI0souha23/6mED9y4zYhUj/U/qmzqAQq2rjKtVHkLHMN53aEItXlGZPp80Tt mdqecyasO/or9bzNBd4Bu1PRbCBJdbGMIm3nydtc0670S2yuqMS5d+k7qm80rwyP WQdbF9Q5pBLHYG8FC3g/AeGgIajH5LkmJryeaojdvaskSXWq0O1JP00mJMb9Y9kw KxaKBlH6FbqNa3Ds4DfN89XB2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFF0ruTn IqGLN3NXAOks15C/Pt++MB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9bdkdAP+ayTrt2NrAeTJ1FVs5u5hAUD6Gp2GI7qv02JGnd3ncw3fwftDONW 7TN/ZqU8TnorCBr1QnyDuM5N3vHBarAnPeYm5uDqGkjNjkEIHkQ0ObF8wdo7DAiO njya9yhyKG4Y9bfGvpXN+YwUzSigiXw9B5Xr/WQfwM3+LIU0JjjoebyVQTZiup94 klFIdsqEdXT9RyZ489bgKtw+W2B4D+zZ+lmo9oiBW6be/LstJQUV4mDPsvrThWlI BEATteDTRvBPdnp8OAkQht9FcGcBV+oGosN/y4iCTCSGdxeEuldllgqaVs0LEiwG uZiVwTsV0S7DSZKkrTC17MHMqQ== -----END CERTIFICATE-----Generated at Mon May 4 18:57:13 2026 by rpki-client