$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: YFWKgc8K5atixP5vzn0tdy79RG07aaGh21gTLx53gx4= Subject key identifier: 99:D1:0B:1A:6E:89:37:BD:53:5A:C0:4E:2C:58:D1:7D:0F:52:AF:CA Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 020C Signing time: Mon 03 Aug 2026 04:17:42 +0000 Manifest this update: Mon 03 Aug 2026 04:17:42 +0000 Manifest next update: Mon 10 Aug 2026 04:17:42 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: p0GVtIr7HNuvqTZiPzk0HH3f96w6x4X6ccrrSn50lVI=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 04:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Aug 3 04:17:42 2026 GMT Not After : Aug 10 04:17:42 2026 GMT Subject: CN=6a701666-caab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:54:40:ec:23:55:dc:05:84:cb:aa:3d:b2: ed:29:4a:0f:4d:18:4b:71:73:e7:4c:2d:b2:f7:3a: 7e:b6:b5:de:9b:a9:83:b3:42:b5:2c:10:72:68:76: cc:85:49:3e:42:ad:2b:ef:23:e1:ff:a7:01:ad:d4: d9:9d:36:5b:00:5e:cf:a2:35:e3:67:cc:81:9d:c7: f8:98:0c:07:a1:80:fa:8a:45:24:49:13:da:57:78: 71:b7:27:70:65:8e:96:66:1e:5e:95:2f:26:bd:92: 8c:4a:66:c6:94:5e:c7:7c:9d:ac:84:33:38:f6:2d: a6:cf:b1:f2:92:ab:d6:b8:1e:6e:63:ff:96:b9:08: 94:6c:55:20:e7:e2:b1:c7:11:88:2b:20:2f:6c:ed: 42:3b:0d:d7:02:ca:1e:00:1a:e1:62:8c:2f:0e:c1: b7:6f:88:ed:6a:ba:45:86:7c:9c:81:62:7d:e8:1f: 9f:d2:d9:21:6d:79:26:13:84:78:f2:5d:ba:d9:19: 0e:a1:49:e2:ab:0d:1c:cd:88:bb:39:c6:72:73:a4: 00:85:c3:26:03:06:23:49:c8:a1:e6:8a:df:9b:8e: 44:76:3b:40:a0:4c:a3:cd:dd:d4:49:21:b0:cd:d6: 44:b2:bd:77:96:16:5b:f8:b6:18:ca:e6:35:b7:5c: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:0B:1A:6E:89:37:BD:53:5A:C0:4E:2C:58:D1:7D:0F:52:AF:CA X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:62:3e:60:b2:92:a6:cd:83:57:70:4f:1d:78:a8:82:75: 96:6c:4e:c0:9d:9c:d2:26:7c:d5:60:20:e2:70:d9:c3:ec:4d: e4:c4:19:a5:e9:2e:4c:06:61:e4:e1:bd:8a:ec:4c:e3:4f:ab: a4:b8:eb:11:d8:62:9e:ba:24:8c:b8:62:48:c3:50:46:f3:8a: 5c:48:11:fb:fe:03:a4:b7:a8:fa:e3:6a:07:a2:cf:71:68:51: 46:fa:d3:bb:5e:9a:22:50:c1:b4:71:48:de:ce:fc:6c:e1:17: b4:17:91:8d:e7:6c:42:ba:8f:91:4b:52:56:0f:27:0c:e4:6e: 17:71:1b:0d:c7:09:45:77:f4:42:0e:9e:ac:3a:1c:f9:b9:56: 45:ab:66:48:9a:05:fe:c3:bb:e1:fd:2e:6d:8e:a1:f3:69:53: b2:17:ea:2f:4d:72:1e:db:42:ab:1f:1f:b5:81:3c:77:6c:e9: 7b:de:94:c4:6a:f1:3f:b8:18:e7:3c:51:8c:6a:a4:f5:fc:db: 15:1e:db:9a:6d:f5:6c:80:6b:dd:ef:43:ce:38:91:d8:f0:28: ef:82:7f:e8:72:9d:b5:7e:7d:06:b8:f5:f2:f8:c8:92:94:9e: 95:0a:bc:d6:d1:73:9a:ee:3b:79:8c:33:37:62:21:9d:f6:18: e1:51:14:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwODAzMDQxNzQyWhcNMjYwODEwMDQxNzQyWjAYMRYwFAYD VQQDEw02YTcwMTY2Ni1jYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtdUQOwjVdwFhMuqPbLtKUoPTRhLcXPnTC2y9zp+trXem6mDs0K1LBByaHbM hUk+Qq0r7yPh/6cBrdTZnTZbAF7PojXjZ8yBncf4mAwHoYD6ikUkSRPaV3hxtydw ZY6WZh5elS8mvZKMSmbGlF7HfJ2shDM49i2mz7HykqvWuB5uY/+WuQiUbFUg5+Kx xxGIKyAvbO1COw3XAsoeABrhYowvDsG3b4jtarpFhnycgWJ96B+f0tkhbXkmE4R4 8l262RkOoUniqw0czYi7OcZyc6QAhcMmAwYjScih5orfm45EdjtAoEyjzd3USSGw zdZEsr13lhZb+LYYyuY1t1zGeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnRCxpu iTe9U1rATixY0X0PUq/KMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdz9iPmCykqbNg1dwTx14qIJ1lmxOwJ2c0iZ81WAg4nDZw+xN5MQZpekuTAZh 5OG9iuxM40+rpLjrEdhinrokjLhiSMNQRvOKXEgR+/4DpLeo+uNqB6LPcWhRRvrT u16aIlDBtHFI3s78bOEXtBeRjedsQrqPkUtSVg8nDORuF3EbDccJRXf0Qg6erDoc +blWRatmSJoF/sO74f0ubY6h82lTshfqL01yHttCqx8ftYE8d2zpe96UxGrxP7gY 5zxRjGqk9fzbFR7bmm31bIBr3e9DzjiR2PAo74J/6HKdtX59Brj18vjIkpSelQq8 1tFzmu47eYwzN2IhnfYY4VEUvg== -----END CERTIFICATE-----Generated at Mon Aug 3 21:06:56 2026 by rpki-client