$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: WYy/hIr8qjqMXv5sOfrM/eHKRpkPRyxBiNhMKsrRkYI= Subject key identifier: 36:64:4F:B4:17:2F:E5:0B:E9:C2:73:02:2C:74:A9:C8:BC:83:3E:D7 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 02BD Signing time: Thu 21 May 2026 02:22:18 +0000 Manifest this update: Thu 21 May 2026 02:22:17 +0000 Manifest next update: Thu 28 May 2026 02:22:17 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: 72grhmR8+wTH/UUO4OoqtGB95Yai6S4roC/2KBaCcpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: May 21 02:22:17 2026 GMT Not After : May 28 02:22:17 2026 GMT Subject: CN=6a0e6c5a-f8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:fd:e7:73:88:84:1c:06:a3:05:ad:46:c1: bc:7e:15:82:e2:5b:55:1b:63:2c:f4:8a:cc:46:66: 46:79:9f:4e:4b:dd:92:11:c7:06:16:85:78:a5:19: e7:c3:94:e9:ac:fb:78:8d:51:b2:7e:fc:9c:0f:6e: b3:31:20:03:9d:51:f2:41:d0:b1:a6:ab:6d:e9:5a: 41:a0:bf:3f:f4:b7:ad:8d:a4:f2:ff:0e:22:c2:ba: 4e:76:8b:95:3b:8d:f6:47:18:8c:15:30:e9:5e:fc: b2:7b:23:7f:11:14:62:04:80:60:f6:81:ea:95:9d: eb:d9:5a:6f:e5:b9:e5:cc:47:e3:30:9c:61:37:d8: a6:ff:66:23:2b:bd:d1:a1:e3:fe:e9:d4:3e:98:1a: 37:96:14:dd:5f:22:66:d3:d4:ad:e6:c4:e7:b9:f2: cb:50:ee:20:0e:5a:ac:68:da:a9:da:fc:3f:7e:70: bc:66:eb:10:b8:a6:94:f8:b8:00:81:1a:0f:c4:93: 6a:16:24:8c:cb:69:29:fb:50:cf:7c:d4:2d:4e:9d: dd:bd:56:d6:6b:5d:88:e3:17:1f:96:de:1a:2c:65: 13:dc:3a:d5:f9:ca:96:c5:a6:0a:57:06:c0:3e:e8: b9:44:b1:34:96:f6:ed:81:3c:82:c1:97:d8:88:a3: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:4F:B4:17:2F:E5:0B:E9:C2:73:02:2C:74:A9:C8:BC:83:3E:D7 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:41:57:e9:f6:46:cc:7c:e6:f7:eb:78:57:d9:43:c0:4b:4a: 1e:64:ea:ce:c1:e7:53:25:81:76:82:6f:b7:ed:38:b9:6f:3f: 0f:cc:4b:de:66:d7:d9:dc:58:ef:39:fd:a0:39:3a:ac:19:84: 1b:24:0f:2c:02:a2:4f:b5:02:91:e0:d4:46:9b:d0:cc:11:03: 1d:bd:0c:ea:6c:e9:c5:3e:79:f5:9a:78:7f:9a:07:eb:bc:e4: 5c:25:7b:e3:cd:cf:83:fe:89:e7:98:e2:a2:1b:69:52:f8:8c: 15:5f:5b:0f:23:fb:2a:bc:2e:6f:bd:ba:64:26:9a:a3:5d:76: 3c:78:1a:49:1a:db:51:f4:12:a5:7e:9f:6f:99:2d:1d:71:ee: 4a:77:42:96:a9:a9:1f:15:8d:71:ab:86:01:fa:60:db:a4:3d: 77:2e:9d:e1:83:25:27:db:19:3c:c9:46:ff:02:fd:21:38:18: e4:31:07:01:e8:70:04:57:3c:37:eb:88:70:45:21:ac:46:eb: 0d:91:9e:1d:99:02:9c:44:15:32:97:44:51:ff:13:33:8d:a9: 3d:e1:08:0f:63:0e:33:f2:9b:62:b9:9f:a6:09:a1:46:91:ec: bf:25:1e:92:8f:c1:29:00:f9:fa:ea:61:c5:7d:80:60:7b:d4: 65:54:63:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjYwNTIxMDIyMjE3WhcNMjYwNTI4MDIyMjE3WjAYMRYwFAYD VQQDEw02YTBlNmM1YS1mOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspf953OIhBwGowWtRsG8fhWC4ltVG2Ms9IrMRmZGeZ9OS92SEccGFoV4pRnn w5TprPt4jVGyfvycD26zMSADnVHyQdCxpqtt6VpBoL8/9LetjaTy/w4iwrpOdouV O432RxiMFTDpXvyyeyN/ERRiBIBg9oHqlZ3r2Vpv5bnlzEfjMJxhN9im/2YjK73R oeP+6dQ+mBo3lhTdXyJm09St5sTnufLLUO4gDlqsaNqp2vw/fnC8ZusQuKaU+LgA gRoPxJNqFiSMy2kp+1DPfNQtTp3dvVbWa12I4xcflt4aLGUT3DrV+cqWxaYKVwbA Pui5RLE0lvbtgTyCwZfYiKPdUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZkT7QX L+UL6cJzAix0qci8gz7XMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUFX6fZGzHzm9+t4V9lDwEtKHmTqzsHnUyWBdoJvt+04uW8/D8xL3mbX2dxY 7zn9oDk6rBmEGyQPLAKiT7UCkeDURpvQzBEDHb0M6mzpxT559Zp4f5oH67zkXCV7 483Pg/6J55jiohtpUviMFV9bDyP7Krwub726ZCaao112PHgaSRrbUfQSpX6fb5kt HXHuSndClqmpHxWNcauGAfpg26Q9dy6d4YMlJ9sZPMlG/wL9ITgY5DEHAehwBFc8 N+uIcEUhrEbrDZGeHZkCnEQVMpdEUf8TM42pPeEID2MOM/KbYrmfpgmhRpHsvyUe ko/BKQD5+uphxX2AYHvUZVRj/w== -----END CERTIFICATE-----Generated at Thu May 21 10:20:22 2026 by rpki-client