$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: 3RL+6fiAkZUbDhC3qPIfiJy49HMJsZhOj6PtIgutShk= Subject key identifier: 98:4A:1C:24:E1:04:C1:43:EF:92:4D:B0:A5:B0:73:BA:97:51:5F:EF Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0BE2 Signing time: Tue 18 Aug 2026 19:23:31 +0000 Manifest this update: Tue 18 Aug 2026 19:23:30 +0000 Manifest next update: Tue 25 Aug 2026 19:23:30 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: iZ5i0BS+wyfpWttg4Id6JtWbOQlcFkXqcAVZulItzXk=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Aug 18 19:23:30 2026 GMT Not After : Aug 25 19:23:30 2026 GMT Subject: CN=6a84b132-5084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:6d:f0:f4:ab:fb:3d:94:b7:cb:fd:d8:ff: 77:d6:29:f3:cc:d0:d7:22:f1:0c:a2:93:e4:c9:ee: b7:f2:e1:6f:ad:6c:cf:7d:97:97:64:00:57:3f:9e: ed:47:87:0f:81:ea:89:f1:ff:eb:a3:dc:b4:e4:ab: 90:d4:fc:b2:9f:5e:51:4b:1a:6a:b0:91:c6:b7:18: 3e:a5:97:ca:df:53:73:0a:81:0c:72:c3:1e:d2:77: a1:48:0d:10:53:f2:5d:f4:c2:a7:bd:cb:80:71:3c: 1b:98:ea:b9:b4:ac:58:66:11:4e:cf:ae:a3:25:6a: 2d:e8:28:2d:f5:ab:d1:44:69:31:55:7f:5e:1b:ff: 73:96:fc:6b:61:fd:ee:08:98:fb:31:6b:a0:44:84: 3b:0f:63:ea:4a:52:3b:60:10:da:d4:1e:b8:c5:b2: 1e:8d:38:f3:7c:9b:69:5d:ec:4c:32:14:a5:67:9f: 52:e8:05:16:be:99:a9:c1:04:f5:07:2d:ca:cb:47: 59:10:26:0d:49:fc:e7:c6:f7:35:d9:ee:3d:a6:25: 19:b3:55:4b:bf:59:60:d3:0e:6d:e1:e2:c3:79:15: 63:b8:af:cb:5c:48:21:ec:c2:aa:8e:66:6b:59:7a: c5:b0:ba:ff:b0:d4:d8:89:94:02:2b:d7:89:06:fe: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:1C:24:E1:04:C1:43:EF:92:4D:B0:A5:B0:73:BA:97:51:5F:EF X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9c:75:41:e3:2c:3a:a4:28:dd:05:1e:de:b1:d2:db:ba:aa: 7a:0c:fd:ec:e6:73:a5:09:24:a8:fa:55:63:60:d0:9c:77:ad: 0e:b3:0e:00:88:5f:99:c1:26:95:9a:d2:77:df:6a:c2:31:32: a8:21:b5:63:c7:38:92:95:18:33:98:2c:c1:48:92:ca:30:55: 50:73:91:0b:df:52:ee:25:d9:df:c8:69:21:57:d0:68:79:e5: 33:92:1f:bf:88:42:9d:52:a1:c4:d9:87:65:ab:b0:7b:8a:aa: 8a:8a:2a:95:89:c9:89:0a:a5:db:b7:5e:86:fd:3a:60:52:37: 71:41:08:33:97:56:b5:69:5c:70:ec:9a:6a:b0:98:46:52:20: 03:1a:9b:8e:03:9a:a2:58:45:22:9a:48:76:98:2c:70:c3:3d: e8:73:b9:dc:0a:10:98:c7:a7:28:91:71:59:9d:3d:00:7b:60: bc:c9:b6:e1:17:b4:a7:6d:20:f5:b6:56:5f:5c:14:83:f1:c1: f6:57:b4:4f:25:33:c5:7a:50:7d:9f:18:c2:44:b2:e1:ec:9f: d8:0d:b3:46:57:df:a7:8f:db:63:c1:fb:46:9f:8b:08:65:ad: 19:de:ab:76:a7:4e:ff:32:40:8d:a0:b7:6f:12:a6:dc:2c:3b: 13:3e:c8:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYwODE4MTkyMzMwWhcNMjYwODI1MTkyMzMwWjAYMRYwFAYD VQQDEw02YTg0YjEzMi01MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuJt8PSr+z2Ut8v92P931inzzNDXIvEMopPkye638uFvrWzPfZeXZABXP57t R4cPgeqJ8f/ro9y05KuQ1Pyyn15RSxpqsJHGtxg+pZfK31NzCoEMcsMe0nehSA0Q U/Jd9MKnvcuAcTwbmOq5tKxYZhFOz66jJWot6Cgt9avRRGkxVX9eG/9zlvxrYf3u CJj7MWugRIQ7D2PqSlI7YBDa1B64xbIejTjzfJtpXexMMhSlZ59S6AUWvpmpwQT1 By3Ky0dZECYNSfznxvc12e49piUZs1VLv1lg0w5t4eLDeRVjuK/LXEgh7MKqjmZr WXrFsLr/sNTYiZQCK9eJBv4i8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhKHCTh BMFD75JNsKWwc7qXUV/vMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp5x1QeMsOqQo3QUe3rHS27qqegz97OZzpQkkqPpVY2DQnHetDrMOAIhfmcEm lZrSd99qwjEyqCG1Y8c4kpUYM5gswUiSyjBVUHORC99S7iXZ38hpIVfQaHnlM5If v4hCnVKhxNmHZauwe4qqiooqlYnJiQql27dehv06YFI3cUEIM5dWtWlccOyaarCY RlIgAxqbjgOaolhFIppIdpgscMM96HO53AoQmMenKJFxWZ09AHtgvMm24Re0p20g 9bZWX1wUg/HB9le0TyUzxXpQfZ8YwkSy4eyf2A2zRlffp4/bY8H7Rp+LCGWtGd6r dqdO/zJAjaC3bxKm3Cw7Ez7Ing== -----END CERTIFICATE-----Generated at Wed Aug 19 12:47:22 2026 by rpki-client