$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: 5bHP4XuPBu63Ll+1+BaWBaBdY+C0L67bdZk3zWf/JYc= Subject key identifier: AE:9A:74:56:8A:A4:69:4A:E2:3A:49:55:3F:E6:01:9A:2B:02:34:92 Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0BFA Signing time: Sun 04 Oct 2026 19:07:36 +0000 Manifest this update: Sun 04 Oct 2026 19:07:35 +0000 Manifest next update: Sun 11 Oct 2026 19:07:35 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: wXBSTmmYk782epISXLNFDJ04b1XhxmYDOZGNh+Cp1MM=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Oct 4 19:07:35 2026 GMT Not After : Oct 11 19:07:35 2026 GMT Subject: CN=6ac2a3f8-251c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:17:4c:79:fc:5f:e1:e5:c3:b9:d1:18:0a: ff:c9:33:4b:10:94:3a:f6:e0:41:b2:6f:57:2a:6b: 01:9d:a0:45:ad:32:d7:62:6d:03:a2:81:4f:52:92: c2:1c:8f:f1:77:27:d5:19:06:2d:2b:1b:4e:01:cf: 48:23:15:17:8c:99:e4:f1:e5:8a:7c:d4:59:4c:47: 10:8c:4a:40:3e:13:de:44:46:b3:26:4a:fb:93:af: 69:d8:bc:ad:23:42:5c:aa:b0:26:1c:f8:0b:99:83: 79:ca:1e:9b:db:4c:5a:94:72:b6:3f:3f:2f:79:f2: f9:10:33:40:69:e0:10:61:f4:ba:95:90:89:19:8e: 3c:1d:29:3b:f4:f7:92:b2:87:4a:67:f4:ee:d7:e5: 28:48:7e:c4:5d:52:fb:f8:85:63:6f:6c:0d:4a:00: d4:1a:aa:22:47:d6:b2:bf:95:4e:fd:63:6c:66:33: 19:2c:2f:4e:56:17:11:4c:f2:6c:0a:3a:d3:b5:52: 29:dc:91:97:87:e1:a3:c1:c8:66:48:ed:ac:6d:85: f4:11:e4:a7:5a:78:07:b7:6a:20:7e:3e:bb:22:5b: 06:4f:46:3d:6e:df:71:a6:1f:40:0d:f0:05:87:e3: bd:8f:56:5e:df:1f:9b:c0:60:6a:62:6c:cf:54:3e: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:74:56:8A:A4:69:4A:E2:3A:49:55:3F:E6:01:9A:2B:02:34:92 X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d5:9e:91:28:03:51:a9:cd:a5:54:bb:b2:d0:00:9c:e9:ef: e3:ca:18:f5:16:0a:df:5a:23:0b:ae:0b:9f:25:ac:ab:ca:3a: 70:cd:1d:04:83:50:a5:72:cc:c1:38:f3:a7:54:b7:b4:fa:9e: a8:2c:01:de:5f:24:cf:8e:e4:8e:92:35:16:a8:30:ff:27:1d: 2d:d4:f8:a3:ea:3f:eb:56:03:d3:bb:1b:b1:9f:54:fc:1c:56: f2:ed:2f:03:c2:66:23:14:3d:e8:a3:c7:e6:68:54:26:5b:b0: 40:9e:8a:58:75:c8:e2:ea:14:52:09:53:20:30:63:62:f0:e1: 9e:6e:32:fb:62:12:f2:ba:32:63:7c:1c:8b:4b:0e:78:66:22: 1e:89:25:eb:5d:28:c8:d6:6a:c0:00:82:86:cf:19:62:75:49: 67:0c:e0:7a:e9:43:89:77:5c:21:ac:f3:51:68:58:3d:21:20: d7:25:f4:ff:9d:70:ce:96:b3:04:49:51:de:fb:98:d0:b5:b9: 05:cb:b8:c7:bf:d1:9e:c2:bf:c3:52:91:a9:d2:84:8b:26:37: 49:fe:28:80:6b:77:62:2e:92:f9:fe:59:11:bb:24:23:30:76: 54:1f:8a:f2:1f:da:ff:89:3a:cd:81:ac:72:95:d8:28:4b:d4: 2f:ce:31:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYxMDA0MTkwNzM1WhcNMjYxMDExMTkwNzM1WjAYMRYwFAYD VQQDEw02YWMyYTNmOC0yNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi34XTHn8X+Hlw7nRGAr/yTNLEJQ69uBBsm9XKmsBnaBFrTLXYm0DooFPUpLC HI/xdyfVGQYtKxtOAc9IIxUXjJnk8eWKfNRZTEcQjEpAPhPeREazJkr7k69p2Lyt I0JcqrAmHPgLmYN5yh6b20xalHK2Pz8vefL5EDNAaeAQYfS6lZCJGY48HSk79PeS sodKZ/Tu1+UoSH7EXVL7+IVjb2wNSgDUGqoiR9ayv5VO/WNsZjMZLC9OVhcRTPJs CjrTtVIp3JGXh+GjwchmSO2sbYX0EeSnWngHt2ogfj67IlsGT0Y9bt9xph9ADfAF h+O9j1Ze3x+bwGBqYmzPVD6iLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6adFaK pGlK4jpJVT/mAZorAjSSMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl9WekSgDUanNpVS7stAAnOnv48oY9RYK31ojC64LnyWsq8o6cM0dBINQpXLM wTjzp1S3tPqeqCwB3l8kz47kjpI1Fqgw/ycdLdT4o+o/61YD07sbsZ9U/BxW8u0v A8JmIxQ96KPH5mhUJluwQJ6KWHXI4uoUUglTIDBjYvDhnm4y+2IS8royY3wci0sO eGYiHokl610oyNZqwACChs8ZYnVJZwzgeulDiXdcIazzUWhYPSEg1yX0/51wzpaz BElR3vuY0LW5Bcu4x7/RnsK/w1KRqdKEiyY3Sf4ogGt3Yi6S+f5ZEbskIzB2VB+K 8h/a/4k6zYGscpXYKEvUL84x8g== -----END CERTIFICATE-----Generated at Mon Oct 5 13:02:56 2026 by rpki-client