$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: T57fseuqzP1MgLD5rHvrNVyiIctKXSc5+fjO0WelRWY= Subject key identifier: BE:A3:99:2E:D1:9D:11:B0:FA:57:5D:35:E0:BE:FD:37:99:67:F7:EC Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0BBF Signing time: Sat 20 Jun 2026 19:05:13 +0000 Manifest this update: Sat 20 Jun 2026 19:05:13 +0000 Manifest next update: Sat 27 Jun 2026 19:05:13 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: ju9GjNJk2CNX5kmkkWTphTXaZXVicjaPNmvKMb0gjEE=) 2: 6663341A5B6711F19383C9AE9E833773.roa (hash: GGXbJncHpVSh7kjLt3m5av1NshHATlj181GsdnLCABU=) 3: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ohdawFztGAM0Gs09vQc5Ov4qrrZjKmoqnhXK3FzIz7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 19:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Jun 20 19:05:13 2026 GMT Not After : Jun 27 19:05:13 2026 GMT Subject: CN=6a36e469-57ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:d4:72:52:2c:6a:84:d3:3f:8a:c0:af:c1: 82:7e:31:6c:56:5c:95:22:64:b0:6c:14:f1:73:95: 54:66:24:2b:1f:2d:e9:1e:25:e9:8c:71:65:82:c3: d2:fe:eb:ec:b1:4c:bc:05:df:57:db:76:19:ce:e2: e0:f0:6a:1a:5d:14:60:72:b3:33:a0:8c:77:73:19: 49:91:d8:8f:41:72:dc:5e:dc:cd:e3:29:4b:7c:b5: 33:74:88:13:dd:c0:ad:38:22:3b:74:57:7e:7d:a6: c8:38:67:7c:b3:ea:45:9f:36:b3:75:13:22:ea:d8: 24:0d:dc:44:9e:a9:47:fc:ab:ed:55:bf:73:2d:ef: 96:b6:5f:21:60:85:f1:e5:c2:82:78:aa:db:22:f5: 8a:81:33:d2:06:8a:ed:fe:58:0e:75:b7:f9:79:dd: 27:83:51:e1:06:ba:a9:e6:dd:9d:bf:1f:05:41:db: b9:33:46:19:34:81:b7:41:91:95:90:43:28:60:fe: c8:b5:42:51:11:8d:29:68:21:83:3a:93:45:c8:08: 5b:61:a6:e9:e9:33:67:93:8e:8e:c4:24:ec:e6:57: 8f:23:38:6c:4a:3c:ef:69:90:4b:58:56:5b:22:90: a7:a3:b0:fe:19:ec:2d:b6:c5:ac:cd:ac:40:36:04: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A3:99:2E:D1:9D:11:B0:FA:57:5D:35:E0:BE:FD:37:99:67:F7:EC X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:03:89:fd:65:80:2c:2e:da:9f:84:9c:e1:19:8a:eb:29: 60:70:bb:f5:ba:af:bd:5a:e3:6b:63:9b:9e:c7:be:75:df:f3: df:f0:0f:eb:8c:c4:c9:85:d9:a3:cf:ec:b8:22:3e:b5:18:96: 13:24:1e:4a:92:b1:13:17:b1:38:ce:2c:37:e5:ec:98:fc:d4: 24:be:8a:fc:5c:77:44:61:93:af:b6:eb:4f:ce:c2:df:03:cf: 6d:11:ef:39:36:8d:33:18:a7:84:fc:d8:a6:42:04:9b:64:62: 6f:78:a3:5a:19:85:4d:9d:e4:3c:b2:21:f5:bc:df:06:8d:39: 68:08:b8:6c:60:49:fa:e9:f8:b5:fb:9c:5f:fc:32:e2:04:48: f9:51:88:e0:38:62:72:79:24:fe:05:f4:1f:6c:05:9e:54:6b: c4:b8:bb:45:b7:f3:27:98:4e:b9:55:1a:4e:a8:8d:a9:fb:ae: 72:b0:bc:f4:10:ff:1d:95:86:c9:f1:51:75:ca:30:8c:e1:f1: 7e:c2:42:cb:67:33:e0:55:5c:41:44:30:c7:1e:f3:d1:10:2f: 82:30:51:71:53:05:83:0f:ae:48:01:ad:d3:f2:9c:ce:59:0f: 94:e5:30:8b:64:47:88:18:f3:18:ad:ae:75:11:cb:f3:f7:e6: f9:56:db:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYwNjIwMTkwNTEzWhcNMjYwNjI3MTkwNTEzWjAYMRYwFAYD VQQDEw02YTM2ZTQ2OS01N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ7UclIsaoTTP4rAr8GCfjFsVlyVImSwbBTxc5VUZiQrHy3pHiXpjHFlgsPS /uvssUy8Bd9X23YZzuLg8GoaXRRgcrMzoIx3cxlJkdiPQXLcXtzN4ylLfLUzdIgT 3cCtOCI7dFd+fabIOGd8s+pFnzazdRMi6tgkDdxEnqlH/KvtVb9zLe+Wtl8hYIXx 5cKCeKrbIvWKgTPSBort/lgOdbf5ed0ng1HhBrqp5t2dvx8FQdu5M0YZNIG3QZGV kEMoYP7ItUJREY0paCGDOpNFyAhbYabp6TNnk46OxCTs5lePIzhsSjzvaZBLWFZb IpCno7D+GewttsWszaxANgTRlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6jmS7R nRGw+lddNeC+/TeZZ/fsMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtZUDif1lgCwu2p+EnOEZiuspYHC79bqvvVrja2Obnse+dd/z3/AP64zEyYXZ o8/suCI+tRiWEyQeSpKxExexOM4sN+XsmPzUJL6K/Fx3RGGTr7brT87C3wPPbRHv OTaNMxinhPzYpkIEm2Rib3ijWhmFTZ3kPLIh9bzfBo05aAi4bGBJ+un4tfucX/wy 4gRI+VGI4Dhicnkk/gX0H2wFnlRrxLi7RbfzJ5hOuVUaTqiNqfuucrC89BD/HZWG yfFRdcowjOHxfsJCy2cz4FVcQUQwxx7z0RAvgjBRcVMFgw+uSAGt0/KczlkPlOUw i2RHiBjzGK2udRHL8/fm+VbbGw== -----END CERTIFICATE-----Generated at Sun Jun 21 08:29:05 2026 by rpki-client