$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: c6euorHx0Ot0OWboEY2WVJyat20NVa297IUbxeXIlwA= Subject key identifier: 8B:DC:D5:7B:B9:C5:81:93:0F:AF:79:F7:44:BF:62:07:2F:C7:F0:11 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: A3 Signing time: Tue 19 May 2026 07:11:54 +0000 Manifest this update: Tue 19 May 2026 07:11:53 +0000 Manifest next update: Tue 26 May 2026 07:11:53 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: S8Y8Dk0cMh6F0tSIetRLMEvBv3qtAw8aZw1pYKqRkTQ=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 07:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: May 19 07:11:53 2026 GMT Not After : May 26 07:11:53 2026 GMT Subject: CN=6a0c0d3a-5a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:cd:9c:c3:85:0c:08:a4:6b:b1:a8:5b:62: a6:87:f2:65:25:7a:58:21:3c:0e:4a:42:50:d8:93: 18:58:18:8a:c8:72:4d:8a:29:6e:8d:c4:52:8d:59: 47:a9:a9:da:6d:77:1f:26:30:f0:a6:fa:d4:01:3b: 57:7f:7a:02:46:5e:9a:f3:9a:f4:6a:74:9b:96:2c: 51:6e:ec:d5:80:f2:ab:99:20:ef:5a:d7:45:2f:1e: 60:89:69:40:cc:63:c9:8f:c9:2e:81:f9:07:0c:fa: c2:97:6e:d0:93:4d:47:3a:b4:ed:28:32:95:37:09: af:11:22:b2:2c:e4:ec:a7:e5:be:98:df:0c:46:94: fd:cf:e9:53:58:8e:ca:ce:56:f4:77:5b:ea:e6:24: 67:da:35:a6:f5:ba:e7:73:c0:25:ea:21:2d:99:f8: e9:69:fe:19:a3:7b:ae:23:be:8e:00:c9:f1:67:26: d2:be:5b:d1:d0:d3:ea:ef:97:61:d8:c8:fc:82:aa: eb:25:bc:60:ba:fa:27:ff:45:23:a9:93:b8:62:71: b2:f8:93:1e:57:19:79:3b:67:4a:a8:eb:f0:35:40: b8:e1:0e:15:11:50:b6:ec:6d:d2:bc:7a:5a:22:0a: d4:e2:cf:50:98:4b:d9:40:29:91:5b:ef:01:4b:4f: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:D5:7B:B9:C5:81:93:0F:AF:79:F7:44:BF:62:07:2F:C7:F0:11 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:a7:62:77:dd:04:be:41:fa:5c:d8:25:f2:aa:4d:ac:d1: 8d:2d:cc:2a:41:6d:dc:fe:e2:2e:ce:6b:26:3b:df:50:b4:60: 22:63:08:11:72:ed:56:b2:68:c3:d6:91:2f:be:c7:69:36:aa: 27:ee:ae:d7:03:b4:b0:8a:c8:73:62:f1:66:08:b6:04:3b:1f: a7:89:ad:2b:86:10:cd:d0:69:97:b7:bd:58:95:52:a4:a2:04: 25:52:5e:f8:75:da:63:65:39:6c:17:26:26:15:2a:21:ac:ef: db:5c:81:e7:a3:b0:14:89:53:ed:77:3b:98:66:03:ca:eb:84: c0:c7:62:e1:4a:55:8f:2e:25:83:e4:8c:e0:2a:78:40:68:d7: ce:ac:19:27:7b:d2:23:b0:25:bf:b8:45:c5:7e:9b:56:47:5c: ee:f1:99:99:ea:0d:b4:45:18:19:05:11:27:7a:35:c8:f3:02: ad:c6:3c:ed:75:75:7d:e8:67:41:b1:ea:9d:1c:a0:18:45:cd: 88:d3:58:c7:15:e0:21:bb:b1:8c:f1:12:93:6e:c3:f5:40:d9: 5f:a8:78:e0:64:9b:69:d7:df:0d:86:d6:df:e0:b8:35:62:6d: f8:ed:30:a2:54:67:a4:56:f0:f7:cf:ab:4f:13:9d:64:58:b3: 4c:45:3b:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFQTQxMTAvBgNVBAUTKDFEMjQyRTM3QjdBNzQ2QzM3RTQ1NDE0NTZBQjAwOThC M0I1NzNDRkMwHhcNMjYwNTE5MDcxMTUzWhcNMjYwNTI2MDcxMTUzWjAYMRYwFAYD VQQDEw02YTBjMGQzYS01YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2DNnMOFDAika7GoW2Kmh/JlJXpYITwOSkJQ2JMYWBiKyHJNiilujcRSjVlH qanabXcfJjDwpvrUATtXf3oCRl6a85r0anSblixRbuzVgPKrmSDvWtdFLx5giWlA zGPJj8kugfkHDPrCl27Qk01HOrTtKDKVNwmvESKyLOTsp+W+mN8MRpT9z+lTWI7K zlb0d1vq5iRn2jWm9brnc8Al6iEtmfjpaf4Zo3uuI76OAMnxZybSvlvR0NPq75dh 2Mj8gqrrJbxguvon/0UjqZO4YnGy+JMeVxl5O2dKqOvwNUC44Q4VEVC27G3SvHpa IgrU4s9QmEvZQCmRW+8BS08laQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvc1Xu5 xYGTD69590S/Ygcvx/ARMB8GA1UdIwQYMBaAFB0kLje3p0bDfkVBRWqwCYs7Vzz8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkVBNC8yNjREQ0YxQzYz QUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJzTi1SVUZGYXJBSml6dFhQ UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkVBNC8yNjREQ0YxQzYzQUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJz Ti1SVUZGYXJBSml6dFhQUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAacynYnfdBL5B+lzYJfKqTazRjS3MKkFt3P7iLs5rJjvfULRgImMIEXLtVrJo w9aRL77HaTaqJ+6u1wO0sIrIc2LxZgi2BDsfp4mtK4YQzdBpl7e9WJVSpKIEJVJe +HXaY2U5bBcmJhUqIazv21yB56OwFIlT7Xc7mGYDyuuEwMdi4UpVjy4lg+SM4Cp4 QGjXzqwZJ3vSI7Alv7hFxX6bVkdc7vGZmeoNtEUYGQURJ3o1yPMCrcY87XV1fehn QbHqnRygGEXNiNNYxxXgIbuxjPESk27D9UDZX6h44GSbadffDYbW3+C4NWJt+O0w olRnpFbw98+rTxOdZFizTEU79w== -----END CERTIFICATE-----Generated at Thu May 21 09:35:14 2026 by rpki-client