$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: MchmJEYYjDjDec4PSS3wUHzjvdHMRl0UvxM0wS9Q7T8= Subject key identifier: E2:E6:B0:98:8A:D3:D9:FC:08:41:82:CC:49:3C:99:8C:31:7A:84:F0 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 0444 Signing time: Wed 19 Aug 2026 00:37:00 +0000 Manifest this update: Wed 19 Aug 2026 00:37:00 +0000 Manifest next update: Wed 26 Aug 2026 00:37:00 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: fTBtLmoCuB/uvCHWl74NVKnF3AOdOE+mHz/vDayCZ5E=) 2: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=) 3: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=) 4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Aug 19 00:37:00 2026 GMT Not After : Aug 26 00:37:00 2026 GMT Subject: CN=6a84faac-c5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:d2:05:27:ca:68:0b:62:aa:8c:53:eb:d1: b3:56:a0:55:cc:65:9e:2c:2e:29:f0:3f:d4:f3:10: c7:94:05:b2:c3:c6:b8:4f:8b:d2:c4:a4:41:a7:c5: 85:7b:92:5b:98:73:fc:5a:0b:5d:43:07:bd:8b:54: 44:40:02:88:4b:50:f2:b6:7e:37:79:1e:12:eb:78: 56:6b:4d:5e:97:85:b3:a5:98:5f:f3:76:1f:23:69: 61:45:b8:24:f5:e3:68:f1:ce:9d:93:69:25:0a:6c: 13:2a:10:28:d1:f4:7f:ce:00:d1:32:15:89:98:23: 08:97:b2:6e:b2:2c:14:32:85:02:c8:20:9f:54:a9: 77:cb:8a:a8:a1:c6:f2:0a:14:27:e8:14:4b:8f:5a: ba:2b:37:0f:b7:69:47:dd:77:b5:9a:4b:12:25:69: be:ee:b1:fb:38:af:2a:7b:a1:82:7f:7e:33:d7:bc: 72:e0:b6:b3:2e:d2:7b:ad:ca:e8:50:f8:28:3b:64: 77:48:c0:8d:ad:f4:3e:fd:c3:67:01:4f:6b:56:89: 39:eb:4e:13:ce:39:67:7e:42:d3:bf:0d:b2:17:04: 1a:37:fb:f3:f2:fa:59:cd:cc:01:67:89:46:f0:d6: bb:d5:f4:27:72:ef:ee:42:dd:2f:8f:d0:fb:25:19: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:B0:98:8A:D3:D9:FC:08:41:82:CC:49:3C:99:8C:31:7A:84:F0 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ed:4e:02:02:f5:b0:c4:60:6c:b6:ab:94:26:89:17:0b:c6: 7d:45:37:0b:3b:e2:90:0f:ef:8f:28:4f:45:6c:44:1a:a3:6a: 35:5d:91:af:2a:25:1e:05:15:4c:fa:e7:7c:04:9e:d6:36:f6: 02:4a:a2:13:86:47:2a:24:23:e7:3c:22:0b:17:52:fb:3c:85: d7:24:7e:fb:22:2a:58:6c:59:16:c8:0f:40:33:ca:54:f6:7a: 97:71:ed:e8:86:25:43:b7:d1:68:96:2e:55:98:dc:30:a1:b2: 11:61:b9:5b:54:5d:a1:d0:32:d1:ad:b8:96:3e:92:90:62:20: a7:03:24:32:e0:3d:55:62:c3:ec:42:18:d3:39:fd:21:74:46: d6:35:67:94:4a:57:66:88:77:d4:1b:97:57:64:f5:65:08:b1: 23:0f:af:ec:18:9d:4f:82:d5:4e:51:62:c3:07:21:0f:04:cb: f4:2c:c4:55:17:4f:49:b0:94:ec:6c:16:03:54:33:83:01:af: af:d1:a5:32:82:35:46:29:4e:cd:cd:87:6f:8b:19:eb:ee:a3: 16:80:e3:d6:0f:86:ae:ab:5d:d5:a6:8c:0e:5e:24:c4:a6:9b: 93:d0:86:18:16:b8:38:c4:da:87:67:1d:c3:3c:88:9a:a8:c3: 71:58:27:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwODE5MDAzNzAwWhcNMjYwODI2MDAzNzAwWjAYMRYwFAYD VQQDEw02YTg0ZmFhYy1jNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mDSBSfKaAtiqoxT69GzVqBVzGWeLC4p8D/U8xDHlAWyw8a4T4vSxKRBp8WF e5JbmHP8WgtdQwe9i1REQAKIS1Dytn43eR4S63hWa01el4WzpZhf83YfI2lhRbgk 9eNo8c6dk2klCmwTKhAo0fR/zgDRMhWJmCMIl7JusiwUMoUCyCCfVKl3y4qoocby ChQn6BRLj1q6KzcPt2lH3Xe1mksSJWm+7rH7OK8qe6GCf34z17xy4LazLtJ7rcro UPgoO2R3SMCNrfQ+/cNnAU9rVok5604TzjlnfkLTvw2yFwQaN/vz8vpZzcwBZ4lG 8Na71fQncu/uQt0vj9D7JRk1GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLmsJiK 09n8CEGCzEk8mYwxeoTwMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADu1OAgL1sMRgbLarlCaJFwvGfUU3CzvikA/vjyhPRWxEGqNqNV2RryolHgUV TPrnfASe1jb2AkqiE4ZHKiQj5zwiCxdS+zyF1yR++yIqWGxZFsgPQDPKVPZ6l3Ht 6IYlQ7fRaJYuVZjcMKGyEWG5W1RdodAy0a24lj6SkGIgpwMkMuA9VWLD7EIY0zn9 IXRG1jVnlEpXZoh31BuXV2T1ZQixIw+v7BidT4LVTlFiwwchDwTL9CzEVRdPSbCU 7GwWA1QzgwGvr9GlMoI1RilOzc2Hb4sZ6+6jFoDj1g+Grqtd1aaMDl4kxKabk9CG GBa4OMTah2cdwzyImqjDcVgnLw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:43 2026 by rpki-client