$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: oJXfOEmszius18D56re5Fbb3u7KoWc8IfhssHsSGhys= Subject key identifier: E2:11:22:99:7E:AD:36:9A:36:4B:50:46:14:60:B0:62:7C:82:A9:78 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 0413 Signing time: Fri 15 May 2026 00:32:02 +0000 Manifest this update: Fri 15 May 2026 00:32:02 +0000 Manifest next update: Fri 22 May 2026 00:32:02 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: JTT8cls8K02F62G2HwEMuF1d3MVSzLITwFzye/DRbjA=) 2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=) 3: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=) 4: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: May 15 00:32:02 2026 GMT Not After : May 22 00:32:02 2026 GMT Subject: CN=6a066982-a8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:b8:46:d6:1d:7a:eb:ef:85:aa:9b:25:10: 17:a2:8e:f2:12:62:12:22:75:88:5f:a7:9a:e4:03: 52:74:ad:df:90:0d:15:b4:bf:2a:48:dc:3e:50:26: f3:2a:f0:2f:e4:5d:8d:e5:e0:48:4b:55:14:eb:5a: a3:12:dd:59:9a:27:0c:11:51:dc:f8:30:8b:26:02: c2:11:92:b1:40:1f:60:d4:c3:0e:ec:57:58:eb:a6: 39:a2:97:bf:5b:fc:70:d9:7b:ea:48:26:69:c6:92: 9f:db:f2:31:50:b4:5f:a0:24:a6:95:31:25:a2:36: 6a:16:86:8d:62:7f:b1:67:c2:58:f5:ec:e6:d5:cb: 0c:8a:2b:c0:14:b4:fa:08:42:58:06:e7:93:53:3c: 10:1a:e0:b7:77:e1:7e:a6:02:3d:38:b0:e2:ad:8b: 28:a2:10:14:47:0d:bb:76:96:0a:02:0f:6f:05:50: af:db:7d:95:b7:f0:32:2d:0c:74:13:52:05:05:64: cb:09:24:24:2a:c2:12:26:ab:5a:81:90:58:5f:2d: 22:1e:b7:d1:c4:98:c3:14:c6:97:4b:21:ce:25:dd: f1:a7:86:1a:dd:1e:0a:8a:dd:6e:f5:08:53:e0:be: 95:f5:23:d4:09:69:36:4d:05:6c:a9:74:ef:85:b7: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:11:22:99:7E:AD:36:9A:36:4B:50:46:14:60:B0:62:7C:82:A9:78 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:f8:ce:71:b7:db:fc:9e:c5:f4:de:d3:96:0a:af:c0:bd: bf:ba:64:b8:c2:c6:df:0f:b7:b5:ba:97:01:f7:e7:a4:75:95: 42:97:64:f2:02:df:fc:db:84:f1:3b:76:57:dd:39:9f:28:ed: 13:16:3a:08:d7:33:2d:00:da:2f:1d:47:2b:2c:b3:81:18:56: 82:38:3d:7a:4b:e8:53:dd:62:6f:06:01:d3:26:f0:02:75:4c: b6:74:dc:b1:2b:f4:a7:2e:d3:7c:c1:cb:66:da:47:56:fe:0c: 6d:61:e4:53:54:c1:6c:91:85:81:20:52:1f:62:ad:c1:16:9e: dd:b4:cb:d6:b8:ae:50:5f:52:bc:97:c8:90:53:d9:84:2a:e6: a7:46:63:8e:7f:aa:d9:67:fc:32:a0:c2:2e:7c:0e:b3:e7:cf: 8f:30:13:e7:b2:17:d3:46:86:9e:98:6a:62:4b:43:59:73:2c: 54:24:05:93:87:2b:53:ad:a4:67:48:37:d1:ea:d2:1f:d2:f2: af:a1:b3:73:2d:c1:c7:2a:ac:61:c2:a9:3f:80:0a:22:9a:72: 89:5e:1e:4e:17:11:3f:2a:03:ca:97:ee:af:3e:97:73:7e:9f: 09:43:0d:8c:f0:39:77:57:59:66:e8:20:73:88:64:d3:ec:4a: 66:c4:aa:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwNTE1MDAzMjAyWhcNMjYwNTIyMDAzMjAyWjAYMRYwFAYD VQQDEw02YTA2Njk4Mi1hOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWi4RtYdeuvvhaqbJRAXoo7yEmISInWIX6ea5ANSdK3fkA0VtL8qSNw+UCbz KvAv5F2N5eBIS1UU61qjEt1ZmicMEVHc+DCLJgLCEZKxQB9g1MMO7FdY66Y5ope/ W/xw2XvqSCZpxpKf2/IxULRfoCSmlTElojZqFoaNYn+xZ8JY9ezm1csMiivAFLT6 CEJYBueTUzwQGuC3d+F+pgI9OLDirYsoohAURw27dpYKAg9vBVCv232Vt/AyLQx0 E1IFBWTLCSQkKsISJqtagZBYXy0iHrfRxJjDFMaXSyHOJd3xp4Ya3R4Kit1u9QhT 4L6V9SPUCWk2TQVsqXTvhbfdgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIRIpl+ rTaaNktQRhRgsGJ8gql4MB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeKj4znG32/yexfTe05YKr8C9v7pkuMLG3w+3tbqXAffnpHWVQpdk8gLf/NuE 8Tt2V905nyjtExY6CNczLQDaLx1HKyyzgRhWgjg9ekvoU91ibwYB0ybwAnVMtnTc sSv0py7TfMHLZtpHVv4MbWHkU1TBbJGFgSBSH2KtwRae3bTL1riuUF9SvJfIkFPZ hCrmp0Zjjn+q2Wf8MqDCLnwOs+fPjzAT57IX00aGnphqYktDWXMsVCQFk4crU62k Z0g30erSH9Lyr6Gzcy3BxyqsYcKpP4AKIppyiV4eThcRPyoDypfurz6Xc36fCUMN jPA5d1dZZuggc4hk0+xKZsSqaw== -----END CERTIFICATE-----Generated at Fri May 15 20:46:57 2026 by rpki-client