$ rpki-client -vvf rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft File: HzX0DDZLiLCJrhL97baBXD8RqQY.mft (raw, json) Hash identifier: j+O2iHWWKZx4qv79gPJ7Lmmhz0sJju0M4LuBTju/h60= Subject key identifier: CB:A2:C8:B2:20:AF:5E:C8:46:87:E8:8B:65:0B:0B:81:57:58:D2:34 Authority key identifier: 1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 Certificate issuer: /CN=A91924F8/serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft Manifest number: 26 Signing time: Wed 19 Aug 2026 09:34:13 +0000 Manifest this update: Wed 19 Aug 2026 09:34:13 +0000 Manifest next update: Wed 26 Aug 2026 09:34:13 +0000 Files and hashes: 1: HzX0DDZLiLCJrhL97baBXD8RqQY.crl (hash: l3h60N46FjaGUC+HLs525IwEkrWDgYSxhBjjFtLBnYU=) 2: CA5882E06D4611F1934851767447A888.roa (hash: PfXIGwgTTCIusRlPGqdMeq1XMVW+gcuIfsglflOola4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91924F8, serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Validity Not Before: Aug 19 09:34:13 2026 GMT Not After : Aug 26 09:34:13 2026 GMT Subject: CN=6a857895-d935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:60:94:9f:94:74:07:ea:ee:ca:39:1e:77: 90:2e:c6:a5:e0:5b:76:72:44:74:2d:73:77:65:fc: 23:76:6c:69:bc:fe:aa:13:cb:a0:f8:23:f3:89:de: c5:5a:78:63:7a:14:bd:7d:49:12:0d:a6:77:d3:47: 60:bb:fe:f9:86:7a:6d:fd:f8:32:b9:a2:94:bb:47: c6:26:97:4a:19:23:94:28:73:01:4f:f8:f0:eb:4d: e9:68:89:33:41:30:17:07:56:af:8e:06:c3:97:36: 5e:81:f0:f2:f9:a4:2b:7d:de:1f:e3:8b:bc:97:d4: 06:3d:ba:69:4f:4c:d9:d7:a4:58:b2:22:4e:32:47: 6f:fd:71:86:ca:93:77:16:0c:60:1c:b6:51:7f:1d: 96:cd:cc:e5:b8:1e:38:b7:f1:2f:a0:a4:e4:c8:14: 90:f8:bd:b3:aa:d8:4f:14:5c:57:05:28:a8:41:58: b8:2a:b2:fc:0c:87:50:39:ae:60:3c:b4:91:d4:fe: 55:d2:27:89:43:e3:d8:9b:5e:59:e5:da:43:7d:07: 73:72:3a:55:e1:33:84:dc:af:dd:04:26:57:81:99: d6:d9:1d:f2:04:9c:94:8c:d3:a0:13:70:e2:d1:a7: 62:32:bd:b5:38:d3:6a:c8:18:16:14:81:fe:11:2c: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:C8:B2:20:AF:5E:C8:46:87:E8:8B:65:0B:0B:81:57:58:D2:34 X509v3 Authority Key Identifier: keyid:1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:26:81:b0:a8:ea:b7:7e:c5:81:ed:bc:65:90:be:f2:b9:a9: d0:0b:18:46:b8:e8:17:e3:39:69:99:60:0a:73:47:a8:ba:20: 65:6d:26:2e:0b:e4:70:01:68:a2:43:1c:5e:06:7b:15:19:56: d8:d3:16:67:ea:29:02:e1:95:a0:7a:12:62:d2:01:44:6d:20: e2:b1:de:ea:5e:6d:e1:59:32:fa:55:b9:44:ae:53:47:d6:51: 7b:c9:af:17:07:0b:0d:d4:67:e9:bb:92:c0:0e:89:04:9e:96: 74:59:d5:01:29:5f:9a:88:dc:57:9b:31:35:0e:df:63:0d:f5: 39:0d:fb:02:a2:46:08:35:f8:51:40:dc:3d:65:2d:79:56:db: a8:ce:fe:a0:99:f0:1e:f5:78:1b:11:87:84:7e:c8:03:e2:d3: 38:0c:80:0b:d7:a4:ad:ba:4a:78:6d:67:fb:a1:56:db:1e:d1: 0c:3f:e9:53:86:f3:3e:db:6c:f0:51:7f:11:7f:12:ba:a0:10: 8a:8e:8c:5e:dd:e2:f0:d7:d5:84:18:52:dc:be:e9:91:05:c7: 18:ca:72:7f:36:fe:e7:77:de:68:db:e6:f9:9b:5b:af:6b:ef: 85:be:61:e2:5c:58:da:e4:05:22:23:90:09:b4:7f:31:86:14: 55:29:96:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjRGODExMC8GA1UEBRMoMUYzNUY0MEMzNjRCODhCMDg5QUUxMkZERURCNjgxNUMz RjExQTkwNjAeFw0yNjA4MTkwOTM0MTNaFw0yNjA4MjYwOTM0MTNaMBgxFjAUBgNV BAMTDTZhODU3ODk1LWQ5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvNWCUn5R0B+ruyjked5AuxqXgW3ZyRHQtc3dl/CN2bGm8/qoTy6D4I/OJ3sVa eGN6FL19SRINpnfTR2C7/vmGem39+DK5opS7R8Yml0oZI5QocwFP+PDrTeloiTNB MBcHVq+OBsOXNl6B8PL5pCt93h/ji7yX1AY9umlPTNnXpFiyIk4yR2/9cYbKk3cW DGActlF/HZbNzOW4Hji38S+gpOTIFJD4vbOq2E8UXFcFKKhBWLgqsvwMh1A5rmA8 tJHU/lXSJ4lD49ibXlnl2kN9B3NyOlXhM4Tcr90EJleBmdbZHfIEnJSM06ATcOLR p2IyvbU402rIGBYUgf4RLDHpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUy6LIsiCv XshGh+iLZQsLgVdY0jQwHwYDVR0jBBgwFoAUHzX0DDZLiLCJrhL97baBXD8RqQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNEY4LzcxRkQxMzM4NjQx MTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxDSnJoTDk3YmFCWEQ4UnFR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHpYMEREWkxpTENKcmhMOTdiYUJYRDhScVFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NEY4LzcxRkQxMzM4NjQxMTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxD SnJoTDk3YmFCWEQ4UnFRWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARJoGwqOq3fsWB7bxlkL7yuanQCxhGuOgX4zlpmWAKc0eouiBlbSYuC+RwAWii QxxeBnsVGVbY0xZn6ikC4ZWgehJi0gFEbSDisd7qXm3hWTL6VblErlNH1lF7ya8X BwsN1Gfpu5LADokEnpZ0WdUBKV+aiNxXmzE1Dt9jDfU5DfsCokYINfhRQNw9ZS15 Vtuozv6gmfAe9XgbEYeEfsgD4tM4DIAL16Stukp4bWf7oVbbHtEMP+lThvM+22zw UX8RfxK6oBCKjoxe3eLw19WEGFLcvumRBccYynJ/Nv7nd95o2+b5m1uva++FvmHi XFja5AUiI5AJtH8xhhRVKZYS -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:23 2026 by rpki-client