$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: LVw38GSrd7XMTWMK5AkzouWLvdGhzSv2zdUQqXxqVWo= Subject key identifier: 1E:D1:FA:8A:15:24:B9:0E:7F:53:F9:D6:39:14:6B:BB:81:67:AA:DF Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 0165 Signing time: Mon 05 Oct 2026 05:35:08 +0000 Manifest this update: Mon 05 Oct 2026 05:35:07 +0000 Manifest next update: Mon 12 Oct 2026 05:35:07 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: WVVE9OPnLu8EXnIG8dcLikPh+neKxXYmqAlWycWDoq8=) 2: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=) 3: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=) 4: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=) 5: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Oct 5 05:35:07 2026 GMT Not After : Oct 12 05:35:07 2026 GMT Subject: CN=6ac3370b-aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:dd:cf:22:2b:38:b2:09:95:40:4e:44:ed: 8c:14:8a:fd:74:6c:3b:73:9c:1a:43:da:36:ef:a7: 45:22:97:fa:e1:70:17:6d:87:98:28:e0:d3:73:9d: 7c:68:c1:a9:74:71:8f:66:90:47:d2:0e:e7:ac:c5: e1:a2:61:84:a8:ad:8a:61:79:bf:33:98:d9:e8:65: 1a:9d:a5:aa:bb:ae:05:64:7a:6e:d2:fc:fa:1e:94: 26:9c:76:e7:03:10:28:fa:a3:e3:33:cc:80:f1:ae: 4a:dd:01:71:8d:77:11:bc:ee:fa:a3:e8:d7:ab:f2: 32:6e:b2:2f:10:79:6c:0b:da:e7:24:cf:85:25:52: a2:6c:b2:f5:06:16:06:7a:98:8b:ea:ae:49:f2:35: fa:7a:14:45:b2:76:8c:96:a7:aa:96:e9:24:5c:00: f6:0c:71:e8:10:42:33:22:ba:1f:61:34:92:40:4c: 25:b2:82:1c:6a:5c:8a:69:c4:bf:5e:f7:a7:4a:f8: 41:76:8a:d7:e2:88:e0:11:61:3a:a1:61:95:57:d7: 6b:42:9f:fd:11:08:ba:8a:eb:89:bb:08:f6:88:43: 25:53:6d:cd:18:9e:d3:61:df:d1:3d:9d:3e:ec:43: bc:85:ab:6f:27:7b:2b:69:95:3d:ff:54:2c:ea:df: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D1:FA:8A:15:24:B9:0E:7F:53:F9:D6:39:14:6B:BB:81:67:AA:DF X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:8d:0e:d5:7b:5d:7d:0d:4e:d6:05:43:8f:95:3e:b9:d5:70: fc:21:9e:67:12:a4:80:48:ae:d2:e7:db:32:53:be:70:ac:a9: 76:a6:df:b6:11:b7:be:c9:c1:50:1c:bc:ad:1c:24:c9:c4:41: 7f:ba:3a:2f:b8:9c:dd:04:c6:d3:76:53:73:24:8a:56:de:d3: 34:35:5a:e5:28:f3:18:61:9c:58:ff:25:5d:50:ea:d9:c9:ac: 44:6c:ff:34:3d:b6:1c:59:27:89:f1:41:3f:41:05:94:8e:e6: 11:eb:aa:25:3a:e3:45:f2:06:02:c1:55:8d:d3:73:86:8a:00: 58:80:af:35:0a:cd:57:b9:40:9d:55:17:c2:27:9e:e2:73:da: 6a:c2:d5:8f:0c:ec:9a:b6:e6:85:3a:a1:a7:5f:4d:da:9c:7c: 34:8b:d1:b6:e0:3d:b9:5f:c8:13:1e:a6:3e:9e:ec:5a:86:a4: c8:16:76:c4:47:c9:29:75:1e:d1:b9:89:4f:9a:2c:bf:c1:c2: 52:c9:1e:75:b3:8e:84:cf:43:90:05:d8:e8:11:25:a9:60:94: cd:e2:29:93:ed:3a:44:9e:2c:5e:30:a8:87:7f:75:bf:f2:b3: 26:66:35:59:77:8b:9d:22:cc:ca:76:5d:c6:07:25:94:79:96: cd:fc:85:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjYxMDA1MDUzNTA3WhcNMjYxMDEyMDUzNTA3WjAYMRYwFAYD VQQDEw02YWMzMzcwYi1hYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/fdzyIrOLIJlUBORO2MFIr9dGw7c5waQ9o276dFIpf64XAXbYeYKODTc518 aMGpdHGPZpBH0g7nrMXhomGEqK2KYXm/M5jZ6GUanaWqu64FZHpu0vz6HpQmnHbn AxAo+qPjM8yA8a5K3QFxjXcRvO76o+jXq/IybrIvEHlsC9rnJM+FJVKibLL1BhYG epiL6q5J8jX6ehRFsnaMlqeqlukkXAD2DHHoEEIzIrofYTSSQEwlsoIcalyKacS/ XvenSvhBdorX4ojgEWE6oWGVV9drQp/9EQi6iuuJuwj2iEMlU23NGJ7TYd/RPZ0+ 7EO8hatvJ3sraZU9/1Qs6t/w+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7R+ooV JLkOf1P51jkUa7uBZ6rfMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg40O1XtdfQ1O1gVDj5U+udVw/CGeZxKkgEiu0ufbMlO+cKypdqbfthG3vsnB UBy8rRwkycRBf7o6L7ic3QTG03ZTcySKVt7TNDVa5SjzGGGcWP8lXVDq2cmsRGz/ ND22HFknifFBP0EFlI7mEeuqJTrjRfIGAsFVjdNzhooAWICvNQrNV7lAnVUXwiee 4nPaasLVjwzsmrbmhTqhp19N2px8NIvRtuA9uV/IEx6mPp7sWoakyBZ2xEfJKXUe 0bmJT5osv8HCUskedbOOhM9DkAXY6BElqWCUzeIpk+06RJ4sXjCoh391v/KzJmY1 WXeLnSLMynZdxgcllHmWzfyFqA== -----END CERTIFICATE-----Generated at Tue Oct 6 18:15:31 2026 by rpki-client