$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: SyTo1kKOpR+VtAfyx7f3fG81pG+u7DlxKgOD8vJxHkQ= Subject key identifier: 9F:22:1E:8D:51:1A:82:32:51:C1:DD:95:02:3B:13:92:39:B1:D0:BD Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 014D Signing time: Wed 19 Aug 2026 06:07:12 +0000 Manifest this update: Wed 19 Aug 2026 06:07:11 +0000 Manifest next update: Wed 26 Aug 2026 06:07:11 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: /eEpD9YTCiDFf27t36irsvnVSii34TpyqCa1qwh8k0M=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=) 4: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=) 5: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Aug 19 06:07:11 2026 GMT Not After : Aug 26 06:07:11 2026 GMT Subject: CN=6a85480f-c5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:0b:35:7d:29:0a:cf:2f:be:4f:4a:46:7f: e3:5f:25:42:3d:f0:90:e3:19:d8:24:78:00:1c:df: 06:8a:f9:05:90:41:ae:39:d3:25:4d:f8:22:f7:5e: 98:9e:d0:98:e2:93:e4:38:23:56:78:8f:a8:05:ce: 9e:e5:e7:b7:0a:26:fe:d8:95:2f:a0:25:c6:f5:fd: c2:7b:62:64:eb:3d:f3:a8:76:1c:37:ff:af:3a:09: 71:08:a2:16:b1:3b:28:da:10:bf:79:44:8f:d0:87: 2f:90:78:8d:29:86:03:92:15:ee:72:9b:fb:de:a4: 9a:4a:f1:17:ab:d0:c9:a0:5c:8c:95:14:f9:2a:09: 43:af:b7:03:bb:88:b8:22:50:b7:7b:8e:53:b3:e0: 13:e0:e6:87:b0:d1:e8:06:18:9b:8c:e4:7c:d9:91: be:dd:6a:fe:b7:1b:cf:be:82:ef:08:18:17:a0:89: 66:df:1f:41:f6:aa:d7:bd:a6:39:6d:4e:d4:c1:65: 87:1a:24:7c:5f:c5:b4:a5:84:5d:6a:2b:ac:a8:e9: 32:ec:66:c3:fb:fe:69:5d:40:43:4d:db:f5:9e:9d: a8:71:5d:0d:21:14:92:cb:32:0e:ba:58:37:06:1d: dc:d7:97:b1:68:9f:02:b0:f4:17:44:69:d7:d3:2d: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:1E:8D:51:1A:82:32:51:C1:DD:95:02:3B:13:92:39:B1:D0:BD X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:33:95:7b:0e:e8:4d:53:8d:30:a8:ff:cb:5c:04:1b:02:8a: d8:e7:be:fe:10:22:aa:cb:ef:d3:07:16:a4:17:56:7a:d6:d9: ac:7b:7a:62:76:f1:02:84:a7:72:68:be:16:b6:aa:ea:0c:9c: e2:74:7c:cf:6f:18:1c:55:54:8a:1b:0d:bc:44:82:4b:1d:fa: ff:89:48:8c:0f:b9:dd:ae:7f:5f:7a:b0:af:57:88:98:37:71: 97:08:5f:37:88:cd:c2:4a:64:be:c5:3b:37:ff:47:2e:5d:e8: 4a:c2:5e:a7:b5:b8:d1:9c:35:4f:53:b6:53:2f:02:ee:8f:b8: 53:1a:07:0c:3d:0e:cb:8c:8c:79:79:f3:76:d5:81:3a:e2:ab: 88:de:08:71:a5:36:19:65:82:e2:42:32:3b:0d:3a:1d:f0:9c: 80:83:3a:cd:27:14:58:d5:4f:69:f6:0a:76:94:14:13:83:20: 77:a0:b6:97:7d:b9:d9:4f:dc:eb:34:14:f4:23:f0:95:be:3d: 74:b1:9a:2b:20:c5:09:b9:2b:36:92:53:d8:c7:5a:f4:cc:95: 97:57:73:c4:dc:09:c9:d1:6d:81:26:31:2e:1c:e8:7e:dc:d0: 5a:12:fe:f4:db:64:03:74:9f:dd:93:86:e4:f8:16:c9:3c:8e: 41:60:ab:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjYwODE5MDYwNzExWhcNMjYwODI2MDYwNzExWjAYMRYwFAYD VQQDEw02YTg1NDgwZi1jNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM8LNX0pCs8vvk9KRn/jXyVCPfCQ4xnYJHgAHN8GivkFkEGuOdMlTfgi916Y ntCY4pPkOCNWeI+oBc6e5ee3Cib+2JUvoCXG9f3Ce2Jk6z3zqHYcN/+vOglxCKIW sTso2hC/eUSP0IcvkHiNKYYDkhXucpv73qSaSvEXq9DJoFyMlRT5KglDr7cDu4i4 IlC3e45Ts+AT4OaHsNHoBhibjOR82ZG+3Wr+txvPvoLvCBgXoIlm3x9B9qrXvaY5 bU7UwWWHGiR8X8W0pYRdaiusqOky7GbD+/5pXUBDTdv1np2ocV0NIRSSyzIOulg3 Bh3c15exaJ8CsPQXRGnX0y3gnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8iHo1R GoIyUcHdlQI7E5I5sdC9MB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHjOVew7oTVONMKj/y1wEGwKK2Oe+/hAiqsvv0wcWpBdWetbZrHt6YnbxAoSn cmi+Fraq6gyc4nR8z28YHFVUihsNvESCSx36/4lIjA+53a5/X3qwr1eImDdxlwhf N4jNwkpkvsU7N/9HLl3oSsJep7W40Zw1T1O2Uy8C7o+4UxoHDD0Oy4yMeXnzdtWB OuKriN4IcaU2GWWC4kIyOw06HfCcgIM6zScUWNVPafYKdpQUE4Mgd6C2l3252U/c 6zQU9CPwlb49dLGaKyDFCbkrNpJT2Mda9MyVl1dzxNwJydFtgSYxLhzoftzQWhL+ 9NtkA3Sf3ZOG5PgWyTyOQWCrAA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:55:12 2026 by rpki-client