$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: yj0Q3DiyxtEu4m/sHA89D5lLRGSA9CtOFirHadcfb2w= Subject key identifier: 30:3F:1B:1D:83:48:AC:16:EB:DC:36:70:F1:93:29:05:2C:31:FB:AE Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 35B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 3584 Signing time: Mon 22 Jun 2026 14:34:14 +0000 Manifest this update: Mon 22 Jun 2026 14:34:13 +0000 Manifest next update: Mon 29 Jun 2026 14:34:13 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: dnKKIFsO8FY8OiDmPNQvUup9XS/iKqM/lqRz7DkeyIU=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: Ehg/3ByY4in17WS9HIHSCx7iYIaT6e+zSPAMzsvhayg=) 3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: mYW3nKsnG4GE83HF25tjaBek0p6fEGk2hgZHM+Eo7hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13750 (0x35b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Jun 22 14:34:13 2026 GMT Not After : Jun 29 14:34:13 2026 GMT Subject: CN=6a3947e5-8440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:29:d6:52:7e:c7:8d:9f:c7:38:9c:3b:e1: 2a:49:12:7d:ff:82:a8:44:26:fb:73:61:56:3e:98: 80:73:37:28:f3:3a:af:74:88:f6:b9:24:92:f7:8a: 7a:71:df:2b:6c:0d:95:1c:97:df:e5:8a:e3:11:f8: 14:97:5f:b6:52:eb:30:bb:2d:95:df:65:fa:17:20: 66:2c:c6:60:eb:0a:79:a2:fd:0a:09:fc:e9:43:9d: 5f:d5:77:96:67:88:6c:42:ae:20:ba:8d:b6:c5:09: d6:eb:6c:3a:82:d2:12:e1:e1:e2:e6:37:bc:af:3a: 75:4a:89:d9:e4:77:ac:87:9a:04:ce:4f:f9:fb:14: 16:48:f7:0a:d2:b6:64:00:7b:1e:70:aa:44:f6:b1: e7:68:b1:68:c0:ee:a1:99:e3:44:b0:e4:00:2b:0b: 10:03:bd:89:9b:da:69:e7:00:74:37:77:b2:eb:cb: 3b:59:35:2b:ff:3f:dd:1e:95:d5:19:f9:de:09:40: c8:7f:2b:ed:73:50:ee:a2:4a:51:40:4c:c5:9d:ca: b8:59:62:b3:8c:1f:81:c5:68:d8:2e:82:12:ea:d5: f0:23:27:44:8f:13:2d:fe:db:d1:99:71:54:65:3b: 6c:5c:0d:76:6f:e5:7d:e1:43:61:a7:c2:8a:bf:7a: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:1B:1D:83:48:AC:16:EB:DC:36:70:F1:93:29:05:2C:31:FB:AE X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:24:76:6f:83:c1:b2:09:a1:ec:90:6a:0d:8d:4b:35:08:23: a8:b6:80:a7:23:0b:e4:22:25:48:1c:67:33:42:01:cc:5a:b0: d8:4e:c5:38:01:6c:c7:a4:08:b1:83:a0:c2:23:3c:27:d3:b0: 79:5e:d1:a1:2a:a2:48:91:be:3a:e4:db:d7:3d:7c:34:72:c1: 24:e1:e1:68:d6:dc:fd:a2:e6:83:e6:bd:8c:4a:f5:3c:83:14: 1c:e6:93:ac:64:89:d4:f1:d6:ab:e4:09:08:76:39:fb:2f:84: af:c1:74:f8:32:5c:ff:f1:20:e7:b2:f9:a6:61:45:5a:76:53: fb:9f:b1:97:0d:9e:81:7f:95:20:34:2e:13:8c:d3:0a:f5:7c: 99:ec:88:48:6a:f8:6f:97:78:2d:aa:ac:89:f9:10:86:1d:e5: 59:51:11:5b:65:1a:32:15:60:5d:02:8c:e7:30:16:73:0c:f3: f7:18:78:57:aa:d2:fd:ba:c7:b3:bc:85:ad:b3:44:51:f6:e3: 41:c9:3c:95:ab:85:e3:dd:dd:c1:24:d0:bf:88:32:23:8c:c4: 0d:0c:74:13:51:0d:aa:45:f7:91:35:fa:39:40:01:9a:30:60: cc:5d:fb:ed:a3:15:d6:02:14:a6:76:d7:f3:a9:7d:50:c1:c1: 89:e1:27:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjYwNjIyMTQzNDEzWhcNMjYwNjI5MTQzNDEzWjAYMRYwFAYD VQQDEw02YTM5NDdlNS04NDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ukp1lJ+x42fxzicO+EqSRJ9/4KoRCb7c2FWPpiAczco8zqvdIj2uSSS94p6 cd8rbA2VHJff5YrjEfgUl1+2Uuswuy2V32X6FyBmLMZg6wp5ov0KCfzpQ51f1XeW Z4hsQq4guo22xQnW62w6gtIS4eHi5je8rzp1SonZ5Hesh5oEzk/5+xQWSPcK0rZk AHsecKpE9rHnaLFowO6hmeNEsOQAKwsQA72Jm9pp5wB0N3ey68s7WTUr/z/dHpXV GfneCUDIfyvtc1DuokpRQEzFncq4WWKzjB+BxWjYLoIS6tXwIydEjxMt/tvRmXFU ZTtsXA12b+V94UNhp8KKv3qCIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDA/Gx2D SKwW69w2cPGTKQUsMfuuMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJSR2b4PBsgmh7JBqDY1LNQgjqLaApyML5CIlSBxnM0IBzFqw2E7FOAFsx6QI sYOgwiM8J9OweV7RoSqiSJG+OuTb1z18NHLBJOHhaNbc/aLmg+a9jEr1PIMUHOaT rGSJ1PHWq+QJCHY5+y+Er8F0+DJc//Eg57L5pmFFWnZT+5+xlw2egX+VIDQuE4zT CvV8meyISGr4b5d4LaqsifkQhh3lWVERW2UaMhVgXQKM5zAWcwzz9xh4V6rS/brH s7yFrbNEUfbjQck8lauF493dwSTQv4gyI4zEDQx0E1ENqkX3kTX6OUABmjBgzF37 7aMV1gIUpnbX86l9UMHBieEnlA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:08 2026 by rpki-client