$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: qU7Tu+ejmmiwRlO+3gO/D4SwyCwSVYo4PDFVmVg0v4U= Subject key identifier: 14:6A:C9:4D:88:87:D7:EC:6E:AE:B1:0A:42:1F:D1:80:6A:5E:8C:1A Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0AC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0AB7 Signing time: Sun 26 Jul 2026 19:55:55 +0000 Manifest this update: Sun 26 Jul 2026 19:55:54 +0000 Manifest next update: Sun 02 Aug 2026 19:55:54 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: BCUuCJojK/I7rRUi664qphRs10BK18Os+atlUCnDNp8=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Jul 26 19:55:54 2026 GMT Not After : Aug 2 19:55:54 2026 GMT Subject: CN=6a66664b-f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:ed:4c:3f:0f:9e:a9:3d:bb:e2:a1:a4:7b: 1c:a7:23:64:3a:01:d9:48:d3:ba:e3:01:50:76:38: 97:0a:57:6b:ea:ad:43:39:ad:11:3d:cb:9d:7d:df: 18:ac:51:4e:b2:b6:41:79:b0:5d:76:79:ff:09:2c: 94:8f:99:3a:20:16:8d:d4:5e:4b:42:f7:15:9e:62: 40:9d:7a:7a:1b:6d:81:6a:91:4a:db:1c:ef:65:26: ff:14:e8:a1:d1:40:c2:cb:91:42:75:11:01:85:19: 08:41:af:7c:14:ea:a9:fd:88:3a:78:f3:b5:7b:9c: cc:03:16:a7:7c:29:1e:69:b9:44:2b:4b:07:0b:bb: d4:96:4e:23:01:53:f6:d1:32:89:c5:ad:f1:6f:a9: 2b:eb:d4:fd:0a:ba:07:81:ba:22:37:e4:16:18:56: db:0d:65:68:4c:40:a2:af:8e:70:5f:bb:0b:9e:dc: dd:17:a4:0d:ca:29:c0:03:aa:6e:ef:0f:9f:2e:18: c9:6b:36:1c:b7:98:67:68:2c:38:cd:ed:a9:73:02: 3c:6f:eb:96:d6:9e:4f:da:8e:8c:07:c2:ad:2e:4e: 7b:d5:5f:f0:2c:58:bf:56:d8:3c:22:32:04:25:a0: d5:55:ca:97:8f:df:59:12:b5:e2:07:48:68:d0:9d: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:C9:4D:88:87:D7:EC:6E:AE:B1:0A:42:1F:D1:80:6A:5E:8C:1A X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:22:6a:5f:c1:47:30:c6:a3:6d:f1:fb:53:7d:27:bf:3d:df: b7:5a:2b:45:bd:bd:68:24:09:a7:5b:86:87:08:a4:2c:47:43: b8:94:e5:98:37:74:02:d4:39:ad:bc:58:39:8d:7c:a0:64:57: a7:95:82:dd:b4:b1:a6:e8:9f:04:a7:29:27:81:d9:38:b7:56: 20:6f:3a:a7:ae:d0:dd:8f:30:c0:fe:43:f4:80:39:04:87:93: 64:51:ef:85:9e:bb:c9:f2:d7:22:03:85:48:f9:be:62:ed:e1: a7:72:2f:e2:37:1b:67:bc:fd:7b:5e:65:2f:b4:6a:fa:e5:85: f1:e3:ff:9d:5c:35:00:1c:c5:d6:55:67:6a:01:dc:3a:fc:64: ca:82:6c:fb:57:ff:cb:d2:dd:98:12:9e:9c:13:ef:bc:b5:ed: 83:30:9f:90:9f:20:8e:2c:51:d4:19:ce:32:5b:c0:51:be:59: b1:18:98:d8:45:a7:eb:e6:e1:c8:f9:03:ba:31:90:17:08:0f: f9:9d:f3:db:5a:93:33:ac:2c:23:90:78:4a:9f:24:43:ba:ed: b2:c2:e0:0c:cd:80:0a:aa:e5:1b:54:ef:2d:79:f4:fd:2e:64: 13:4a:5b:a6:ec:c6:5d:de:d7:dd:f6:af:fa:3f:ed:c5:57:75: 0b:3f:bf:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjYwNzI2MTk1NTU0WhcNMjYwODAyMTk1NTU0WjAYMRYwFAYD VQQDEw02YTY2NjY0Yi1mNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue/tTD8Pnqk9u+KhpHscpyNkOgHZSNO64wFQdjiXCldr6q1DOa0RPcudfd8Y rFFOsrZBebBddnn/CSyUj5k6IBaN1F5LQvcVnmJAnXp6G22BapFK2xzvZSb/FOih 0UDCy5FCdREBhRkIQa98FOqp/Yg6ePO1e5zMAxanfCkeablEK0sHC7vUlk4jAVP2 0TKJxa3xb6kr69T9CroHgboiN+QWGFbbDWVoTECir45wX7sLntzdF6QNyinAA6pu 7w+fLhjJazYct5hnaCw4ze2pcwI8b+uW1p5P2o6MB8KtLk571V/wLFi/Vtg8IjIE JaDVVcqXj99ZErXiB0ho0J05xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRqyU2I h9fsbq6xCkIf0YBqXowaMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADiJqX8FHMMajbfH7U30nvz3ft1orRb29aCQJp1uGhwikLEdDuJTlmDd0AtQ5 rbxYOY18oGRXp5WC3bSxpuifBKcpJ4HZOLdWIG86p67Q3Y8wwP5D9IA5BIeTZFHv hZ67yfLXIgOFSPm+Yu3hp3Iv4jcbZ7z9e15lL7Rq+uWF8eP/nVw1ABzF1lVnagHc OvxkyoJs+1f/y9LdmBKenBPvvLXtgzCfkJ8gjixR1BnOMlvAUb5ZsRiY2EWn6+bh yPkDujGQFwgP+Z3z21qTM6wsI5B4Sp8kQ7rtssLgDM2ACqrlG1TvLXn0/S5kE0pb puzGXd7X3fav+j/txVd1Cz+/pg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:54 2026 by rpki-client