$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: aXXuDQJVg4ZZnW8XwufIWbVYx7ztwsXldfzowcFL/D8= Subject key identifier: 59:57:C5:4E:A9:9C:C2:06:10:A0:CD:FE:68:38:3B:85:0B:1E:A1:4C Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 01D6 Signing time: Fri 17 Apr 2026 03:28:54 +0000 Manifest this update: Fri 17 Apr 2026 03:28:53 +0000 Manifest next update: Fri 24 Apr 2026 03:28:53 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: tRdFlqRTZdMefBU3q7gHuinVQfmoYAobwFiE1v722Lw=) 2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) 3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Apr 17 03:28:53 2026 GMT Not After : Apr 24 03:28:53 2026 GMT Subject: CN=69e1a8f6-4119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:ea:ec:84:53:9e:83:6a:47:ff:b1:b4:a4: a5:68:b8:5c:01:b9:c9:72:5a:31:25:7e:e2:42:2e: 6a:d4:80:4d:9d:11:07:21:c6:80:a2:a6:a5:b6:84: 93:bd:78:36:1a:16:63:f9:8d:f7:dd:e2:5e:f7:ad: 02:6e:35:23:c8:2b:ba:16:9e:ea:c9:c5:0f:76:a7: 71:07:93:09:54:20:88:0e:be:2a:7a:73:fd:1e:f9: 0c:fb:71:53:bc:d5:7f:a2:6c:01:22:64:95:5c:90: 02:1c:06:2f:23:7b:5a:ce:14:35:b6:1a:cb:26:7a: f9:44:ef:80:0f:e6:89:fe:78:c4:d5:9b:66:c9:9a: 8d:5c:c8:12:46:61:68:9d:73:c5:ce:0d:78:e8:c1: dc:58:7f:62:0b:a4:0c:29:87:eb:0e:2e:be:13:d8: 3a:f2:86:97:1e:37:f4:ac:50:62:52:43:3a:84:82: 9f:ff:23:a8:dd:ee:86:45:d6:bf:e7:bc:a9:96:cd: 42:dc:c0:86:36:5d:95:25:ae:96:97:32:38:77:4f: c2:6a:e5:06:ed:78:64:1d:f4:21:64:bf:b8:96:a6: e7:c9:d1:c9:a9:09:6a:96:14:48:3b:3a:f6:0b:6b: 7a:0b:33:b9:22:06:c9:d0:d7:a8:1d:22:3e:91:23: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:C5:4E:A9:9C:C2:06:10:A0:CD:FE:68:38:3B:85:0B:1E:A1:4C X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:95:16:52:f7:86:40:f4:21:3d:55:24:75:51:bf:10:58:9e: 19:d5:e8:9d:05:09:cf:a6:26:28:39:27:82:99:c5:c8:be:d4: e6:a1:fd:eb:b7:75:74:cc:fe:0f:b0:c9:71:52:e1:62:d6:15: 3c:97:26:ea:90:65:c8:aa:8c:55:1e:3a:7b:a4:82:c3:06:d5: db:a1:0a:4f:dd:7d:ad:8b:8d:34:2d:29:8c:e3:34:66:ee:ce: 3c:5b:28:21:18:62:ad:1f:d8:7d:97:a2:52:04:a4:6b:9d:46: 9c:89:3b:25:4d:a6:c5:29:c8:2f:f1:64:01:22:92:ab:11:ed: 44:67:c2:7e:db:f0:80:69:7e:a0:3d:7d:c2:cd:67:54:cc:b3: ce:44:75:40:09:40:a0:0d:3f:1c:97:1d:aa:6a:46:e0:17:fc: 77:00:4d:68:2d:18:93:fd:c0:bc:4f:f9:0a:00:5e:39:a2:0d: 1b:55:6e:58:e1:8d:45:20:56:21:c3:73:a7:8c:12:6a:2a:a6: a4:a1:9a:87:fe:e0:97:d9:20:02:07:f4:d0:ce:dc:7e:e0:56: 6b:0e:f8:21:95:b3:8d:11:e6:9a:14:7c:a3:4e:f0:d9:75:7b: ab:d5:de:81:5b:b6:d3:92:e0:1c:78:4a:e4:71:10:83:a9:6c: c1:8a:4d:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwNDE3MDMyODUzWhcNMjYwNDI0MDMyODUzWjAYMRYwFAYD VQQDEw02OWUxYThmNi00MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiUnq7IRTnoNqR/+xtKSlaLhcAbnJcloxJX7iQi5q1IBNnREHIcaAoqaltoST vXg2GhZj+Y333eJe960CbjUjyCu6Fp7qycUPdqdxB5MJVCCIDr4qenP9HvkM+3FT vNV/omwBImSVXJACHAYvI3tazhQ1thrLJnr5RO+AD+aJ/njE1ZtmyZqNXMgSRmFo nXPFzg146MHcWH9iC6QMKYfrDi6+E9g68oaXHjf0rFBiUkM6hIKf/yOo3e6GRda/ 57ypls1C3MCGNl2VJa6WlzI4d0/CauUG7XhkHfQhZL+4lqbnydHJqQlqlhRIOzr2 C2t6CzO5IgbJ0NeoHSI+kSNI8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlXxU6p nMIGEKDN/mg4O4ULHqFMMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkZUWUveGQPQhPVUkdVG/EFieGdXonQUJz6YmKDkngpnFyL7U5qH967d1dMz+ D7DJcVLhYtYVPJcm6pBlyKqMVR46e6SCwwbV26EKT919rYuNNC0pjOM0Zu7OPFso IRhirR/YfZeiUgSka51GnIk7JU2mxSnIL/FkASKSqxHtRGfCftvwgGl+oD19ws1n VMyzzkR1QAlAoA0/HJcdqmpG4Bf8dwBNaC0Yk/3AvE/5CgBeOaING1VuWOGNRSBW IcNzp4wSaiqmpKGah/7gl9kgAgf00M7cfuBWaw74IZWzjRHmmhR8o07w2XV7q9Xe gVu205LgHHhK5HEQg6lswYpNZA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:38 2026 by rpki-client