$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: AZpbv3U4y+pmeIjhueAWUyI8g/e7w5i9eqFUcYhxi8Q= Subject key identifier: D9:6C:85:00:8F:9E:F4:A5:A0:5D:70:C7:E8:B3:28:6B:39:10:F4:EE Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 01BB Signing time: Sun 01 Mar 2026 04:47:25 +0000 Manifest this update: Sun 01 Mar 2026 04:47:24 +0000 Manifest next update: Sun 08 Mar 2026 04:47:24 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: OkCvmZV/F/1vqY1ScicU8zpNIQQUMeoIccF6HahAatA=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: z19Lw1ifKHATlQNFXKCGQM6zcrtQMC9QNy8RwHAudr0=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: yNwCoBcUmJkx0Dg6C0NAAjwW8Tj0R/YRWYCllrG7iU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Mar 1 04:47:24 2026 GMT Not After : Mar 8 04:47:24 2026 GMT Subject: CN=69a3c4dc-13d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:99:aa:93:11:b4:12:bb:34:1c:42:b2:74: 4d:82:24:98:2a:9a:b5:04:ac:cd:c6:25:96:ff:e8: 91:13:87:21:34:28:0f:59:75:2a:5a:bd:c7:7c:cc: f1:a0:09:f8:a7:c0:6b:a6:7c:2e:82:79:32:34:5f: 51:d6:56:65:09:e0:00:1c:67:3a:d5:80:85:44:f4: 55:07:c8:f1:8c:4a:ac:4b:2f:8a:2c:3c:09:98:d6: c8:d3:d1:8d:d4:94:37:fa:0e:40:49:63:0a:02:ab: 3b:72:57:4a:0b:5c:9f:da:9a:d5:bc:c6:07:b4:1f: bf:89:04:a5:be:f3:28:a4:b3:83:b5:03:4e:92:ec: 5c:78:82:68:ae:f1:a6:5b:95:f5:0c:23:be:ee:4b: a9:fd:e9:b8:c1:6b:27:61:38:c6:fa:f8:34:6b:7f: 37:f1:c1:f1:ee:98:f5:0d:ba:1a:b4:4e:8d:64:22: ea:57:bf:2f:0b:58:65:62:bc:e3:46:ca:b8:b3:a1: c8:c8:77:cf:02:11:6b:67:1c:cb:79:ee:73:c0:e6: 87:e7:b0:7d:57:bd:bf:f4:07:2c:02:42:c3:17:9c: e3:3e:37:34:2f:97:9f:4c:0f:b5:12:3b:cf:10:82: d3:47:4a:75:8a:72:74:ad:bf:75:50:80:08:e7:33: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:85:00:8F:9E:F4:A5:A0:5D:70:C7:E8:B3:28:6B:39:10:F4:EE X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5a:77:cb:15:05:5f:53:01:e5:40:89:e9:1f:5c:78:5a:2f: 8d:0a:0d:00:6b:6c:e0:a9:66:c8:bb:aa:4e:3c:17:c1:bc:71: fc:7c:04:6b:6f:bf:ca:e4:61:b6:ea:61:1d:f2:e8:9d:9b:b6: aa:3e:08:39:6e:52:bb:31:29:f0:b1:a7:f7:d4:fa:67:dc:fd: 32:e5:6d:f5:78:e3:43:73:92:96:12:94:5b:cc:42:65:f1:96: d3:49:9e:81:f3:ea:a8:1c:63:6b:ec:88:9d:1d:bf:6d:fb:ac: 68:97:15:6b:56:6c:ed:5e:3e:a1:f6:bc:59:55:b4:4e:8d:c6: ac:cb:15:e5:18:67:28:8a:62:4f:42:f8:d4:9b:9e:6b:8a:cc: cd:db:bb:f5:9d:19:62:7c:63:bf:ce:3a:f9:c5:cb:e7:b4:c9: dd:e6:2f:dd:60:a4:8f:29:4f:34:a2:c8:59:5b:04:6e:81:38: 46:45:48:f7:29:96:2c:2d:65:be:29:cb:e0:bc:fb:44:00:d1: d6:6f:06:0f:f2:6e:15:81:ad:8a:90:27:01:36:8b:ca:ad:49: cd:9d:5d:57:a9:21:5f:02:be:82:38:8a:0d:72:54:a6:71:55: e7:81:4b:82:43:f7:d1:51:0f:18:c4:f6:d4:74:ad:9d:6d:11: fa:bf:73:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYwMzAxMDQ0NzI0WhcNMjYwMzA4MDQ0NzI0WjAYMRYwFAYD VQQDDA02OWEzYzRkYy0xM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroiZqpMRtBK7NBxCsnRNgiSYKpq1BKzNxiWW/+iRE4chNCgPWXUqWr3HfMzx oAn4p8BrpnwugnkyNF9R1lZlCeAAHGc61YCFRPRVB8jxjEqsSy+KLDwJmNbI09GN 1JQ3+g5ASWMKAqs7cldKC1yf2prVvMYHtB+/iQSlvvMopLODtQNOkuxceIJorvGm W5X1DCO+7kup/em4wWsnYTjG+vg0a3838cHx7pj1DboatE6NZCLqV78vC1hlYrzj Rsq4s6HIyHfPAhFrZxzLee5zwOaH57B9V72/9AcsAkLDF5zjPjc0L5efTA+1EjvP EILTR0p1inJ0rb91UIAI5zNc9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlshQCP nvSloF1wx+izKGs5EPTuMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVp3yxUFX1MB5UCJ6R9ceFovjQoNAGts4KlmyLuqTjwXwbxx/HwEa2+/yuRh tuphHfLonZu2qj4IOW5SuzEp8LGn99T6Z9z9MuVt9XjjQ3OSlhKUW8xCZfGW00me gfPqqBxja+yInR2/bfusaJcVa1Zs7V4+ofa8WVW0To3GrMsV5RhnKIpiT0L41Jue a4rMzdu79Z0ZYnxjv846+cXL57TJ3eYv3WCkjylPNKLIWVsEboE4RkVI9ymWLC1l vinL4Lz7RADR1m8GD/JuFYGtipAnATaLyq1JzZ1dV6khXwK+gjiKDXJUpnFV54FL gkP30VEPGMT21HStnW0R+r9zXw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:01 2026 by rpki-client