$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: pZVgZ9+IWEZk/Klbs1uJr9vsfzegnYskRPw7/fXQpMo= Subject key identifier: 67:D7:ED:5A:BF:F6:84:CC:9C:0F:2E:E9:41:1D:10:F4:18:8C:2E:64 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 0268 Signing time: Sun 01 Mar 2026 03:29:07 +0000 Manifest this update: Sun 01 Mar 2026 03:29:06 +0000 Manifest next update: Sun 08 Mar 2026 03:29:06 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: QHi+JFrLbe/MQEY84OfdurbZCuZIsvHF58n8kwY7AMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Mar 1 03:29:06 2026 GMT Not After : Mar 8 03:29:06 2026 GMT Subject: CN=69a3b283-3e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:cb:07:e1:ad:f5:2c:71:d5:63:a4:a6:7e: 16:43:15:5f:d3:db:34:9e:d6:02:65:00:39:e8:41: 61:c2:94:17:e2:8b:d3:9c:ad:7e:9b:0f:4c:f1:b0: 79:05:6a:28:d8:26:96:ff:b1:96:77:51:22:0d:3c: 92:64:38:19:79:40:9a:7e:65:5f:e2:b1:49:7f:63: df:d9:a9:e4:e6:bf:09:a4:13:eb:88:10:67:5f:21: 9d:64:30:9f:a9:b4:04:81:51:de:0e:99:bc:7c:cd: 8c:eb:8b:19:43:0a:5d:b1:16:56:61:cb:13:c6:ba: e7:75:54:68:4e:92:d1:df:48:5e:73:ab:13:2d:ae: 57:5f:eb:d6:40:8f:33:6a:dd:60:86:dd:73:03:a2: f5:5a:98:fa:61:e6:71:6d:85:7a:98:15:49:aa:b5: 17:57:14:f3:8f:91:71:ce:39:f6:9b:72:94:2d:1f: 08:ce:04:e8:95:6e:43:a6:b1:e8:69:91:3c:c5:a7: 38:e5:4b:b0:cc:0c:1d:b7:12:39:dc:dd:39:2a:6b: b3:98:25:ef:3a:cb:43:e2:ba:4c:27:55:90:12:4e: 79:ce:86:3e:54:8f:03:ce:9e:33:24:3d:a4:06:34: 66:36:31:36:75:f8:eb:6d:36:ff:0b:6d:a4:bd:d1: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D7:ED:5A:BF:F6:84:CC:9C:0F:2E:E9:41:1D:10:F4:18:8C:2E:64 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f8:5f:7e:e3:89:d7:2c:f3:f5:ff:7c:26:d4:13:69:05:35: ce:23:de:e8:c4:ca:ff:0c:96:e2:ed:ab:9c:b1:3b:1f:5d:6e: 87:9c:eb:90:61:1c:13:db:4a:39:5d:bd:92:5c:c5:5e:3b:24: 73:ef:07:c9:8d:50:2b:4f:ce:cc:3a:2f:23:cd:46:dd:b5:28: 08:a4:d8:db:16:f4:a9:d4:ce:6d:a6:9e:9c:f4:fe:62:ff:40: 35:f8:04:1c:87:83:28:ee:cd:c4:3f:04:2d:85:ce:8b:d0:2e: a1:60:15:8c:b5:d0:8d:eb:42:90:b9:a8:c3:b1:70:b5:55:af: a5:cd:0e:6b:d2:f5:a5:ba:fc:a4:26:a0:9a:20:84:73:c5:93: 73:83:f7:de:e4:27:65:34:c1:5c:21:d7:4a:d6:25:e4:79:56: 95:70:50:1e:c5:7b:45:67:ac:6e:e2:42:66:40:ee:b1:41:3b: b8:fc:bd:cc:7c:d9:63:91:ae:ac:ba:e7:03:7c:9d:62:78:df: df:54:4e:c5:5b:e3:dc:b8:ec:61:83:1b:f6:83:62:d0:0a:75: 02:38:76:fe:03:2e:41:36:37:0c:8f:30:d0:05:46:64:68:9c: 06:14:e6:67:fe:e8:c7:77:e0:ac:86:75:d0:37:81:89:f1:8c: c5:63:3b:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjYwMzAxMDMyOTA2WhcNMjYwMzA4MDMyOTA2WjAYMRYwFAYD VQQDDA02OWEzYjI4My0zZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj3LB+Gt9Sxx1WOkpn4WQxVf09s0ntYCZQA56EFhwpQX4ovTnK1+mw9M8bB5 BWoo2CaW/7GWd1EiDTySZDgZeUCafmVf4rFJf2Pf2ank5r8JpBPriBBnXyGdZDCf qbQEgVHeDpm8fM2M64sZQwpdsRZWYcsTxrrndVRoTpLR30hec6sTLa5XX+vWQI8z at1ght1zA6L1Wpj6YeZxbYV6mBVJqrUXVxTzj5Fxzjn2m3KULR8IzgTolW5DprHo aZE8xac45UuwzAwdtxI53N05KmuzmCXvOstD4rpMJ1WQEk55zoY+VI8Dzp4zJD2k BjRmNjE2dfjrbTb/C22kvdGEzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfX7Vq/ 9oTMnA8u6UEdEPQYjC5kMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIvhffuOJ1yzz9f98JtQTaQU1ziPe6MTK/wyW4u2rnLE7H11uh5zrkGEcE9tK OV29klzFXjskc+8HyY1QK0/OzDovI81G3bUoCKTY2xb0qdTObaaenPT+Yv9ANfgE HIeDKO7NxD8ELYXOi9AuoWAVjLXQjetCkLmow7FwtVWvpc0Oa9L1pbr8pCagmiCE c8WTc4P33uQnZTTBXCHXStYl5HlWlXBQHsV7RWesbuJCZkDusUE7uPy9zHzZY5Gu rLrnA3ydYnjf31ROxVvj3LjsYYMb9oNi0Ap1Ajh2/gMuQTY3DI8w0AVGZGicBhTm Z/7ox3fgrIZ10DeBifGMxWM7RQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:03 2026 by rpki-client