$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: Aj3tPWoaTQ2vtNGz207sDZvnMufxBxCJm7la7Vm4THE= Subject key identifier: 30:E5:09:DA:11:9B:25:08:B0:2D:25:23:49:E1:61:58:8C:96:09:C9 Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0BD7 Signing time: Tue 28 Jul 2026 19:23:45 +0000 Manifest this update: Tue 28 Jul 2026 19:23:44 +0000 Manifest next update: Tue 04 Aug 2026 19:23:44 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: qXi1ZO8iKhCQ9H4BjikYzjpj2IJgSMTpUt226p4iIMM=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Jul 28 19:23:44 2026 GMT Not After : Aug 4 19:23:44 2026 GMT Subject: CN=6a6901c0-5e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:c6:67:e7:a3:97:63:23:1c:71:3e:3e:f4: 65:85:09:a4:19:2d:ed:64:38:df:a4:c8:8a:02:0d: ad:46:d9:1b:86:ca:77:af:f1:44:4b:68:21:37:b2: b3:ef:d9:7c:5b:14:39:07:9b:a4:52:40:50:61:e5: f7:87:1f:cd:81:22:9c:d3:ce:b7:09:ae:4c:28:c3: 25:6c:10:2c:09:fa:0a:72:92:e3:55:1f:e5:7d:8e: fb:10:80:b7:de:e5:a6:2a:dd:03:96:30:a9:5d:c9: 7e:f1:32:bc:e1:33:77:1f:33:4c:29:fe:d6:e1:cc: 79:6c:27:db:89:e3:bb:2f:99:05:6e:47:60:89:2a: 30:c1:aa:13:62:9f:e2:db:fb:74:5b:6e:8a:9f:30: 8b:fd:b4:1d:6e:80:76:05:25:f9:05:8d:ca:8c:71: e4:75:0e:55:c1:34:6d:fc:f5:1f:dc:ce:fc:15:30: d0:71:51:c6:27:de:fc:17:62:ff:2c:a6:59:f1:02: 6c:01:ac:a5:0a:5d:ea:13:19:70:65:76:4a:12:35: 7c:75:e9:95:cc:e5:d5:4c:05:e3:50:38:ca:04:5e: bc:42:9e:ec:40:2f:b9:f0:72:a2:89:94:3c:ab:86: 82:27:a0:19:99:9d:90:fd:3f:d1:35:b7:75:af:28: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E5:09:DA:11:9B:25:08:B0:2D:25:23:49:E1:61:58:8C:96:09:C9 X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:85:1d:0a:73:a1:4c:54:6a:59:b1:a9:cb:92:66:0b:c6:4f: 6e:a0:7b:c4:9b:e1:ef:d3:a2:18:e6:70:d5:f6:78:b6:c5:95: 02:31:39:38:dd:af:3a:fe:d5:b6:bd:65:53:58:60:98:99:bd: e5:17:51:a5:36:78:36:78:07:95:2b:c9:c5:53:9c:86:8d:91: 3b:72:a5:81:0f:ea:8c:9c:5f:3c:1e:0c:f8:86:62:d8:22:ef: 36:4f:2c:26:07:61:4a:00:e3:a5:74:f2:06:51:ed:f3:7d:6a: c1:a8:9d:fd:9e:30:3a:8e:db:88:65:43:4b:7b:01:89:42:c0: 73:ed:91:13:41:44:1a:03:a0:55:4f:54:b4:f9:90:e7:b1:5b: 8d:c3:17:0c:ad:ec:05:71:2c:4e:99:f5:f6:09:8c:ce:10:a0: 54:2d:17:d9:05:4e:87:a3:cc:88:89:97:63:f3:65:d9:0d:3e: 5e:44:37:df:1e:b3:d9:2b:23:e6:af:cd:4e:70:95:25:49:58: 7d:b7:d5:de:ca:26:b1:ea:40:f2:ad:78:dc:ce:d5:e2:62:5b: d1:1c:f4:0b:9a:ea:86:76:77:6a:bf:2e:b4:da:95:b4:52:26: 2d:fc:19:91:18:e8:35:a9:05:22:38:7f:7a:a0:6a:f0:2f:70: e7:5c:46:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYwNzI4MTkyMzQ0WhcNMjYwODA0MTkyMzQ0WjAYMRYwFAYD VQQDEw02YTY5MDFjMC01ZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QbGZ+ejl2MjHHE+PvRlhQmkGS3tZDjfpMiKAg2tRtkbhsp3r/FES2ghN7Kz 79l8WxQ5B5ukUkBQYeX3hx/NgSKc0863Ca5MKMMlbBAsCfoKcpLjVR/lfY77EIC3 3uWmKt0DljCpXcl+8TK84TN3HzNMKf7W4cx5bCfbieO7L5kFbkdgiSowwaoTYp/i 2/t0W26KnzCL/bQdboB2BSX5BY3KjHHkdQ5VwTRt/PUf3M78FTDQcVHGJ978F2L/ LKZZ8QJsAaylCl3qExlwZXZKEjV8demVzOXVTAXjUDjKBF68Qp7sQC+58HKiiZQ8 q4aCJ6AZmZ2Q/T/RNbd1ryi4lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDlCdoR myUIsC0lI0nhYViMlgnJMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQYUdCnOhTFRqWbGpy5JmC8ZPbqB7xJvh79OiGOZw1fZ4tsWVAjE5ON2vOv7V tr1lU1hgmJm95RdRpTZ4NngHlSvJxVOcho2RO3KlgQ/qjJxfPB4M+IZi2CLvNk8s JgdhSgDjpXTyBlHt831qwaid/Z4wOo7biGVDS3sBiULAc+2RE0FEGgOgVU9UtPmQ 57FbjcMXDK3sBXEsTpn19gmMzhCgVC0X2QVOh6PMiImXY/Nl2Q0+XkQ33x6z2Ssj 5q/NTnCVJUlYfbfV3somsepA8q143M7V4mJb0Rz0C5rqhnZ3ar8utNqVtFImLfwZ kRjoNakFIjh/eqBq8C9w51xGwQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:02:49 2026 by rpki-client