$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: GL0GaZ1lEXj47Fz1IsdP8hacRVPEMg6t62zxlPwMs/0= Subject key identifier: 22:9F:5B:1F:04:28:56:8E:95:60:79:24:FB:45:6C:80:B8:89:B7:17 Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0C0A Signing time: Wed 04 Nov 2026 19:13:23 +0000 Manifest this update: Wed 04 Nov 2026 19:13:23 +0000 Manifest next update: Wed 11 Nov 2026 19:13:23 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: wA5owjTThtu0TJd5KIs+OlpxWzhBxLMEUqAuUpOtM8o=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 19:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Nov 4 19:13:23 2026 GMT Not After : Nov 11 19:13:23 2026 GMT Subject: CN=6aeb83d3-3252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:0d:fc:b8:3c:ff:5f:0b:f8:b2:69:20:52: 34:f1:64:38:dc:a1:31:4a:f8:9d:62:79:f5:38:dc: a3:cb:60:ef:0b:d7:c9:7f:77:61:a1:5e:9c:95:b4: 0e:0c:7e:3e:e1:c4:6b:f1:0a:b3:4b:18:b7:6c:26: ac:50:51:99:1f:9e:c6:d2:dc:be:cd:35:90:02:36: c7:be:4f:3b:a0:1d:0d:20:4f:9c:5e:af:a3:2e:84: ca:0b:00:51:d1:e3:6c:3c:e1:86:59:84:72:bf:bd: 1d:6f:18:77:0d:b1:fb:e2:60:08:a0:03:42:04:61: f9:30:ca:46:4c:46:58:30:53:7e:b1:65:54:ff:39: 48:6a:85:8f:ff:0c:a0:6b:72:61:65:1f:cc:dd:68: 20:2b:7c:a1:e4:be:57:79:13:ae:a1:83:20:53:b3: a3:16:4a:d2:16:60:1b:d8:7b:64:7d:c6:a4:08:1b: 03:a2:13:e6:a0:a8:f3:ff:ad:71:96:f1:d2:71:2a: 53:14:6d:bd:13:0c:1e:f6:5b:1a:16:2a:1b:a8:29: 54:7e:a6:de:a3:43:f3:e6:d2:49:fd:01:50:e3:8d: eb:83:76:f7:45:f7:02:ea:64:50:86:da:48:84:97: 9a:4a:a2:d0:dd:25:eb:5f:2a:f9:d1:81:04:0a:37: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:5B:1F:04:28:56:8E:95:60:79:24:FB:45:6C:80:B8:89:B7:17 X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:12:f7:08:6c:a9:48:8f:b6:1f:d3:52:86:00:37:de:19:e6: 29:d9:47:20:69:aa:61:e4:82:97:40:52:3e:da:2f:fb:81:7a: 75:7c:54:82:f2:71:41:6d:8a:be:97:c7:36:65:b4:57:c0:b5: ab:1b:1e:27:a5:ac:fd:8c:0b:dd:79:6f:ae:10:87:26:36:54: fc:86:e1:c8:3b:15:2b:f5:48:6e:43:26:00:be:78:cb:a3:3f: d3:fa:1a:52:7c:00:29:f9:a7:7c:3b:82:e0:f5:d6:38:27:b2: 5f:d8:63:2a:1f:03:38:db:63:19:43:20:7c:0f:0f:aa:37:e8: ff:b6:cf:f0:47:6e:b6:ed:96:a6:2d:95:ba:86:26:89:c0:3c: 43:72:c1:b9:e9:7b:d6:90:2d:c7:f1:30:0a:04:8d:85:47:77: f4:0f:0c:f6:0f:8d:88:a2:7f:d7:49:0a:a8:f5:f1:a4:24:cc: 9a:48:fb:ea:60:a2:02:d3:02:5e:f6:d1:03:18:e4:b2:15:fd: 88:d5:c7:89:ed:35:79:11:39:15:93:91:fb:29:fe:5d:30:1c: f4:5f:9b:9e:20:d2:ca:8f:d4:ab:df:1b:c1:3d:c6:d0:6e:52: fd:41:83:5b:1c:25:fa:4c:92:9d:72:b2:06:8b:9f:60:09:79: ce:53:d5:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYxMTA0MTkxMzIzWhcNMjYxMTExMTkxMzIzWjAYMRYwFAYD VQQDEw02YWViODNkMy0zMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAwN/Lg8/18L+LJpIFI08WQ43KExSvidYnn1ONyjy2DvC9fJf3dhoV6clbQO DH4+4cRr8QqzSxi3bCasUFGZH57G0ty+zTWQAjbHvk87oB0NIE+cXq+jLoTKCwBR 0eNsPOGGWYRyv70dbxh3DbH74mAIoANCBGH5MMpGTEZYMFN+sWVU/zlIaoWP/wyg a3JhZR/M3WggK3yh5L5XeROuoYMgU7OjFkrSFmAb2HtkfcakCBsDohPmoKjz/61x lvHScSpTFG29Ewwe9lsaFiobqClUfqbeo0Pz5tJJ/QFQ443rg3b3RfcC6mRQhtpI hJeaSqLQ3SXrXyr50YEECje8EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKfWx8E KFaOlWB5JPtFbIC4ibcXMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxL3CGypSI+2H9NShgA33hnmKdlHIGmqYeSCl0BSPtov+4F6dXxUgvJxQW2K vpfHNmW0V8C1qxseJ6Ws/YwL3XlvrhCHJjZU/IbhyDsVK/VIbkMmAL54y6M/0/oa UnwAKfmnfDuC4PXWOCeyX9hjKh8DONtjGUMgfA8Pqjfo/7bP8Edutu2Wpi2VuoYm icA8Q3LBuel71pAtx/EwCgSNhUd39A8M9g+NiKJ/10kKqPXxpCTMmkj76mCiAtMC XvbRAxjkshX9iNXHie01eRE5FZOR+yn+XTAc9F+bniDSyo/Uq98bwT3G0G5S/UGD Wxwl+kySnXKyBoufYAl5zlPVOw== -----END CERTIFICATE-----Generated at Thu Nov 5 14:25:14 2026 by rpki-client