$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft File: HKNtz8PAQzP4g7g18sjd0CXVQQY.mft (raw, json) Hash identifier: SqFO7W/MzWvnfZLmsXqUhibXXvxGfWoyKSMWcZ/OClI= Subject key identifier: D6:B8:F8:35:5B:A7:56:A1:7A:CA:D6:3F:BB:39:46:36:2A:62:17:E0 Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft Manifest number: CD Signing time: Mon 27 Jul 2026 09:04:54 +0000 Manifest this update: Mon 27 Jul 2026 09:04:54 +0000 Manifest next update: Mon 03 Aug 2026 09:04:54 +0000 Files and hashes: 1: HKNtz8PAQzP4g7g18sjd0CXVQQY.crl (hash: 6vhZTK5Ubr9MY9f3EZww4FnY3EwruwFiD79pqHyEIyM=) 2: 3A63E0587B3811F1B145FA7A90A30FBC.roa (hash: D6CqpvXjHKtJoDkgVXf1XqX7i1a7t5xANjRIRt/3rMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Validity Not Before: Jul 27 09:04:54 2026 GMT Not After : Aug 3 09:04:54 2026 GMT Subject: CN=6a671f36-7917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:b5:37:31:37:eb:45:9b:5b:ee:e7:1b:d8: 55:4c:fc:48:aa:8d:90:e4:b4:bc:2d:08:51:e1:6a: 7a:86:7d:4e:65:dd:61:8b:6c:6a:fc:36:a8:a9:2d: 5d:58:f8:fc:ea:ee:cd:c5:e5:07:15:e0:a3:b7:ab: dc:2d:a2:a1:c6:58:40:73:39:fe:c1:fe:38:34:3c: 20:12:53:84:de:d5:d7:fe:dc:e0:fe:2b:59:7f:29: 20:7d:57:46:b8:19:37:71:a6:7f:40:e9:bb:e0:36: 03:61:96:ae:41:e8:25:57:cd:93:53:73:76:59:9b: bd:99:04:c2:14:2e:51:a4:06:c5:44:4e:d8:b3:a3: 1e:06:3c:b6:da:75:eb:94:2f:f6:18:18:50:30:33: ea:3f:1e:33:83:22:61:7f:db:f0:89:14:b0:fd:f4: ee:f4:db:31:90:09:5f:63:36:bb:a6:21:e4:8e:f5: 79:9f:2b:d2:e6:35:d6:a8:5f:e1:1f:96:5d:2b:6e: 0c:81:21:ed:6d:f3:f9:5c:9f:d3:24:f0:df:e0:68: b6:ff:14:f9:c1:aa:b8:5f:c0:16:93:86:d2:e1:b8: 0e:2e:ca:d5:f6:b3:76:8c:47:3d:e0:a8:e7:d6:76: 7d:3a:ac:6b:d4:d7:af:79:0d:0d:1b:4f:7b:85:a1: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B8:F8:35:5B:A7:56:A1:7A:CA:D6:3F:BB:39:46:36:2A:62:17:E0 X509v3 Authority Key Identifier: keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:08:29:06:26:93:fc:dc:fe:ef:18:90:fa:2e:a0:be:65:5b: 68:08:f9:bf:c4:df:ac:77:56:55:f6:f5:59:ad:39:ff:97:c7: 2a:25:30:63:83:71:cf:e8:76:15:be:de:e0:3e:9a:7b:16:a8: 6f:dc:68:8e:f2:f1:43:1d:e6:ef:34:1c:fc:35:89:78:5a:a6: 4a:f6:b2:66:41:16:15:8d:ab:ab:a0:91:1b:df:7b:fc:5e:17: ae:9c:88:e7:13:5a:ac:0e:6b:df:59:25:54:38:77:14:e3:8a: 43:3a:05:7a:dc:df:b5:fc:af:a9:c6:e6:ee:9a:e3:f0:e1:30: 72:32:13:5d:3a:d7:5b:d3:7b:6a:2a:04:29:b1:c9:1c:fa:71: 65:a9:c6:8d:8c:0e:da:4e:04:03:38:f4:64:14:cd:54:6e:b7: 4c:83:91:53:da:f2:4a:ef:c1:62:fa:11:77:da:d7:e7:f2:e7: ec:41:95:1b:dc:c1:a4:40:f3:09:66:33:12:a6:ea:df:91:fa: 72:b6:bf:19:dc:e0:88:d2:20:36:68:ad:76:a0:38:43:c7:02: 28:94:ed:85:d7:a6:66:f6:61:0a:7c:fc:d7:b7:4e:bb:2a:c1: 5f:ba:90:6b:71:83:71:e3:2c:b6:e5:22:33:2e:30:7e:4c:58: 54:08:c0:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJGNTkxMTAvBgNVBAUTKDFDQTM2RENGQzNDMDQzMzNGODgzQjgzNUYyQzhEREQw MjVENTQxMDYwHhcNMjYwNzI3MDkwNDU0WhcNMjYwODAzMDkwNDU0WjAYMRYwFAYD VQQDEw02YTY3MWYzNi03OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthy1NzE360WbW+7nG9hVTPxIqo2Q5LS8LQhR4Wp6hn1OZd1hi2xq/DaoqS1d WPj86u7NxeUHFeCjt6vcLaKhxlhAczn+wf44NDwgElOE3tXX/tzg/itZfykgfVdG uBk3caZ/QOm74DYDYZauQeglV82TU3N2WZu9mQTCFC5RpAbFRE7Ys6MeBjy22nXr lC/2GBhQMDPqPx4zgyJhf9vwiRSw/fTu9NsxkAlfYza7piHkjvV5nyvS5jXWqF/h H5ZdK24MgSHtbfP5XJ/TJPDf4Gi2/xT5waq4X8AWk4bS4bgOLsrV9rN2jEc94Kjn 1nZ9Oqxr1NeveQ0NG097haFdpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNa4+DVb p1ahesrWP7s5RjYqYhfgMB8GA1UdIwQYMBaAFByjbc/DwEMz+IO4NfLI3dAl1UEG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkY1OS8wNTI2RDYyRTYy MzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6UDRnN2cxOHNqZDBDWFZR UVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hLTnR6OFBBUXpQNGc3ZzE4c2pkMENYVlFRWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkY1OS8wNTI2RDYyRTYyMzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6 UDRnN2cxOHNqZDBDWFZRUVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArwgpBiaT/Nz+7xiQ+i6gvmVbaAj5v8TfrHdWVfb1Wa05/5fHKiUwY4Nxz+h2 Fb7e4D6aexaob9xojvLxQx3m7zQc/DWJeFqmSvayZkEWFY2rq6CRG997/F4XrpyI 5xNarA5r31klVDh3FOOKQzoFetzftfyvqcbm7prj8OEwcjITXTrXW9N7aioEKbHJ HPpxZanGjYwO2k4EAzj0ZBTNVG63TIORU9rySu/BYvoRd9rX5/Ln7EGVG9zBpEDz CWYzEqbq35H6cra/GdzgiNIgNmitdqA4Q8cCKJTthdemZvZhCnz817dOuyrBX7qQ a3GDceMstuUiMy4wfkxYVAjADw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:15:05 2026 by rpki-client