$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: Q0jv+qze8sh2VBcuRlgdYwgSPpdRpSVzMzTsmiaNJps= Subject key identifier: 0E:76:9C:F9:34:05:5E:F1:EC:8E:45:A6:9D:D6:D8:FD:BA:67:7A:15 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 023B Signing time: Sat 13 Jun 2026 02:41:06 +0000 Manifest this update: Sat 13 Jun 2026 02:41:06 +0000 Manifest next update: Sat 20 Jun 2026 02:41:06 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: QvWAGhvz9uS+TlP64OMgVG6lpmQ5pnEaQLdAHRcr9Kc=) 2: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) 3: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) 4: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Jun 13 02:41:06 2026 GMT Not After : Jun 20 02:41:06 2026 GMT Subject: CN=6a2cc342-6e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:1a:89:4c:19:64:18:9a:1b:55:bc:be:95: 85:d8:84:4e:66:e6:94:b6:19:9e:f3:9a:a7:f5:25: e6:d3:19:f2:3e:9d:20:b0:39:72:ed:8b:82:11:9e: 90:5f:c4:f8:a0:e9:51:17:4a:52:13:eb:29:d1:2c: b0:80:af:7e:00:ea:16:b1:00:60:c7:3f:0d:b3:77: 4b:5d:89:c1:d5:33:4f:4c:d4:b6:ed:ad:29:fe:9e: 58:3a:9e:9e:49:8d:7f:e8:00:34:a6:b5:ed:82:5e: a4:4f:f5:2c:1b:0d:ea:75:b5:c5:0f:35:1a:47:ca: f0:42:2a:cc:14:51:3d:d1:8f:a9:3c:54:fd:8d:b4: 08:d8:05:11:c5:9b:30:88:c5:81:76:fe:a9:25:11: 4b:52:96:c5:fc:57:d8:88:fd:9a:55:5a:37:0e:fb: 6a:29:8d:fa:78:a2:dc:71:16:f1:f0:f0:1b:0d:92: 64:5a:4a:6a:0b:21:50:2c:de:fb:1d:ed:2e:fc:38: ae:06:e8:51:1d:4e:fc:3d:b5:53:5b:31:50:3b:16: a3:bd:3e:4e:4d:5d:90:99:bc:15:17:47:9b:1b:86: 09:11:0d:9a:19:14:28:ef:db:d4:4a:fb:47:25:4d: a8:56:c3:83:bf:a1:f5:ee:11:ba:6e:72:7b:a7:80: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:76:9C:F9:34:05:5E:F1:EC:8E:45:A6:9D:D6:D8:FD:BA:67:7A:15 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:09:b7:3d:1a:e2:56:c7:82:09:27:85:b3:6b:54:3b:44:b8: 92:c0:ed:41:b1:b0:ef:e1:27:e5:6e:03:12:69:9c:25:27:4e: 5e:c1:d7:b8:09:d1:1a:51:d6:a2:f0:8d:7a:40:1a:7b:31:9a: 7f:8f:83:1a:8b:fd:32:71:fe:a4:12:5d:ad:b0:66:19:df:67: a9:76:e4:35:9c:95:df:47:9d:31:5c:66:7d:8c:c8:09:c8:ca: 6c:1a:12:73:fa:7e:18:2a:29:02:c9:2b:50:82:16:d2:73:a1: 6d:d5:d5:c1:39:09:3f:83:31:0c:ca:e8:ff:88:cd:af:03:0a: a5:bb:22:5a:e8:bf:bd:a2:93:98:86:04:b7:70:55:ad:73:e1: 1e:c1:24:94:60:77:ed:42:66:38:3f:5a:7e:ad:cc:25:10:c9: 09:4f:4c:95:d1:49:85:ae:e7:30:12:8a:46:a7:af:a7:47:5e: e1:69:26:7b:e7:34:1a:e6:6e:17:f5:a1:24:fc:09:18:4d:82: 9d:bd:74:e4:7d:35:90:eb:2a:86:cb:ca:51:22:8b:d1:2e:3d: 66:00:68:f2:c4:fc:b4:f5:a1:81:e4:8e:a1:5b:7f:be:d1:15: d1:b5:90:15:d8:c5:f1:17:52:6b:5a:24:27:89:03:78:d2:4d: df:06:39:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNjEzMDI0MTA2WhcNMjYwNjIwMDI0MTA2WjAYMRYwFAYD VQQDEw02YTJjYzM0Mi02ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjvcaiUwZZBiaG1W8vpWF2IROZuaUthme85qn9SXm0xnyPp0gsDly7YuCEZ6Q X8T4oOlRF0pSE+sp0SywgK9+AOoWsQBgxz8Ns3dLXYnB1TNPTNS27a0p/p5YOp6e SY1/6AA0prXtgl6kT/UsGw3qdbXFDzUaR8rwQirMFFE90Y+pPFT9jbQI2AURxZsw iMWBdv6pJRFLUpbF/FfYiP2aVVo3DvtqKY36eKLccRbx8PAbDZJkWkpqCyFQLN77 He0u/DiuBuhRHU78PbVTWzFQOxajvT5OTV2QmbwVF0ebG4YJEQ2aGRQo79vUSvtH JU2oVsODv6H17hG6bnJ7p4DyBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA52nPk0 BV7x7I5Fpp3W2P26Z3oVMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwwm3PRriVseCCSeFs2tUO0S4ksDtQbGw7+En5W4DEmmcJSdOXsHXuAnRGlHW ovCNekAaezGaf4+DGov9MnH+pBJdrbBmGd9nqXbkNZyV30edMVxmfYzICcjKbBoS c/p+GCopAskrUIIW0nOhbdXVwTkJP4MxDMro/4jNrwMKpbsiWui/vaKTmIYEt3BV rXPhHsEklGB37UJmOD9afq3MJRDJCU9MldFJha7nMBKKRqevp0de4Wkme+c0GuZu F/WhJPwJGE2Cnb105H01kOsqhsvKUSKL0S49ZgBo8sT8tPWhgeSOoVt/vtEV0bWQ FdjF8RdSa1okJ4kDeNJN3wY5EA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:37:56 2026 by rpki-client