$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft File: HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft (raw, json) Hash identifier: xyMHo5LECvbb0/sEyugyqh2aiW+ZW95yG4AAATtjUeE= Subject key identifier: BD:7F:3D:F1:F1:E5:23:E3:50:0E:69:F7:C1:17:8F:E1:8F:49:EC:3D Authority key identifier: 1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03 Certificate issuer: /CN=A915FB34/serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft Manifest number: 14 Signing time: Mon 21 Sep 2026 09:01:01 +0000 Manifest this update: Mon 21 Sep 2026 09:01:01 +0000 Manifest next update: Mon 28 Sep 2026 09:01:01 +0000 Files and hashes: 1: HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl (hash: 5QpWGZQvzHaRjCjZZ2geyjdEx4zblwnxMqE8MrAo96g=) 2: E5D570A699A011F191D9C4ED6E11F970.roa (hash: 8Y+XAwfwrJgI3QCe0larDwfJRotuGixvON+EExk7AV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB34, serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903 Validity Not Before: Sep 21 09:01:01 2026 GMT Not After : Sep 28 09:01:01 2026 GMT Subject: CN=6ab0f24d-d286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:98:a3:0f:b3:95:4d:42:3f:eb:20:ec:46: ee:9d:0a:70:87:5c:cf:30:44:4e:42:75:3e:fe:a3: 83:f3:5c:11:1d:1f:d7:db:61:d2:66:20:c8:28:fb: c1:da:3f:99:60:1b:ea:84:5d:cb:bc:ee:bd:6e:39: b1:1e:f6:f2:df:96:b8:0e:68:45:dd:57:fe:7a:d6: 0f:e6:ea:7d:35:de:c1:02:ab:bf:54:66:3a:5e:fb: 74:71:83:18:98:1c:3c:2b:c5:15:b1:1c:fe:0f:bb: 8a:ac:39:08:4a:6a:bf:2d:ef:86:f2:86:a7:d4:aa: 70:f9:a9:c2:bb:3c:03:ac:0a:51:ad:43:9c:46:00: 59:e2:82:b3:bd:4d:13:78:fe:41:68:f0:0c:51:03: 6b:d4:18:48:f2:a4:fd:22:8a:38:69:a4:4b:c7:cc: 7d:c1:e5:44:d3:3b:00:31:79:4a:19:4c:1d:5f:c8: d7:8e:ee:9f:16:69:b4:75:f7:95:4d:43:6a:d2:82: a1:d9:ac:b7:ef:ac:12:01:1f:96:6c:78:68:46:12: e6:c4:6d:cb:b2:22:23:db:9b:d1:17:bf:bf:58:16: 75:e4:40:1a:bd:e5:37:f6:c0:b4:e6:9a:af:92:2f: a5:dc:6a:de:bf:8b:b9:48:79:d9:35:97:40:8a:0e: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:3D:F1:F1:E5:23:E3:50:0E:69:F7:C1:17:8F:E1:8F:49:EC:3D X509v3 Authority Key Identifier: keyid:1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a5:97:e4:09:47:da:f2:00:9d:26:9f:2b:dd:0f:19:07:25: af:78:22:88:78:7e:23:7a:aa:d4:86:68:a2:fb:37:70:58:1b: cc:d9:7a:fc:07:99:21:9d:fd:d6:32:41:46:77:8e:d3:4c:3e: f6:1f:1b:36:18:f4:08:e8:df:30:72:cb:d9:75:69:74:54:dd: 28:06:ac:22:3f:40:17:2b:7c:86:f7:fc:4c:c4:09:05:97:69: a7:a2:39:73:fa:56:3a:b8:c5:47:fd:f4:75:5d:fe:19:24:ce: 20:c1:9d:bc:ce:c1:9d:a6:ed:c2:eb:72:f3:23:b7:9f:a0:27: ac:d9:2f:32:fb:37:d8:d8:7f:cf:e1:a1:47:7c:1d:cd:2a:16: 21:95:b4:e9:09:0e:ef:41:28:47:08:65:6a:a4:f1:81:7d:30: ce:b3:45:dc:79:e0:b8:14:78:a7:1b:c8:ca:2f:1c:72:82:6f: 50:cc:e4:fe:4d:68:5d:d4:cb:08:50:cf:21:c1:87:35:b3:8d: 64:3b:c3:22:df:a4:aa:44:aa:c3:33:f6:5e:70:aa:d2:08:5a: e2:59:bf:a3:ce:53:4b:b8:6a:01:e9:64:01:2b:3a:cb:56:ad: 96:b3:a6:e2:fb:c7:e9:53:62:60:3d:bc:2a:f0:89:ad:ba:36: e5:b8:f9:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkIzNDExMC8GA1UEBRMoMUQ5MkUzNjNGOUE5QkIyNERFNzg1NjQ3MUVFODQxRjFE QzhEQzkwMzAeFw0yNjA5MjEwOTAxMDFaFw0yNjA5MjgwOTAxMDFaMBgxFjAUBgNV BAMTDTZhYjBmMjRkLWQyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCCzZijD7OVTUI/6yDsRu6dCnCHXM8wRE5CdT7+o4PzXBEdH9fbYdJmIMgo+8Ha P5lgG+qEXcu87r1uObEe9vLflrgOaEXdV/561g/m6n013sECq79UZjpe+3RxgxiY HDwrxRWxHP4Pu4qsOQhKar8t74byhqfUqnD5qcK7PAOsClGtQ5xGAFnigrO9TRN4 /kFo8AxRA2vUGEjypP0iijhppEvHzH3B5UTTOwAxeUoZTB1fyNeO7p8WabR195VN Q2rSgqHZrLfvrBIBH5ZseGhGEubEbcuyIiPbm9EXv79YFnXkQBq95Tf2wLTmmq+S L6Xcat6/i7lIedk1l0CKDv+LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvX898fHl I+NQDmn3wReP4Y9J7D0wHwYDVR0jBBgwFoAUHZLjY/mpuyTeeFZHHuhB8dyNyQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQjM0LzNEQkQxODEwOTlB MDExRjFBNEVDRDJBRDZEMTFGOTcwL0haTGpZX21wdXlUZWVGWkhIdWhCOGR5TnlR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFpMallfbXB1eVRlZUZaSEh1aEI4ZHlOeVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QjM0LzNEQkQxODEwOTlBMDExRjFBNEVDRDJBRDZEMTFGOTcwL0haTGpZX21wdXlU ZWVGWkhIdWhCOGR5TnlRTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCpZfkCUfa8gCdJp8r3Q8ZByWveCKIeH4jeqrUhmii+zdwWBvM2Xr8B5khnf3W MkFGd47TTD72Hxs2GPQI6N8wcsvZdWl0VN0oBqwiP0AXK3yG9/xMxAkFl2mnojlz +lY6uMVH/fR1Xf4ZJM4gwZ28zsGdpu3C63LzI7efoCes2S8y+zfY2H/P4aFHfB3N KhYhlbTpCQ7vQShHCGVqpPGBfTDOs0XceeC4FHinG8jKLxxygm9QzOT+TWhd1MsI UM8hwYc1s41kO8Mi36SqRKrDM/ZecKrSCFriWb+jzlNLuGoB6WQBKzrLVq2Ws6bi +8fpU2JgPbwq8ImtujbluPl5 -----END CERTIFICATE-----Generated at Tue Sep 22 19:22:03 2026 by rpki-client