$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: 7NySp9h1oPVLN3JpWdVMBsQiOC0ld0G5XTfF38PGNq8= Subject key identifier: B0:0A:A5:B2:96:1E:7C:76:B6:97:86:C2:A4:5E:59:1D:AD:D2:C6:EC Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 0422 Signing time: Sat 13 Jun 2026 00:24:23 +0000 Manifest this update: Sat 13 Jun 2026 00:24:23 +0000 Manifest next update: Sat 20 Jun 2026 00:24:23 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: WzSeoWYY4OnbGt4Pj7+maZa1D7d50ZH2GrLGD3jLUE4=) 2: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=) 3: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 74u63+bcbtzbnwhLBuZvwYUeCNjr3rxkxpotr9+jKD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 00:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Jun 13 00:24:23 2026 GMT Not After : Jun 20 00:24:23 2026 GMT Subject: CN=6a2ca337-bac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:5a:2c:c6:ae:7b:57:69:b6:15:13:a2:19: 17:d3:90:c3:7b:91:a0:34:26:79:fe:fb:7c:72:f2: 34:48:c3:07:9c:96:55:f1:8b:19:a3:24:c0:60:bb: b3:0e:b8:59:ed:f0:8a:ba:53:3f:47:cb:b1:5e:24: 17:c0:02:18:49:d4:4e:d7:c4:6a:64:37:ee:b2:9a: e8:06:a2:83:d7:c2:f0:76:9e:b8:ca:f9:a6:20:61: d7:84:c6:d3:bb:10:b1:10:ed:8f:13:03:41:7f:62: 2f:c4:b6:0f:8a:88:05:c4:67:e2:3c:6f:72:59:d3: 8f:03:0f:b6:65:18:74:8d:0f:30:65:9e:b4:04:5c: d2:f5:0a:52:c8:5a:58:fa:fb:84:1b:2f:11:b4:13: 82:0f:cb:ab:60:15:11:2d:db:a7:75:a9:13:ba:8b: 52:d7:51:5b:67:2e:9f:ed:dd:12:44:10:d2:3b:6e: fc:f2:43:a3:85:f9:66:91:a4:5b:0b:53:7b:a0:f3: 6f:68:3d:7f:5d:81:f8:2a:b0:86:c5:a8:40:09:c2: 84:21:28:9a:52:fb:91:81:39:74:27:c5:28:75:f0: 19:d3:00:f4:98:8b:98:27:21:91:fe:74:d5:37:b9: e2:30:bc:5a:d5:33:54:2d:ba:22:94:b9:c5:2a:a2: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0A:A5:B2:96:1E:7C:76:B6:97:86:C2:A4:5E:59:1D:AD:D2:C6:EC X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:26:c1:50:ef:63:cf:0b:1a:9a:fb:fa:76:0d:ba:14:04: d0:90:7d:90:e6:0f:13:31:94:28:db:f2:a4:5b:cc:ae:e2:0d: fd:3c:d1:7a:a1:f5:fb:7e:c4:d3:2c:bf:67:e8:8a:76:7b:8f: f5:aa:05:1a:be:05:2a:83:df:78:80:c0:eb:d2:c6:40:68:91: 4a:0c:e5:2d:6a:c7:2f:a9:c1:1b:52:19:c1:99:27:7f:0c:a9: de:b2:2d:40:9b:68:21:7a:15:83:e2:5a:a2:ea:30:bd:73:50: a2:a7:e5:1a:49:ca:22:56:b4:6e:f9:91:80:b8:06:13:ab:ec: 70:84:db:d0:29:f7:85:27:62:24:c2:36:a2:ab:3f:5d:2a:d7: c5:6c:3c:94:35:59:83:b2:46:c7:14:a0:af:aa:64:82:bb:52: 34:e2:43:bc:f0:9c:ba:0f:ae:65:45:74:e4:48:9f:13:5d:e2: ec:f2:1d:bf:46:a2:19:7f:64:93:41:fc:b8:75:fe:e7:14:d9: 53:dc:19:a8:b7:fb:eb:51:45:87:4e:09:f9:16:71:0e:72:26: 0f:fa:b9:86:f9:50:b1:d1:db:fd:6b:13:b4:40:cd:76:33:b1: 4b:b3:2f:4e:cf:fb:9e:3c:10:29:d1:5f:c8:63:b9:de:bb:85: b9:f5:36:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjYwNjEzMDAyNDIzWhcNMjYwNjIwMDAyNDIzWjAYMRYwFAYD VQQDEw02YTJjYTMzNy1iYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w9aLMaue1dpthUTohkX05DDe5GgNCZ5/vt8cvI0SMMHnJZV8YsZoyTAYLuz DrhZ7fCKulM/R8uxXiQXwAIYSdRO18RqZDfusproBqKD18Lwdp64yvmmIGHXhMbT uxCxEO2PEwNBf2IvxLYPiogFxGfiPG9yWdOPAw+2ZRh0jQ8wZZ60BFzS9QpSyFpY +vuEGy8RtBOCD8urYBURLdundakTuotS11FbZy6f7d0SRBDSO2788kOjhflmkaRb C1N7oPNvaD1/XYH4KrCGxahACcKEISiaUvuRgTl0J8UodfAZ0wD0mIuYJyGR/nTV N7niMLxa1TNULboilLnFKqI3yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAKpbKW Hnx2tpeGwqReWR2t0sbsMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZEmwVDvY88LGpr7+nYNuhQE0JB9kOYPEzGUKNvypFvMruIN/TzReqH1+37E 0yy/Z+iKdnuP9aoFGr4FKoPfeIDA69LGQGiRSgzlLWrHL6nBG1IZwZknfwyp3rIt QJtoIXoVg+JaouowvXNQoqflGknKIla0bvmRgLgGE6vscITb0Cn3hSdiJMI2oqs/ XSrXxWw8lDVZg7JGxxSgr6pkgrtSNOJDvPCcug+uZUV05EifE13i7PIdv0aiGX9k k0H8uHX+5xTZU9wZqLf761FFh04J+RZxDnImD/q5hvlQsdHb/WsTtEDNdjOxS7Mv Ts/7njwQKdFfyGO53ruFufU2sQ== -----END CERTIFICATE-----Generated at Sun Jun 14 03:15:15 2026 by rpki-client