$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: JfVm/Wb7BMgQiM2J2rBGm2CmHioqA5srCT9DcVfBYQs= Subject key identifier: 7E:4C:07:AB:92:F5:B4:30:AB:E6:33:B3:F0:FF:79:6F:C1:97:10:6E Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 1A16 Signing time: Tue 28 Jul 2026 16:26:41 +0000 Manifest this update: Tue 28 Jul 2026 16:26:40 +0000 Manifest next update: Tue 04 Aug 2026 16:26:40 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: 5Pha8q4z3x42qdO4VuK9ogbgUyxXWsiuwrmUKH6MyjU=) 2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=) 3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6704 (0x1a30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Jul 28 16:26:40 2026 GMT Not After : Aug 4 16:26:40 2026 GMT Subject: CN=6a68d841-daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:a2:c9:9f:ff:92:c8:87:5a:64:7a:e4:0d: ee:2a:57:ba:b5:15:a8:0c:8c:2d:ac:30:41:5d:02: b9:43:0e:57:43:00:64:a3:f8:03:dc:88:04:0e:85: 77:90:8a:49:18:b2:9c:d5:6b:cc:5f:fc:2a:98:44: 36:94:0f:d5:1c:39:f0:c6:c6:3d:fc:13:50:df:e3: 55:9c:c8:6c:0a:25:45:da:3c:f1:09:dc:3b:f6:93: 6b:22:2d:81:2f:9b:4c:f3:45:e2:7a:d6:b3:f4:26: 17:b3:b4:79:19:cf:42:0a:3b:a8:6e:60:61:d9:79: 3c:ec:96:2f:4d:34:ab:3b:20:af:12:ba:3b:ab:a5: b8:ca:46:d5:46:20:2e:28:37:07:98:3d:79:bc:a8: 2d:5f:2c:64:3d:17:c7:19:98:40:17:17:69:c9:38: bc:a5:87:1b:f6:69:a0:5a:7b:e8:7f:c8:46:f9:92: 79:75:cf:28:9d:23:12:f5:4d:37:31:a8:19:55:23: e9:23:f5:4a:9b:30:28:03:c0:85:b3:02:90:12:b9: da:56:0c:c7:6e:bd:f2:a0:1b:ac:4c:5d:0e:a6:dc: 3c:24:b5:a0:c0:57:49:58:ad:c9:87:60:f0:b6:c6: 29:12:5e:ea:bc:53:da:09:f1:7b:e7:92:5b:df:40: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4C:07:AB:92:F5:B4:30:AB:E6:33:B3:F0:FF:79:6F:C1:97:10:6E X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:45:09:21:34:ae:3e:9a:97:66:e2:a8:69:af:74:67:91:36: 03:15:4e:5b:c0:13:c5:08:33:8d:3f:8a:2b:c0:c0:84:f1:09: ee:01:fc:0a:27:ee:8a:9e:00:d5:96:9a:a5:9a:89:15:72:56: d0:67:df:69:c0:4e:30:f5:fc:da:65:e8:c5:3e:06:2d:7e:58: 09:18:37:33:b0:b5:66:ed:9e:3b:7d:2d:e9:aa:15:38:ed:c3: 60:00:83:89:e6:0c:07:ec:26:c9:69:ef:83:6b:6f:13:3b:05: ee:f0:b8:43:9b:8c:f7:82:d9:8e:66:89:7c:98:df:b7:03:8b: f9:98:6a:a4:56:ed:37:e0:17:17:85:eb:dc:a0:55:48:1e:07: 54:5c:f0:73:44:c4:50:9d:f7:4d:73:00:fb:50:35:20:b0:ca: 0a:d0:f4:28:9a:de:56:9e:61:5f:52:96:f2:a3:7f:9f:b8:ec: b7:88:5d:52:a0:c1:5b:31:fc:e6:65:d6:50:7e:c2:c4:0a:20: 80:fc:c8:4e:93:02:b4:f6:63:89:96:60:5b:c8:5b:56:17:f4: 73:98:73:e9:b0:6f:21:6e:b5:51:d0:41:9d:8a:08:6c:e9:a6: f5:94:e8:9b:f7:a3:f8:f7:5d:f5:58:11:51:92:5b:fe:ff:dd: c9:05:3a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjYwNzI4MTYyNjQwWhcNMjYwODA0MTYyNjQwWjAYMRYwFAYD VQQDEw02YTY4ZDg0MS1kYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9iiyZ//ksiHWmR65A3uKle6tRWoDIwtrDBBXQK5Qw5XQwBko/gD3IgEDoV3 kIpJGLKc1WvMX/wqmEQ2lA/VHDnwxsY9/BNQ3+NVnMhsCiVF2jzxCdw79pNrIi2B L5tM80Xietaz9CYXs7R5Gc9CCjuobmBh2Xk87JYvTTSrOyCvEro7q6W4ykbVRiAu KDcHmD15vKgtXyxkPRfHGZhAFxdpyTi8pYcb9mmgWnvof8hG+ZJ5dc8onSMS9U03 MagZVSPpI/VKmzAoA8CFswKQErnaVgzHbr3yoBusTF0Optw8JLWgwFdJWK3Jh2Dw tsYpEl7qvFPaCfF755Jb30DDmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5MB6uS 9bQwq+Yzs/D/eW/BlxBuMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtUUJITSuPpqXZuKoaa90Z5E2AxVOW8ATxQgzjT+KK8DAhPEJ7gH8Cifuip4A 1ZaapZqJFXJW0GffacBOMPX82mXoxT4GLX5YCRg3M7C1Zu2eO30t6aoVOO3DYACD ieYMB+wmyWnvg2tvEzsF7vC4Q5uM94LZjmaJfJjftwOL+ZhqpFbtN+AXF4Xr3KBV SB4HVFzwc0TEUJ33TXMA+1A1ILDKCtD0KJreVp5hX1KW8qN/n7jst4hdUqDBWzH8 5mXWUH7CxAoggPzITpMCtPZjiZZgW8hbVhf0c5hz6bBvIW61UdBBnYoIbOmm9ZTo m/ej+Pdd9VgRUZJb/v/dyQU6Ug== -----END CERTIFICATE-----Generated at Tue Jul 28 23:19:01 2026 by rpki-client