$ rpki-client -vvf rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft File: HzX0DDZLiLCJrhL97baBXD8RqQY.mft (raw, json) Hash identifier: i2GKUzDHIVO5anX4fY9XM+eAMCDbWWCtn6UXW8HNBHU= Subject key identifier: D4:CE:C3:FB:A8:4A:19:E8:32:CA:02:FD:11:F4:A9:21:07:53:A2:18 Authority key identifier: 1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 Certificate issuer: /CN=A91924F8/serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft Manifest number: 03 Signing time: Thu 11 Jun 2026 11:35:00 +0000 Manifest this update: Thu 11 Jun 2026 11:35:00 +0000 Manifest next update: Thu 18 Jun 2026 11:35:00 +0000 Files and hashes: 1: HzX0DDZLiLCJrhL97baBXD8RqQY.crl (hash: aXeYNuXWYAZY5OmaeRQ5lCBOfqN5bFAEwDow4qJtJsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91924F8, serialNumber=1F35F40C364B88B089AE12FDEDB6815C3F11A906 Validity Not Before: Jun 11 11:35:00 2026 GMT Not After : Jun 18 11:35:00 2026 GMT Subject: CN=6a2a9d64-0668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:b4:7b:19:94:c4:a9:b1:95:63:63:c8:c2: a9:1f:e2:80:d6:c6:d9:9a:cf:17:0a:db:c9:df:4e: df:ad:49:0d:2e:47:2a:93:87:a6:bb:8d:72:79:78: 21:3e:c0:64:50:ab:25:ad:f2:c3:c5:8e:0c:17:7d: 54:01:30:b9:06:9e:34:6f:f2:26:82:0c:af:7f:ca: 11:a8:67:d0:1a:38:99:32:d8:b2:99:75:2a:75:2c: d3:1a:75:9d:23:81:77:4c:6f:51:8f:67:97:8b:e4: d8:97:ad:07:36:81:7f:e8:e2:df:8a:1e:2b:c2:20: dc:9a:24:22:54:a4:26:52:6a:14:d7:6a:7d:08:18: e2:db:ed:04:b7:bd:31:73:78:4c:bf:55:6d:d0:ca: 21:c5:70:c7:1b:77:bb:e6:fc:bd:f7:fc:da:97:b2: 52:0b:fa:be:c4:93:51:72:bc:39:2a:fb:bb:6c:5c: bb:d7:25:64:23:d5:02:8d:ba:24:fa:ae:d4:4e:60: b4:66:91:fb:15:62:05:e7:d4:83:24:6f:d8:aa:51: d0:1d:ee:c4:b1:ba:aa:76:0d:da:b3:04:9c:ce:10: 9b:4d:ee:14:07:2b:3a:05:33:68:69:f1:85:b7:10: ac:d4:c1:f5:57:89:7d:b3:dd:15:ae:a3:28:6c:ff: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:C3:FB:A8:4A:19:E8:32:CA:02:FD:11:F4:A9:21:07:53:A2:18 X509v3 Authority Key Identifier: keyid:1F:35:F4:0C:36:4B:88:B0:89:AE:12:FD:ED:B6:81:5C:3F:11:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HzX0DDZLiLCJrhL97baBXD8RqQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/71FD1338641111F18113D0D69B47A888/HzX0DDZLiLCJrhL97baBXD8RqQY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:dc:79:35:20:8e:f5:50:5b:ad:a8:2c:2b:0a:bb:45:b3:76: ec:11:a6:35:48:4f:cc:9e:20:ba:70:b5:6b:fd:8e:2e:ce:1d: f5:d1:2b:13:fb:22:b8:da:a8:3d:ba:3d:a2:29:92:52:b5:9b: e6:89:5f:d7:2e:e9:4d:f3:e0:91:59:07:6e:71:23:11:5d:94: 66:44:26:b5:bd:1c:6d:e9:37:f8:f4:ee:a6:fe:43:ec:10:65: 00:b7:67:35:3c:ce:36:e7:c4:87:d2:34:62:c5:78:1f:08:0e: 6d:84:33:b6:fb:10:eb:3d:e0:d4:d6:57:95:22:5a:73:4b:ad: 6d:96:27:91:62:bd:91:34:45:ca:ab:3a:9e:15:0f:03:86:e5: 6a:73:c3:0c:81:cf:17:76:5e:eb:85:00:f3:ce:7f:93:d5:c9: 94:cf:a2:83:0a:e2:65:c8:e3:bf:37:4b:a5:e9:e5:7e:87:ef: 84:ca:e5:ec:8e:48:ce:dc:7c:a2:0e:0d:f2:99:d0:e7:f8:a2: 2e:7a:5b:0f:ef:11:f6:37:46:d4:e2:a3:2d:ef:59:69:e6:66: bb:dc:6a:06:78:a8:0c:aa:09:64:c0:35:89:eb:bd:ed:a1:4f: ca:fd:d6:7a:e7:79:e4:46:45:be:3c:16:cd:9e:2b:21:87:ad: 10:51:4d:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjRGODExMC8GA1UEBRMoMUYzNUY0MEMzNjRCODhCMDg5QUUxMkZERURCNjgxNUMz RjExQTkwNjAeFw0yNjA2MTExMTM1MDBaFw0yNjA2MTgxMTM1MDBaMBgxFjAUBgNV BAMTDTZhMmE5ZDY0LTA2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZa7R7GZTEqbGVY2PIwqkf4oDWxtmazxcK28nfTt+tSQ0uRyqTh6a7jXJ5eCE+ wGRQqyWt8sPFjgwXfVQBMLkGnjRv8iaCDK9/yhGoZ9AaOJky2LKZdSp1LNMadZ0j gXdMb1GPZ5eL5NiXrQc2gX/o4t+KHivCINyaJCJUpCZSahTXan0IGOLb7QS3vTFz eEy/VW3QyiHFcMcbd7vm/L33/NqXslIL+r7Ek1FyvDkq+7tsXLvXJWQj1QKNuiT6 rtROYLRmkfsVYgXn1IMkb9iqUdAd7sSxuqp2DdqzBJzOEJtN7hQHKzoFM2hp8YW3 EKzUwfVXiX2z3RWuoyhs/xj3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1M7D+6hK GegyygL9EfSpIQdTohgwHwYDVR0jBBgwFoAUHzX0DDZLiLCJrhL97baBXD8RqQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNEY4LzcxRkQxMzM4NjQx MTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxDSnJoTDk3YmFCWEQ4UnFR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHpYMEREWkxpTENKcmhMOTdiYUJYRDhScVFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NEY4LzcxRkQxMzM4NjQxMTExRjE4MTEzRDBENjlCNDdBODg4L0h6WDBERFpMaUxD SnJoTDk3YmFCWEQ4UnFRWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBE3Hk1II71UFutqCwrCrtFs3bsEaY1SE/MniC6cLVr/Y4uzh310SsT+yK42qg9 uj2iKZJStZvmiV/XLulN8+CRWQducSMRXZRmRCa1vRxt6Tf49O6m/kPsEGUAt2c1 PM4258SH0jRixXgfCA5thDO2+xDrPeDU1leVIlpzS61tlieRYr2RNEXKqzqeFQ8D huVqc8MMgc8Xdl7rhQDzzn+T1cmUz6KDCuJlyOO/N0ul6eV+h++EyuXsjkjO3Hyi Dg3ymdDn+KIuelsP7xH2N0bU4qMt71lp5ma73GoGeKgMqglkwDWJ673toU/K/dZ6 53nkRkW+PBbNnishh60QUU1w -----END CERTIFICATE-----Generated at Sat Jun 13 09:08:02 2026 by rpki-client