$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: DECTlsJVvx3LWatCJ7wig0ytNGXlCUAxqoItTagppK8= Subject key identifier: 90:E9:27:AF:90:67:7F:21:DC:5C:51:4F:D4:99:E2:E8:9C:FF:16:7E Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: F1 Signing time: Sun 01 Mar 2026 07:36:01 +0000 Manifest this update: Sun 01 Mar 2026 07:36:00 +0000 Manifest next update: Sun 08 Mar 2026 07:36:00 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: dn5aba9EgS/GU0P2T2HcRfxGloqhIGQ2bCNMzBBYmUY=) 2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) 3: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 4: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Mar 1 07:36:00 2026 GMT Not After : Mar 8 07:36:00 2026 GMT Subject: CN=69a3ec61-ba56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:a6:73:31:8a:67:ba:32:37:5d:ac:39:76: 9f:ec:d3:52:9b:a1:d7:a0:88:71:3b:05:54:03:f2: e9:d6:82:33:9e:4a:42:ba:b6:f5:ea:66:c8:16:83: 3d:a4:17:b4:3f:5c:cb:95:b2:c3:2d:a0:3b:bc:e0: 08:1b:4d:45:65:24:9d:4f:d5:cf:a5:b8:81:ae:be: 99:96:31:82:85:94:bb:7d:d9:ce:66:c9:a3:82:71: f8:73:53:b6:c0:f3:31:c6:52:45:aa:cd:11:27:5e: dc:bc:bf:89:21:ab:cd:95:ba:cc:72:a4:1e:c2:3c: 05:a8:3e:5f:34:5a:c8:f8:f5:32:35:14:74:ad:f4: c7:32:76:14:47:2a:0c:03:df:35:3b:bb:32:c1:e5: e7:61:4f:80:02:76:06:3b:bd:ab:a6:68:b3:22:1c: e9:27:07:52:af:a1:17:5a:04:f1:c6:71:08:a0:f4: 34:3e:d3:fe:aa:66:ea:68:e4:55:8d:1f:2f:6d:ad: 18:a5:ed:80:1e:3c:1d:22:40:76:67:e7:d3:ec:36: 84:84:11:e2:a3:c6:1e:c6:de:50:09:6a:84:3c:d7: cb:49:92:7b:b4:d7:56:85:f5:fc:68:49:d0:8e:8d: dd:08:8c:32:36:1d:25:a6:e6:c9:e2:d1:7d:fb:33: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:27:AF:90:67:7F:21:DC:5C:51:4F:D4:99:E2:E8:9C:FF:16:7E X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:1c:a7:ad:fc:85:7f:a1:a2:8f:8d:16:0a:70:72:2a:08: f3:a6:32:71:c8:c0:74:c8:f6:b8:d6:45:fc:3e:4d:02:81:d2: 39:ac:e2:ff:91:73:2c:7f:82:d1:70:2d:47:c3:5c:f5:ec:e7: f1:09:52:f5:56:f0:dc:08:fc:db:8a:11:0f:69:4a:97:15:ec: 05:13:7d:12:21:e9:34:c0:d5:12:22:9f:dc:c1:21:94:a0:58: 34:42:e5:2c:a3:ed:89:5e:d3:0c:99:ce:6a:e8:ee:b1:e1:18: a2:26:b4:2f:3f:3d:70:cb:bd:46:14:b0:b7:f3:58:9d:08:08: a3:5a:3e:34:d0:51:d5:70:db:71:f2:75:9c:42:93:3d:f7:3d: 24:f1:17:96:3d:50:6a:f1:76:1a:26:fe:62:92:2f:b7:fe:41: ed:5d:76:a2:5b:0d:fd:73:54:77:b2:3f:31:6f:a6:29:59:dd: d7:18:d0:f4:df:51:5c:4a:c3:f7:52:06:66:3f:9a:b0:e0:7e: 9d:32:2e:ba:e4:38:c8:a7:35:83:59:58:79:b6:19:8e:11:f2: 0f:e4:7f:e8:04:e1:7c:be:00:fc:c9:ef:ad:8a:96:cf:7b:a7: 11:dc:fe:d0:45:47:87:e7:40:cb:59:78:0b:d9:0e:83:13:02: a4:1f:ad:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjYwMzAxMDczNjAwWhcNMjYwMzA4MDczNjAwWjAYMRYwFAYD VQQDEw02OWEzZWM2MS1iYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy62mczGKZ7oyN12sOXaf7NNSm6HXoIhxOwVUA/Lp1oIznkpCurb16mbIFoM9 pBe0P1zLlbLDLaA7vOAIG01FZSSdT9XPpbiBrr6ZljGChZS7fdnOZsmjgnH4c1O2 wPMxxlJFqs0RJ17cvL+JIavNlbrMcqQewjwFqD5fNFrI+PUyNRR0rfTHMnYURyoM A981O7syweXnYU+AAnYGO72rpmizIhzpJwdSr6EXWgTxxnEIoPQ0PtP+qmbqaORV jR8vba0Ype2AHjwdIkB2Z+fT7DaEhBHio8Yext5QCWqEPNfLSZJ7tNdWhfX8aEnQ jo3dCIwyNh0lpubJ4tF9+zNtWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDpJ6+Q Z38h3FxRT9SZ4uic/xZ+MB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQgcp638hX+hoo+NFgpwcioI86YyccjAdMj2uNZF/D5NAoHSOazi/5FzLH+C 0XAtR8Nc9ezn8QlS9Vbw3Aj824oRD2lKlxXsBRN9EiHpNMDVEiKf3MEhlKBYNELl LKPtiV7TDJnOaujuseEYoia0Lz89cMu9RhSwt/NYnQgIo1o+NNBR1XDbcfJ1nEKT Pfc9JPEXlj1QavF2Gib+YpIvt/5B7V12olsN/XNUd7I/MW+mKVnd1xjQ9N9RXErD 91IGZj+asOB+nTIuuuQ4yKc1g1lYebYZjhHyD+R/6AThfL4A/MnvrYqWz3unEdz+ 0EVHh+dAy1l4C9kOgxMCpB+t8g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:51 2026 by rpki-client