$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: ftof7yXCNzOPLPKY48dJvlKpYM/4xp/bcHsM3TxEds8= Subject key identifier: 4F:46:68:D3:73:24:63:7C:E8:72:FA:81:AB:B9:66:45:1B:7B:A7:54 Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: 010C Signing time: Sat 13 Jun 2026 06:07:09 +0000 Manifest this update: Sat 13 Jun 2026 06:07:09 +0000 Manifest next update: Sat 20 Jun 2026 06:07:09 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: C7xkQelSYrK50I6vDDuWTiY74HVFMYJnqSFadLPRlSM=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: BF86bk5wE6Zr1m3LZ6kF7qlbs43Gmk6OeQj3ok60wVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Jun 13 06:07:09 2026 GMT Not After : Jun 20 06:07:09 2026 GMT Subject: CN=6a2cf38d-2d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:50:ed:53:e5:6b:ae:5f:f2:99:7a:af:23: 30:3c:36:81:78:b1:e9:ea:80:50:eb:79:94:b8:c1: 99:5c:f8:74:2b:12:fd:33:11:55:f2:a4:f0:78:ea: fb:d2:70:31:bb:c1:d3:33:40:30:77:26:dd:e6:09: 22:9e:84:04:22:b4:72:69:5e:09:a7:78:ba:fd:b2: 55:0c:c3:c1:bb:90:12:43:99:46:a2:a9:cb:1b:e7: ce:76:24:7b:65:f1:a2:c7:1d:db:e4:d4:b3:3c:15: 32:9d:3c:c8:9a:e8:f7:97:77:43:3f:2e:55:51:cb: 36:f0:10:4e:ab:08:64:5e:06:f8:98:c8:f8:b1:61: 9a:13:1d:c7:e0:dc:fd:02:2c:d0:24:f4:2b:69:b4: 50:bf:2e:91:81:89:18:bb:88:9c:7a:85:62:e8:40: 7a:0b:18:5f:95:22:22:c3:d0:79:74:87:89:61:ca: 2f:2a:91:02:aa:02:13:73:a1:9d:ed:16:8d:ca:98: 37:d3:7f:c5:e7:ab:d5:62:0d:1a:a3:7d:5a:cb:0e: f8:d9:09:3d:81:77:a5:72:eb:a7:a8:2d:f3:8b:4c: 89:d3:7d:31:5c:fb:5e:c0:5c:a8:6d:94:eb:cd:2f: a5:a0:1e:e4:ce:4e:7b:1f:8a:5c:67:fe:9e:7e:f2: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:68:D3:73:24:63:7C:E8:72:FA:81:AB:B9:66:45:1B:7B:A7:54 X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:73:61:5a:aa:c5:04:0e:76:58:8b:13:0e:a1:00:56:44:df: 1a:c9:07:c4:66:8d:28:9d:9d:94:37:1a:89:ca:28:60:61:58: 3d:2e:86:93:31:c6:05:f5:a3:3d:0f:bb:a1:04:52:47:48:3e: 92:e6:7a:d6:4b:2b:05:0d:18:2b:48:d5:ee:f8:d4:89:b4:de: 4f:fd:77:ec:f5:70:f1:b6:d4:30:5a:c4:cb:de:e7:2d:26:29: 8f:9d:58:a7:64:0e:79:f1:4f:df:ce:ac:5e:40:7c:64:1e:83: 17:5d:40:ea:36:57:b8:2e:70:d0:e0:36:c6:47:63:00:2c:81: cb:20:46:34:58:d4:2a:32:6c:89:ed:d4:65:a9:22:45:b8:52: 82:8d:34:07:6e:bd:6e:7d:86:f7:b4:2f:84:f3:d2:18:89:7d: 44:1f:4a:fb:cb:1a:e3:c3:5a:04:e2:59:93:b3:29:e7:98:c0: 59:bf:1c:a8:9f:72:a4:f6:30:a8:3b:2e:1e:57:5a:55:7a:dd: 9b:c9:25:c4:78:75:d8:04:e5:7a:09:06:2c:48:5a:57:c2:8a: ac:3b:d5:86:8e:0b:1e:b8:f3:06:67:e5:2e:0a:3a:dc:59:36: 3b:e1:ee:32:20:eb:64:c7:75:28:84:ae:37:a2:6d:c6:a5:1e: 86:53:6f:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjYwNjEzMDYwNzA5WhcNMjYwNjIwMDYwNzA5WjAYMRYwFAYD VQQDEw02YTJjZjM4ZC0yZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tJQ7VPla65f8pl6ryMwPDaBeLHp6oBQ63mUuMGZXPh0KxL9MxFV8qTweOr7 0nAxu8HTM0Awdybd5gkinoQEIrRyaV4Jp3i6/bJVDMPBu5ASQ5lGoqnLG+fOdiR7 ZfGixx3b5NSzPBUynTzImuj3l3dDPy5VUcs28BBOqwhkXgb4mMj4sWGaEx3H4Nz9 AizQJPQrabRQvy6RgYkYu4iceoVi6EB6CxhflSIiw9B5dIeJYcovKpECqgITc6Gd 7RaNypg303/F56vVYg0ao31ayw742Qk9gXelcuunqC3zi0yJ030xXPtewFyobZTr zS+loB7kzk57H4pcZ/6efvItGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9GaNNz JGN86HL6gau5ZkUbe6dUMB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJXNhWqrFBA52WIsTDqEAVkTfGskHxGaNKJ2dlDcaicooYGFYPS6GkzHGBfWj PQ+7oQRSR0g+kuZ61ksrBQ0YK0jV7vjUibTeT/137PVw8bbUMFrEy97nLSYpj51Y p2QOefFP386sXkB8ZB6DF11A6jZXuC5w0OA2xkdjACyByyBGNFjUKjJsie3UZaki RbhSgo00B269bn2G97QvhPPSGIl9RB9K+8sa48NaBOJZk7Mp55jAWb8cqJ9ypPYw qDsuHldaVXrdm8klxHh12ATlegkGLEhaV8KKrDvVho4LHrjzBmflLgo63Fk2O+Hu MiDrZMd1KISuN6JtxqUehlNvvg== -----END CERTIFICATE-----Generated at Sat Jun 13 22:48:26 2026 by rpki-client