$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: b70dGdHihDYg0AtZiaGN92fiBiD++IBBwbQ76BlceIM= Subject key identifier: 7D:8B:ED:C3:FA:F4:8E:2C:8E:0D:81:7F:1D:4D:37:D5:63:7C:28:02 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A78 Signing time: Tue 24 Mar 2026 19:22:52 +0000 Manifest this update: Tue 24 Mar 2026 19:22:51 +0000 Manifest next update: Tue 31 Mar 2026 19:22:51 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: PoQhYuOp83fe1IrHbqiK4P5cgYVbLj3S3EQH/ZbdZIc=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Mar 24 19:22:51 2026 GMT Not After : Mar 31 19:22:51 2026 GMT Subject: CN=69c2e48b-b82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:7e:a9:93:48:75:32:d5:62:12:b3:a7:a1: 29:c2:e8:22:c3:79:91:16:87:1c:24:a2:83:39:c4: e9:b0:32:b5:21:c1:c0:af:62:04:5e:33:d1:bc:e6: bf:01:c7:3d:d5:8f:61:c0:86:78:80:40:0b:8f:90: b8:70:99:fa:2c:2e:bc:43:a3:3d:47:b2:67:c1:2e: d8:54:3d:aa:0f:c1:e7:58:f6:12:d1:a3:39:17:ba: 41:6c:d2:77:af:1c:42:fd:c5:93:01:1c:64:29:60: 46:ff:22:37:00:9f:0b:b1:6b:e4:f1:63:0b:4a:3c: ca:49:9c:ab:81:72:6f:ca:f8:c8:e7:f4:50:7d:35: 64:ed:dd:19:61:0c:ab:cf:ac:ea:c2:6d:f1:8c:d5: 70:f4:95:e0:7c:67:9c:23:3c:f1:1a:c9:ac:80:48: d1:f8:de:a7:a2:40:32:06:e5:84:55:eb:63:f0:bf: 2c:11:b8:c0:82:5c:8c:53:23:a9:a7:f1:c8:32:cf: 23:cc:71:db:b0:dd:ce:72:0f:f6:77:d2:bd:f2:7c: 72:66:78:4b:0d:48:71:2e:52:57:a1:64:bf:db:8c: ad:4e:48:3e:a7:56:00:d7:dc:b7:fb:99:f7:20:12: dc:d9:9e:79:50:7c:45:6f:93:78:c2:b2:76:38:10: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:ED:C3:FA:F4:8E:2C:8E:0D:81:7F:1D:4D:37:D5:63:7C:28:02 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:33:f5:f6:ff:dd:bc:28:b5:a3:96:12:5e:23:05:7a:39:24: 6a:75:f3:51:07:a9:33:06:c5:50:8a:5b:5b:cb:e6:20:64:11: 01:98:9d:cc:a2:95:3d:e0:bf:cd:61:1b:db:f9:09:e9:2d:5a: 39:d7:03:fd:f0:af:9e:cb:79:81:11:6e:b7:3b:af:ff:98:aa: 75:77:49:5b:f6:57:05:5c:0c:7a:e1:e2:a3:08:f2:69:3d:37: 10:2a:16:55:a7:0c:21:b1:40:71:86:9a:fd:5d:32:f6:c8:77: c5:9d:d7:3e:f9:50:53:5e:77:bf:c7:6b:f6:2a:51:98:10:eb: 28:64:e5:cd:c0:43:56:01:eb:1e:9e:18:f7:15:dd:8d:3b:41: 6f:b1:fb:b5:4e:d4:6c:06:20:8a:d9:00:6f:7b:a0:66:97:3a: e8:b4:58:4a:93:9f:d2:38:16:8b:d1:4d:ef:24:5b:ac:17:e8: a3:56:5a:0a:9d:3f:ed:5b:1d:fb:ae:7f:60:a4:42:b8:22:1a: 52:fd:81:dc:92:93:ec:2e:ce:b2:b2:9a:54:2a:11:61:3e:0a: e4:b9:5f:24:7c:cf:a7:78:68:b8:61:24:f3:67:69:88:c4:1d: c4:67:9a:bd:1e:20:60:1c:4e:d6:47:fa:9c:64:f8:5c:df:ae: ee:7a:b1:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjYwMzI0MTkyMjUxWhcNMjYwMzMxMTkyMjUxWjAYMRYwFAYD VQQDEw02OWMyZTQ4Yi1iODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9d+qZNIdTLVYhKzp6Epwugiw3mRFoccJKKDOcTpsDK1IcHAr2IEXjPRvOa/ Acc91Y9hwIZ4gEALj5C4cJn6LC68Q6M9R7JnwS7YVD2qD8HnWPYS0aM5F7pBbNJ3 rxxC/cWTARxkKWBG/yI3AJ8LsWvk8WMLSjzKSZyrgXJvyvjI5/RQfTVk7d0ZYQyr z6zqwm3xjNVw9JXgfGecIzzxGsmsgEjR+N6nokAyBuWEVetj8L8sEbjAglyMUyOp p/HIMs8jzHHbsN3Ocg/2d9K98nxyZnhLDUhxLlJXoWS/24ytTkg+p1YA19y3+5n3 IBLc2Z55UHxFb5N4wrJ2OBDpkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2L7cP6 9I4sjg2Bfx1NN9VjfCgCMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANzP19v/dvCi1o5YSXiMFejkkanXzUQepMwbFUIpbW8vmIGQRAZidzKKVPeC/ zWEb2/kJ6S1aOdcD/fCvnst5gRFutzuv/5iqdXdJW/ZXBVwMeuHiowjyaT03ECoW VacMIbFAcYaa/V0y9sh3xZ3XPvlQU153v8dr9ipRmBDrKGTlzcBDVgHrHp4Y9xXd jTtBb7H7tU7UbAYgitkAb3ugZpc66LRYSpOf0jgWi9FN7yRbrBfoo1ZaCp0/7Vsd +65/YKRCuCIaUv2B3JKT7C7OsrKaVCoRYT4K5LlfJHzPp3houGEk82dpiMQdxGea vR4gYBxO1kf6nGT4XN+u7nqxDA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:58:25 2026 by rpki-client