$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: fbKKu6nrbPFRF3pabEHv18SlAymVFiJiuI09iZW6Umw= Subject key identifier: 45:11:E6:5E:39:DB:A1:46:CF:47:22:C1:1F:62:CE:E5:DA:C4:A8:1E Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 0449 Signing time: Tue 22 Sep 2026 23:49:49 +0000 Manifest this update: Tue 22 Sep 2026 23:49:49 +0000 Manifest next update: Tue 29 Sep 2026 23:49:49 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: NeTMJRmnxUBSSbZcX38ELJT/kcmk5OpfxASP90DJdhU=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=) 3: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: DAX9aDACQRDZ+tftq+yUNOaT2K9U/BHvepIgwRyOpVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Sep 22 23:49:49 2026 GMT Not After : Sep 29 23:49:49 2026 GMT Subject: CN=6ab3141d-0c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:66:b7:75:05:25:65:18:13:a6:a3:2f:f0: 5a:11:ce:54:19:8b:88:25:f8:4f:ae:de:c3:03:39: 46:e9:02:10:dc:1b:86:8b:39:d9:ba:e9:4f:6e:c6: a2:da:e8:0e:d1:15:7b:4d:2b:03:d4:e6:b8:98:aa: f6:fc:49:e6:82:b2:ff:7d:f7:99:e7:41:11:fc:a5: 23:f6:d7:91:55:ae:ca:03:7c:76:cd:7a:e6:1b:b8: df:dd:4a:57:67:16:77:d6:d4:8a:82:35:99:19:ee: 2c:23:6c:03:b2:a1:09:f0:ac:96:e1:da:df:7e:ca: ef:e8:a6:69:c4:03:af:c4:cb:76:77:0b:4e:5a:63: e4:ce:3c:bf:b1:02:d4:e2:95:18:6e:9a:c2:09:61: 95:a4:5d:2f:a6:c1:ff:66:a5:03:7d:9f:f7:61:8e: 34:cd:0b:0b:50:06:4d:55:2b:f7:7a:0b:18:43:3e: ef:27:01:44:fd:a4:7a:af:97:77:c2:2a:74:b2:5c: 0e:c0:21:6e:e5:48:e7:9a:e4:49:61:2d:f1:97:60: a2:86:d2:84:e9:3b:f9:a3:2e:06:44:f7:60:c9:b3: 63:b9:27:af:5e:56:03:5e:57:ec:f9:8f:ed:9a:1e: 8c:22:60:6d:c9:26:b4:ee:e7:11:4e:3e:c5:c3:5f: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:11:E6:5E:39:DB:A1:46:CF:47:22:C1:1F:62:CE:E5:DA:C4:A8:1E X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ca:68:3d:f6:04:19:8b:8a:5b:90:c1:5b:86:d1:64:78:46: 86:f3:35:e5:98:7a:a7:33:87:1a:ec:3d:2d:2a:35:7d:95:2b: bd:ba:6e:fb:20:b9:ba:d0:7b:8a:7e:be:1a:56:b0:d2:35:68: 63:d1:86:19:96:4f:70:02:18:49:9a:13:a1:66:51:c5:bf:fa: a2:bd:99:ac:f0:98:e7:4d:97:c1:a5:b6:81:bd:5a:ce:83:0f: 70:e8:e2:8e:ed:73:5c:c5:cd:31:96:2d:98:0e:a2:e9:81:ab: 68:2c:9a:1f:8c:ee:ef:52:40:db:c9:44:f7:c2:07:4b:59:da: 20:52:9b:3f:d3:4a:ff:ef:96:fb:e3:2a:57:ae:84:80:66:7b: 84:9c:88:c1:a0:50:b3:e4:36:cf:1b:ae:e8:03:79:6a:01:65: b2:5a:d4:53:b1:ed:f9:ad:b7:f8:57:e1:a0:6f:8e:3e:08:41: 18:40:de:4f:bf:77:71:f1:44:b8:f1:17:82:11:cf:4c:4d:3c: 0e:f8:fc:2e:ad:84:8e:9f:01:db:2d:a8:c9:0a:be:3a:70:3f: d7:50:79:3d:ea:60:c8:2d:b2:b6:02:11:0b:04:26:08:fd:28: b0:c3:01:ae:77:90:9b:b9:ec:bc:c6:c2:6c:f8:b1:aa:34:7b: da:cb:d1:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYwOTIyMjM0OTQ5WhcNMjYwOTI5MjM0OTQ5WjAYMRYwFAYD VQQDEw02YWIzMTQxZC0wYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWBmt3UFJWUYE6ajL/BaEc5UGYuIJfhPrt7DAzlG6QIQ3BuGiznZuulPbsai 2ugO0RV7TSsD1Oa4mKr2/EnmgrL/ffeZ50ER/KUj9teRVa7KA3x2zXrmG7jf3UpX ZxZ31tSKgjWZGe4sI2wDsqEJ8KyW4drffsrv6KZpxAOvxMt2dwtOWmPkzjy/sQLU 4pUYbprCCWGVpF0vpsH/ZqUDfZ/3YY40zQsLUAZNVSv3egsYQz7vJwFE/aR6r5d3 wip0slwOwCFu5UjnmuRJYS3xl2CihtKE6Tv5oy4GRPdgybNjuSevXlYDXlfs+Y/t mh6MImBtySa07ucRTj7Fw1+i3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUR5l45 26FGz0ciwR9izuXaxKgeMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicpoPfYEGYuKW5DBW4bRZHhGhvM15Zh6pzOHGuw9LSo1fZUrvbpu+yC5utB7 in6+Glaw0jVoY9GGGZZPcAIYSZoToWZRxb/6or2ZrPCY502XwaW2gb1azoMPcOji ju1zXMXNMZYtmA6i6YGraCyaH4zu71JA28lE98IHS1naIFKbP9NK/++W++MqV66E gGZ7hJyIwaBQs+Q2zxuu6AN5agFlslrUU7Ht+a23+FfhoG+OPghBGEDeT793cfFE uPEXghHPTE08Dvj8Lq2Ejp8B2y2oyQq+OnA/11B5PepgyC2ytgIRCwQmCP0osMMB rneQm7nsvMbCbPixqjR72svR/w== -----END CERTIFICATE-----Generated at Thu Sep 24 22:45:31 2026 by rpki-client