$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: QfV5kxsYgwKFM8LHcLy4mAtdsiLAny98GxZHP60xmX4= Subject key identifier: 24:D7:59:CE:AF:95:39:64:15:F8:D2:27:BC:FB:DD:18:2F:1A:42:C8 Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 0429 Signing time: Thu 23 Jul 2026 01:11:20 +0000 Manifest this update: Thu 23 Jul 2026 01:11:20 +0000 Manifest next update: Thu 30 Jul 2026 01:11:20 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: WenVn7H6Y7MbI/srpK1Nl0w4sR4q/KjzJp08cUJt1Zg=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=) 3: 64197A380C4E11F1BFF51C3A113D8C67.roa (hash: DAX9aDACQRDZ+tftq+yUNOaT2K9U/BHvepIgwRyOpVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Jul 23 01:11:20 2026 GMT Not After : Jul 30 01:11:20 2026 GMT Subject: CN=6a616a38-f0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:5f:63:1c:8d:be:f4:62:9d:81:6e:6c:b5: e0:ab:d2:cc:ef:3a:0b:84:8d:34:5d:51:15:81:6d: ca:3c:b4:43:35:41:ef:cf:2e:04:cd:d0:d4:9a:f8: ef:56:6f:0a:80:bb:bf:f0:c1:90:9a:b9:0e:c9:4d: 01:e0:f3:09:32:dc:13:f8:b8:fb:e7:d1:27:8c:47: c8:ee:e1:9c:de:40:66:72:a7:91:e3:73:5e:97:84: c2:43:de:fd:bf:bd:52:b0:9d:39:cf:0e:72:9b:89: 68:e1:61:5c:14:ba:b5:20:c1:fd:a2:0b:9a:f8:d8: b6:9e:ac:ba:08:53:f7:a9:fb:fb:5c:6c:41:e8:d6: 80:ba:c1:e6:9b:78:10:58:44:fc:91:29:63:5a:e0: de:16:af:66:69:53:b9:73:cc:d5:68:1e:42:28:a6: 8e:8d:64:61:8d:67:4a:7e:c1:19:f3:e7:87:7b:0d: a5:a7:77:92:f5:48:4d:c8:60:83:31:11:d9:70:1a: c5:f2:14:9c:99:17:88:66:d8:81:33:4d:ac:5d:a9: 72:59:05:21:e1:9e:79:7c:81:c0:33:3a:5e:bb:db: 36:36:42:bd:b1:14:25:29:96:8f:09:35:45:79:e3: 3b:8c:89:78:14:3a:04:d3:0c:f8:e0:34:8f:bc:cd: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:59:CE:AF:95:39:64:15:F8:D2:27:BC:FB:DD:18:2F:1A:42:C8 X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:23:9b:a9:6f:8c:ee:a5:b6:40:97:83:96:c4:9a:2c:30:b9: 28:4a:b0:45:f6:de:7c:aa:8c:bc:6c:b1:aa:c3:9b:75:50:a3: 87:86:f6:25:b9:bb:ea:88:53:4a:6e:c8:7a:ac:c0:ca:f4:e8: 39:0a:f7:89:ea:69:2a:db:89:b6:03:2a:df:dd:3c:71:2e:a3: 79:62:b1:cb:c3:26:ce:d4:5f:a7:93:a2:3e:3b:fc:11:55:97: 24:d7:a5:06:46:b9:e4:9f:d8:fa:c7:e6:be:42:35:6d:6a:15: 3e:c4:5f:1c:e6:42:cc:f6:11:88:9c:8d:97:02:16:56:6e:16: 60:77:cc:45:d4:9c:8c:37:01:d7:07:12:92:7e:df:bd:de:45: d3:2a:06:3d:03:97:01:36:55:e1:b2:ea:f4:d8:50:55:8a:80: 19:54:5c:43:0e:43:ea:52:07:a2:62:db:ca:47:fc:60:57:b5: 87:c8:17:55:48:2c:38:4b:eb:11:e7:5a:83:d6:a2:d6:97:8f: 10:69:16:67:e0:fc:3d:42:8a:52:3a:11:ef:b1:40:39:f7:d8: ed:05:d2:54:7e:6c:0e:6d:8a:8d:35:62:08:e9:86:dd:76:32: cf:1b:fc:db:33:9f:33:d7:85:55:78:c6:f5:29:71:bd:7b:21: f2:84:7b:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjYwNzIzMDExMTIwWhcNMjYwNzMwMDExMTIwWjAYMRYwFAYD VQQDEw02YTYxNmEzOC1mMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWRfYxyNvvRinYFubLXgq9LM7zoLhI00XVEVgW3KPLRDNUHvzy4EzdDUmvjv Vm8KgLu/8MGQmrkOyU0B4PMJMtwT+Lj759EnjEfI7uGc3kBmcqeR43Nel4TCQ979 v71SsJ05zw5ym4lo4WFcFLq1IMH9ogua+Ni2nqy6CFP3qfv7XGxB6NaAusHmm3gQ WET8kSljWuDeFq9maVO5c8zVaB5CKKaOjWRhjWdKfsEZ8+eHew2lp3eS9UhNyGCD MRHZcBrF8hScmReIZtiBM02sXalyWQUh4Z55fIHAMzpeu9s2NkK9sRQlKZaPCTVF eeM7jIl4FDoE0wz44DSPvM1MMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTXWc6v lTlkFfjSJ7z73RgvGkLIMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsSObqW+M7qW2QJeDlsSaLDC5KEqwRfbefKqMvGyxqsObdVCjh4b2Jbm76ohT Sm7IeqzAyvToOQr3ieppKtuJtgMq3908cS6jeWKxy8MmztRfp5OiPjv8EVWXJNel Bka55J/Y+sfmvkI1bWoVPsRfHOZCzPYRiJyNlwIWVm4WYHfMRdScjDcB1wcSkn7f vd5F0yoGPQOXATZV4bLq9NhQVYqAGVRcQw5D6lIHomLbykf8YFe1h8gXVUgsOEvr Eedag9ai1pePEGkWZ+D8PUKKUjoR77FAOffY7QXSVH5sDm2KjTViCOmG3XYyzxv8 2zOfM9eFVXjG9SlxvXsh8oR72w== -----END CERTIFICATE-----Generated at Thu Jul 23 22:42:25 2026 by rpki-client