$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: k/GcZ42Gk2DzoIIV6fXsmiJU0/Sd1eauQWkLgpYmupY= Subject key identifier: 7E:D0:DC:0F:10:CE:7B:52:F8:25:77:8C:21:9E:7C:FE:E7:8C:D5:3F Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 2D Signing time: Mon 11 May 2026 08:56:13 +0000 Manifest this update: Mon 11 May 2026 08:56:13 +0000 Manifest next update: Mon 18 May 2026 08:56:13 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: +Afjgf8+MY+V96+XeQKXNj4juwLGg9a7O6H1hPUdtno=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: May 11 08:56:13 2026 GMT Not After : May 18 08:56:13 2026 GMT Subject: CN=6a0199ad-9cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:d3:ef:ca:dd:44:17:5a:4f:06:35:5b:a0: 18:37:cd:48:7f:a3:9d:d1:0e:1b:06:b5:85:0b:3a: af:4a:52:06:fc:f5:cd:60:15:b2:15:37:66:08:e2: 1f:62:05:73:97:fa:e9:2d:15:e9:60:81:c3:37:a3: 59:e0:28:7b:30:af:27:c1:fc:59:ae:bb:d1:6a:ea: f7:61:7a:cb:85:eb:0c:16:bb:e9:e8:cb:95:e7:32: bf:1d:d1:f7:e7:3d:14:97:52:43:4d:0b:19:82:7c: d4:c8:79:eb:75:dd:43:75:c8:d0:b8:8a:5a:cb:29: 23:ee:03:ec:2b:fa:b6:87:81:cd:df:6e:07:eb:55: 27:c6:70:65:02:49:8d:de:bd:f7:c9:87:f7:7c:ac: d9:a0:80:1b:0d:4c:28:e1:f3:99:e7:6d:2d:4d:b0: 15:34:99:40:f3:d5:b2:24:c9:9a:c7:07:ef:5e:c2: 65:46:cb:65:4c:56:cd:61:dc:26:10:cc:86:87:86: 83:b1:10:b4:d5:02:eb:f5:48:2d:04:eb:e3:df:99: 6c:d7:6e:96:13:ab:75:4d:14:ba:08:74:e5:d2:6f: 3b:c1:2c:1d:84:7f:a5:43:3d:e9:0e:dc:14:57:6c: 8a:ff:02:f0:7d:8d:2c:52:0c:c6:f2:9a:f9:39:fc: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:DC:0F:10:CE:7B:52:F8:25:77:8C:21:9E:7C:FE:E7:8C:D5:3F X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e8:23:b0:63:69:f8:9c:4a:b3:7e:31:51:fd:df:65:6c:09: 85:6e:31:f3:b7:3a:53:cd:81:95:27:72:8f:b8:b9:37:f3:82: 57:2f:d8:6a:76:35:85:1c:10:3c:43:75:dd:a5:88:72:f9:bf: 83:b2:0e:74:15:05:e3:b0:a1:67:5d:2f:36:ab:61:ff:db:34: 15:84:c5:38:7b:80:ba:39:60:34:29:e5:f8:17:2f:89:1f:95: 7b:f9:68:41:b6:c1:c3:2d:cb:7f:76:cc:de:28:ef:2d:49:94: 36:a1:72:51:07:53:4f:cf:22:c0:59:4f:2c:14:77:ed:0a:98: 25:8d:ed:74:ed:86:e0:bb:da:fd:fa:89:12:66:47:e0:4c:c3: 92:69:4a:e4:84:e9:b1:9d:fa:66:11:56:32:16:01:bb:19:d1: d0:93:99:a8:3d:2c:fb:7a:e7:15:3b:1f:82:62:88:38:22:f4: ed:12:e1:0c:57:58:72:1e:2f:80:f3:2d:4f:62:6d:01:d6:70: c5:be:d8:a1:64:a8:4a:07:19:c2:f5:72:98:cb:d6:61:e3:b1: bf:ec:30:f3:9a:a9:61:58:35:d8:7e:e1:df:73:7c:f0:c6:d0: 85:ce:55:2c:fb:70:f5:17:9c:80:50:66:3d:4c:87:5f:37:e1: db:4d:8c:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjA1MTEwODU2MTNaFw0yNjA1MTgwODU2MTNaMBgxFjAUBgNV BAMTDTZhMDE5OWFkLTljYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMtPvyt1EF1pPBjVboBg3zUh/o53RDhsGtYULOq9KUgb89c1gFbIVN2YI4h9i BXOX+uktFelggcM3o1ngKHswryfB/Fmuu9Fq6vdhesuF6wwWu+noy5XnMr8d0ffn PRSXUkNNCxmCfNTIeet13UN1yNC4ilrLKSPuA+wr+raHgc3fbgfrVSfGcGUCSY3e vffJh/d8rNmggBsNTCjh85nnbS1NsBU0mUDz1bIkyZrHB+9ewmVGy2VMVs1h3CYQ zIaHhoOxELTVAuv1SC0E6+PfmWzXbpYTq3VNFLoIdOXSbzvBLB2Ef6VDPekO3BRX bIr/AvB9jSxSDMbymvk5/HcDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUftDcDxDO e1L4JXeMIZ58/ueM1T8wHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAr6COwY2n4nEqzfjFR/d9lbAmFbjHztzpTzYGVJ3KPuLk384JXL9hqdjWFHBA8 Q3XdpYhy+b+Dsg50FQXjsKFnXS82q2H/2zQVhMU4e4C6OWA0KeX4Fy+JH5V7+WhB tsHDLct/dszeKO8tSZQ2oXJRB1NPzyLAWU8sFHftCpglje107Ybgu9r9+okSZkfg TMOSaUrkhOmxnfpmEVYyFgG7GdHQk5moPSz7eucVOx+CYog4IvTtEuEMV1hyHi+A 8y1PYm0B1nDFvtihZKhKBxnC9XKYy9Zh47G/7DDzmqlhWDXYfuHfc3zwxtCFzlUs +3D1F5yAUGY9TIdfN+HbTYxL -----END CERTIFICATE-----Generated at Wed May 13 00:48:57 2026 by rpki-client