$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: HPRUZmnI6n0LDwTOqYtGKyr0qfPlIpIt6vnwpa9q390= Subject key identifier: EC:B8:B3:87:B7:13:12:1F:EA:72:A9:58:78:B7:F1:51:7E:57:C8:DA Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 022D Signing time: Wed 07 Oct 2026 03:18:23 +0000 Manifest this update: Wed 07 Oct 2026 03:18:23 +0000 Manifest next update: Wed 14 Oct 2026 03:18:23 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: GC4Hn+7+byBtLFmwLj9cMZUYgR59RbDsSS9YwJ7b2FU=) 2: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=) 3: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: aK9c79sTcvK5iWtA4NQLYDiheDhiqCqKnIFb6fchAKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Oct 7 03:18:23 2026 GMT Not After : Oct 14 03:18:23 2026 GMT Subject: CN=6ac5b9ff-944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:f1:f9:3b:ca:a9:3f:aa:bd:53:62:19:bf: b1:92:c9:78:42:56:6a:b4:9b:a9:36:58:0b:ca:1b: a1:65:a5:2d:c0:7b:80:da:7b:c1:0a:a8:e4:37:12: 3d:e5:4a:42:b0:ac:ff:4b:f3:07:63:a9:32:ab:54: 8e:38:da:80:e9:28:fc:73:6d:15:94:0f:c8:45:c3: 31:c2:5a:e5:5a:2b:d2:5b:df:8b:3c:1d:7c:b9:ae: 9f:8d:3f:02:b9:b3:50:57:76:e5:27:98:03:dd:a3: 61:29:21:51:95:93:5c:89:b0:b6:51:9b:9a:a5:b8: 81:6f:a9:2d:09:1b:d2:db:79:2b:b7:3d:7f:77:0e: 97:76:d6:26:b9:f7:72:22:69:30:31:e1:30:af:47: ff:10:2f:8a:89:fc:32:ba:4f:53:44:35:95:76:a4: ca:e0:6a:4a:8f:b3:b4:e9:c3:f1:20:cc:2b:eb:64: 8f:06:4c:14:6a:34:d1:3e:29:c2:db:51:41:f2:2c: 20:b3:b3:56:24:3b:e5:dd:ef:7c:e6:23:b4:74:e6: 41:1e:9f:59:38:06:ec:c0:fc:5b:dd:7c:d5:37:53: 0b:2a:84:89:23:93:9a:8b:cf:09:4b:d2:7b:4b:e3: dc:b2:e5:f1:82:01:81:56:70:c4:1d:9b:c4:0d:f7: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:B3:87:B7:13:12:1F:EA:72:A9:58:78:B7:F1:51:7E:57:C8:DA X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:04:24:0e:0f:73:6a:63:50:ac:70:5a:88:7b:bc:11:14:41: 54:08:6c:fb:af:cb:bf:4a:db:00:84:b0:9d:70:b3:20:83:41: e5:35:14:de:8d:8b:7f:48:8c:fa:5e:0b:54:27:bd:7b:88:ff: ae:b5:38:02:7f:2d:a7:17:11:b6:63:11:a5:ee:db:d0:8f:ec: 64:79:97:e8:43:13:ba:c7:41:90:73:7a:10:d5:66:9f:1b:73: 76:41:87:e9:b6:82:c8:c4:61:2b:d9:94:71:97:67:68:43:2b: d7:3d:75:02:b1:96:f7:44:bd:d9:1a:74:72:42:0c:67:e2:8d: 5a:76:15:2f:48:3c:d9:3f:99:7c:52:9c:2b:7a:a3:d7:03:c4: b0:9f:23:2b:8f:64:07:3a:61:00:e7:23:52:84:c3:6d:3f:25: 38:c6:51:2a:11:cb:07:af:2c:e4:0f:7e:f0:8c:8f:75:34:e7: b5:06:e4:ba:e9:05:f1:2a:88:3b:50:95:0b:94:d4:92:92:b9: e4:11:98:d8:fc:27:d8:cf:0e:07:29:0b:fe:25:b9:db:2b:ea: e5:1e:b3:0c:90:6d:83:c4:5c:8c:90:69:ae:16:4e:19:58:8f: 50:2d:a7:37:cb:8b:c7:c7:93:f5:be:6a:9c:61:35:54:81:d5: fe:fd:f0:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjYxMDA3MDMxODIzWhcNMjYxMDE0MDMxODIzWjAYMRYwFAYD VQQDEw02YWM1YjlmZi05NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoefx+TvKqT+qvVNiGb+xksl4QlZqtJupNlgLyhuhZaUtwHuA2nvBCqjkNxI9 5UpCsKz/S/MHY6kyq1SOONqA6Sj8c20VlA/IRcMxwlrlWivSW9+LPB18ua6fjT8C ubNQV3blJ5gD3aNhKSFRlZNcibC2UZuapbiBb6ktCRvS23krtz1/dw6XdtYmufdy ImkwMeEwr0f/EC+Kifwyuk9TRDWVdqTK4GpKj7O06cPxIMwr62SPBkwUajTRPinC 21FB8iwgs7NWJDvl3e985iO0dOZBHp9ZOAbswPxb3XzVN1MLKoSJI5Oai88JS9J7 S+PcsuXxggGBVnDEHZvEDfdYUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy4s4e3 ExIf6nKpWHi38VF+V8jaMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAowQkDg9zamNQrHBaiHu8ERRBVAhs+6/Lv0rbAISwnXCzIINB5TUU3o2Lf0iM +l4LVCe9e4j/rrU4An8tpxcRtmMRpe7b0I/sZHmX6EMTusdBkHN6ENVmnxtzdkGH 6baCyMRhK9mUcZdnaEMr1z11ArGW90S92Rp0ckIMZ+KNWnYVL0g82T+ZfFKcK3qj 1wPEsJ8jK49kBzphAOcjUoTDbT8lOMZRKhHLB68s5A9+8IyPdTTntQbkuukF8SqI O1CVC5TUkpK55BGY2Pwn2M8OBykL/iW52yvq5R6zDJBtg8RcjJBprhZOGViPUC2n N8uLx8eT9b5qnGE1VIHV/v3wSg== -----END CERTIFICATE-----Generated at Thu Oct 8 14:39:48 2026 by rpki-client