$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: g9aVQ/tqppk08EtY8gZSNa54Gjae2K9hV6llgSM46vc= Subject key identifier: EC:86:B4:FC:5D:3D:F9:40:FA:58:EB:67:2B:22:B5:49:76:CA:AE:0F Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0BF4 Signing time: Tue 22 Sep 2026 18:55:52 +0000 Manifest this update: Tue 22 Sep 2026 18:55:52 +0000 Manifest next update: Tue 29 Sep 2026 18:55:52 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: 7+EtCrHdWTRMHVR53QbRRzANB0e8hQCka90G53ogevg=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Sep 22 18:55:52 2026 GMT Not After : Sep 29 18:55:52 2026 GMT Subject: CN=6ab2cf38-70a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:9e:7c:b2:b1:fb:a3:7b:12:b8:05:05:d9: d6:61:ba:d7:da:a7:90:62:47:4e:54:10:18:06:50: c8:54:1f:53:be:f2:f1:fe:ff:6f:8d:3c:93:2d:f0: 56:d7:65:20:d7:28:03:e5:6a:35:1e:39:6d:40:4d: 6f:80:d0:a5:0a:7c:eb:a1:ec:a6:bd:38:1c:37:5f: dd:bd:c8:b7:33:11:eb:15:a4:f4:ae:cd:fe:3d:02: 21:07:f0:3d:72:5b:ac:ea:4f:f0:34:44:84:99:c5: 12:59:f8:d7:64:42:18:e8:27:28:3f:b5:c5:60:51: 71:80:99:c8:8f:2f:33:8a:34:5e:53:0d:3e:d7:74: 65:29:fb:0e:c8:c1:ce:cf:98:7d:b4:e2:7a:b2:c0: d3:14:a9:db:0a:5a:21:1f:a0:9e:72:56:64:40:1b: c0:09:1c:cb:b5:1c:77:01:9d:1b:78:51:5a:2a:b7: 62:7e:3d:01:a9:e1:28:43:8f:18:2a:13:1b:5c:15: fa:5b:5e:03:f0:06:63:d0:af:fb:7f:46:4d:46:c2: 58:8b:36:bf:d1:c0:35:bf:5b:68:bd:9a:b3:4a:60: ab:5c:40:86:ac:2b:66:d8:77:3c:49:92:3d:94:12: da:be:d5:30:c1:0c:b6:46:fa:48:bd:c7:fd:12:11: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:86:B4:FC:5D:3D:F9:40:FA:58:EB:67:2B:22:B5:49:76:CA:AE:0F X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:29:ea:91:11:b8:6d:7f:f7:dc:1b:31:42:80:48:0b:9d: c3:6f:bc:f6:eb:f9:f9:e6:32:68:38:cb:03:89:f5:99:f9:46: f4:fb:9f:59:28:d9:c0:8c:3b:f8:1b:c1:42:74:58:b0:e9:5d: 24:60:43:58:05:bb:ef:49:ff:6f:65:56:cb:08:cf:e0:22:6b: 8f:cf:d9:59:e9:ad:45:fa:73:b4:b3:e7:27:3e:01:e2:27:cd: 4e:c0:56:31:51:43:16:41:14:44:78:b1:f1:b9:10:ce:54:95: 81:a7:d1:b9:e2:6e:68:b0:47:35:47:bf:f6:df:d4:e9:54:02: b7:6e:30:e1:7e:82:a3:67:f8:d9:4e:3b:a7:1a:ab:7e:2d:fe: ec:ec:95:0a:c8:6f:d5:86:75:5c:42:eb:72:05:a9:c7:a7:b7: 47:9b:10:e7:48:c5:50:8f:11:a8:55:26:8e:85:d9:92:ec:46: c4:32:e5:e8:de:58:51:60:63:df:19:b1:5e:c4:70:87:78:28: ee:b2:10:c6:92:8b:72:9a:38:04:5b:28:25:e8:87:24:5f:62: 0c:bc:c8:b9:f4:72:0d:22:14:45:25:5b:a5:d2:01:95:fc:fa: 72:6f:ff:0f:20:de:7a:ec:69:89:58:1b:a7:b5:f8:47:92:2a: 08:11:50:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjYwOTIyMTg1NTUyWhcNMjYwOTI5MTg1NTUyWjAYMRYwFAYD VQQDEw02YWIyY2YzOC03MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo6efLKx+6N7ErgFBdnWYbrX2qeQYkdOVBAYBlDIVB9TvvLx/v9vjTyTLfBW 12Ug1ygD5Wo1HjltQE1vgNClCnzroeymvTgcN1/dvci3MxHrFaT0rs3+PQIhB/A9 clus6k/wNESEmcUSWfjXZEIY6CcoP7XFYFFxgJnIjy8zijReUw0+13RlKfsOyMHO z5h9tOJ6ssDTFKnbClohH6CeclZkQBvACRzLtRx3AZ0beFFaKrdifj0BqeEoQ48Y KhMbXBX6W14D8AZj0K/7f0ZNRsJYiza/0cA1v1tovZqzSmCrXECGrCtm2Hc8SZI9 lBLavtUwwQy2RvpIvcf9EhFqDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyGtPxd PflA+ljrZysitUl2yq4PMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoAp6pERuG1/99wbMUKASAudw2+89uv5+eYyaDjLA4n1mflG9PufWSjZwIw7 +BvBQnRYsOldJGBDWAW770n/b2VWywjP4CJrj8/ZWemtRfpztLPnJz4B4ifNTsBW MVFDFkEURHix8bkQzlSVgafRueJuaLBHNUe/9t/U6VQCt24w4X6Co2f42U47pxqr fi3+7OyVCshv1YZ1XELrcgWpx6e3R5sQ50jFUI8RqFUmjoXZkuxGxDLl6N5YUWBj 3xmxXsRwh3go7rIQxpKLcpo4BFsoJeiHJF9iDLzIufRyDSIURSVbpdIBlfz6cm// DyDeeuxpiVgbp7X4R5IqCBFQjw== -----END CERTIFICATE-----Generated at Wed Sep 23 12:55:28 2026 by rpki-client