$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json) Hash identifier: aXzotBIVvl7R7z8Qst8XVQTj4l3MvECVMiase+cLidc= Subject key identifier: C0:9C:26:F4:FB:7E:9D:DC:8F:EE:0E:08:E1:2A:95:F0:42:59:05:38 Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft Manifest number: 0119 Signing time: Wed 13 May 2026 05:56:53 +0000 Manifest this update: Wed 13 May 2026 05:56:53 +0000 Manifest next update: Wed 20 May 2026 05:56:53 +0000 Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: aIP6VTh+KVUJmpAGY171dSouY3GmDGNRGr7gUCUrfvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Validity Not Before: May 13 05:56:53 2026 GMT Not After : May 20 05:56:53 2026 GMT Subject: CN=6a0412a5-678a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:ff:13:13:9c:2a:c7:aa:84:01:05:cd:36: 7f:e8:25:be:ee:0f:7b:21:68:41:30:95:1e:36:9f: ef:6e:fd:bb:0e:1c:0f:8b:24:45:4e:36:a0:8e:3e: 20:5b:60:5b:a1:74:a2:0e:60:f6:a3:ad:0b:4b:f0: 6a:f0:4a:00:29:f0:b4:87:cc:05:b1:5d:47:55:c0: 1f:ad:fd:c9:e1:fb:1c:e2:5d:5c:44:6b:3f:70:17: 1d:d8:06:d7:59:a7:19:f4:7c:6f:c2:b0:89:5c:0f: 00:40:b2:1a:ff:fa:ca:8a:a0:52:a5:e4:b7:8e:7b: 46:64:de:0e:d4:bb:be:f2:21:bb:23:89:c6:5a:77: 46:58:57:87:42:de:ed:28:19:65:0f:86:c8:56:80: 56:89:a9:2b:27:1b:4d:67:9b:11:81:95:4c:0d:ee: 7b:4e:d0:8f:ce:d0:72:f0:27:8f:c9:57:79:9c:e0: a9:72:5b:10:f0:82:d1:b9:3f:fb:9a:d7:c5:ba:fd: ff:c1:6e:89:ea:1b:07:ec:d7:59:1e:57:ac:af:db: 6d:88:9c:7b:27:fe:c7:df:f3:f6:58:47:30:25:8b: f8:29:9e:1b:ab:64:45:8d:6d:70:46:b3:ce:4f:59: 62:4c:73:55:0d:13:ea:52:24:35:93:a7:3f:5a:56: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:26:F4:FB:7E:9D:DC:8F:EE:0E:08:E1:2A:95:F0:42:59:05:38 X509v3 Authority Key Identifier: keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0f:87:8f:17:91:14:3c:5d:f4:56:5a:97:47:a8:c6:1f:6f: c0:4d:3d:a6:1d:ac:a4:7e:cc:2b:7a:25:39:90:0a:4b:fb:df: 56:6b:19:55:69:98:aa:9b:37:ec:f3:16:42:b4:da:29:25:35: 1c:da:0f:55:ff:f4:81:f8:c5:0e:75:5d:9b:cf:69:eb:0a:46: d0:c0:94:a5:ef:01:d1:5c:fd:03:a1:36:ad:73:1c:46:ba:23: 55:80:ab:fc:54:a4:bf:e1:8b:92:d1:71:e8:f0:3f:87:df:dd: 47:4a:64:27:7e:a4:93:95:f1:6f:6f:47:be:60:3b:56:e2:a7: 96:4c:a6:1f:1c:87:56:1c:5a:8d:61:03:f7:49:ba:f6:d1:72: f7:7b:8d:c7:4c:23:6c:b3:62:46:79:9c:42:73:22:72:38:b1: 9e:e5:67:0d:60:49:55:17:2e:57:fd:81:16:41:43:29:b1:b1: 18:09:ce:fc:ea:7f:aa:83:98:ba:be:e0:f6:9d:ee:a8:2f:ed: ca:9a:41:fc:bc:75:3d:f8:87:7b:c6:3d:93:42:32:34:97:58: 9d:bd:cc:b4:f1:62:78:fc:0d:ef:ff:3e:69:9b:a1:ba:31:51: f6:c7:b8:60:a8:08:6c:fe:63:dc:18:68:52:26:b8:ec:84:17: af:ac:e2:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC MTc3OEM2QzEwHhcNMjYwNTEzMDU1NjUzWhcNMjYwNTIwMDU1NjUzWjAYMRYwFAYD VQQDEw02YTA0MTJhNS02NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW3/ExOcKseqhAEFzTZ/6CW+7g97IWhBMJUeNp/vbv27DhwPiyRFTjagjj4g W2BboXSiDmD2o60LS/Bq8EoAKfC0h8wFsV1HVcAfrf3J4fsc4l1cRGs/cBcd2AbX WacZ9HxvwrCJXA8AQLIa//rKiqBSpeS3jntGZN4O1Lu+8iG7I4nGWndGWFeHQt7t KBllD4bIVoBWiakrJxtNZ5sRgZVMDe57TtCPztBy8CePyVd5nOCpclsQ8ILRuT/7 mtfFuv3/wW6J6hsH7NdZHlesr9ttiJx7J/7H3/P2WEcwJYv4KZ4bq2RFjW1wRrPO T1liTHNVDRPqUiQ1k6c/WlY2kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCcJvT7 fp3cj+4OCOEqlfBCWQU4MB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy ZlpZazVwSW5yUW14ZDR4c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXw+HjxeRFDxd9FZal0eoxh9vwE09ph2spH7MK3olOZAKS/vfVmsZVWmYqps3 7PMWQrTaKSU1HNoPVf/0gfjFDnVdm89p6wpG0MCUpe8B0Vz9A6E2rXMcRrojVYCr /FSkv+GLktFx6PA/h9/dR0pkJ36kk5Xxb29HvmA7VuKnlkymHxyHVhxajWED90m6 9tFy93uNx0wjbLNiRnmcQnMicjixnuVnDWBJVRcuV/2BFkFDKbGxGAnO/Op/qoOY ur7g9p3uqC/typpB/Lx1PfiHe8Y9k0IyNJdYnb3MtPFiePwN7/8+aZuhujFR9se4 YKgIbP5j3BhoUia47IQXr6ziNQ== -----END CERTIFICATE-----Generated at Wed May 13 11:44:59 2026 by rpki-client