$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: M2BQ9qABnLGrqeuMkNR16HfSaN2yF/zX7phWkYnielc= Subject key identifier: 7D:1C:FA:4D:31:CA:8D:7E:0C:16:AA:40:FD:5F:18:CD:9A:6A:16:8A Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 19EF Signing time: Tue 12 May 2026 16:22:20 +0000 Manifest this update: Tue 12 May 2026 16:22:20 +0000 Manifest next update: Tue 19 May 2026 16:22:20 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: MCtMgQ6v40wpO7nSU5qt3LxrY4gfXE0Z14OaxPZ4FeE=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: whf91COmOS4nmBy8X3NCysn1mTlxA8VZykZt4Rg2IFU=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: UVagvNv2xQNSD/DTi1pYnkPAd6yaMMHes6alyvk08Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6665 (0x1a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: May 12 16:22:20 2026 GMT Not After : May 19 16:22:20 2026 GMT Subject: CN=6a0353bc-0a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:85:8c:82:b7:ce:cc:7c:af:d6:cf:74:7f: 78:a6:49:14:62:c3:b9:91:7a:95:af:e6:58:80:eb: d7:42:bb:0b:40:86:3a:a1:4f:1d:31:cb:58:3a:39: ce:99:c1:f3:da:7e:a3:39:a0:47:99:02:8c:d8:ad: 1d:97:d0:a2:f3:72:a3:e4:2d:72:36:5a:68:d5:bc: a4:4b:52:b9:4f:e9:1b:9a:52:f4:1e:ef:c0:3e:12: 78:f1:a3:bc:a5:74:b0:3d:31:1d:04:01:24:4e:5e: 72:50:6a:7b:f4:ce:1e:45:20:61:21:3d:dc:77:41: 1c:56:66:2e:67:d2:b5:39:38:b2:35:dc:92:bd:d1: a5:b2:1a:e3:76:69:f3:0c:6a:22:65:0e:4d:ba:61: cd:19:ef:f7:38:d7:ed:ea:1a:25:6a:b9:ff:47:1c: 42:01:18:5f:62:f2:e1:88:2a:68:8d:f5:45:52:86: 94:73:8b:4d:1a:2c:1f:1b:2e:57:8c:61:c6:cb:df: e8:61:b4:4b:80:07:09:dd:4f:00:4c:fa:ae:7c:9f: 5c:16:a6:04:fb:f8:e9:40:19:2d:51:7c:ad:bd:35: 95:df:ee:58:45:7b:fa:b2:c2:40:46:ad:2e:6e:62: 65:c4:71:d9:b5:ca:db:c0:5e:12:ff:2b:51:8f:c1: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:FA:4D:31:CA:8D:7E:0C:16:AA:40:FD:5F:18:CD:9A:6A:16:8A X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f8:90:34:5c:98:9a:25:ec:37:5d:82:95:34:c1:c9:1e:3d: 12:c3:df:b8:1e:d9:d0:ea:c8:cd:1d:79:f1:5d:fb:72:81:40: 11:c3:bd:5e:e2:36:ca:17:6c:1b:e4:4b:b4:85:b3:09:cd:38: eb:b7:e1:14:b7:87:3d:dc:21:a6:0c:9d:88:5e:27:ca:ec:48: e5:fc:18:42:f5:88:67:34:78:b7:a7:b5:89:74:e6:58:df:f6: b3:76:4c:60:44:8e:c1:0d:aa:64:2c:f4:bc:7c:76:57:2d:f8: db:72:38:c1:ae:9c:3d:c1:f3:6a:1e:23:d7:72:16:23:54:6f: 23:52:3a:0a:e1:31:f0:e5:10:e2:fb:f8:20:8d:4c:b2:58:3e: fe:e9:21:09:c6:3e:6a:a1:2d:32:8d:20:bb:cb:75:9b:68:84: e6:94:b7:5c:28:cf:8f:c8:f6:ed:c4:ed:1d:38:98:80:75:8a: 1e:9a:df:fa:21:fb:5a:61:2a:27:6e:3b:11:bb:66:d5:bf:ad: 40:c6:8f:b1:83:6b:2a:98:c6:b4:d7:49:6b:32:bc:dd:49:35: 2f:57:64:07:9f:37:78:0b:08:91:98:06:2a:b6:2c:d8:e5:fa: a4:e6:74:8f:39:78:c4:75:ce:f6:ec:53:88:78:88:17:f1:23: 2b:95:19:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjYwNTEyMTYyMjIwWhcNMjYwNTE5MTYyMjIwWjAYMRYwFAYD VQQDEw02YTAzNTNiYy0wYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi2FjIK3zsx8r9bPdH94pkkUYsO5kXqVr+ZYgOvXQrsLQIY6oU8dMctYOjnO mcHz2n6jOaBHmQKM2K0dl9Ci83Kj5C1yNlpo1bykS1K5T+kbmlL0Hu/APhJ48aO8 pXSwPTEdBAEkTl5yUGp79M4eRSBhIT3cd0EcVmYuZ9K1OTiyNdySvdGlshrjdmnz DGoiZQ5NumHNGe/3ONft6holarn/RxxCARhfYvLhiCpojfVFUoaUc4tNGiwfGy5X jGHGy9/oYbRLgAcJ3U8ATPqufJ9cFqYE+/jpQBktUXytvTWV3+5YRXv6ssJARq0u bmJlxHHZtcrbwF4S/ytRj8Eg0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0c+k0x yo1+DBaqQP1fGM2aahaKMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt/iQNFyYmiXsN12ClTTByR49EsPfuB7Z0OrIzR158V37coFAEcO9XuI2yhds G+RLtIWzCc0467fhFLeHPdwhpgydiF4nyuxI5fwYQvWIZzR4t6e1iXTmWN/2s3ZM YESOwQ2qZCz0vHx2Vy3423I4wa6cPcHzah4j13IWI1RvI1I6CuEx8OUQ4vv4II1M slg+/ukhCcY+aqEtMo0gu8t1m2iE5pS3XCjPj8j27cTtHTiYgHWKHprf+iH7WmEq J247Ebtm1b+tQMaPsYNrKpjGtNdJazK83Uk1L1dkB583eAsIkZgGKrYs2OX6pOZ0 jzl4xHXO9uxTiHiIF/EjK5UZiw== -----END CERTIFICATE-----Generated at Wed May 13 03:04:57 2026 by rpki-client