$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: 1GetmGOXF3zLKu2dsb986WekXWT23wU4gty/Wppuzv0= Subject key identifier: 93:2A:84:80:B2:FE:51:75:62:A1:08:A5:2C:29:59:87:25:4E:B2:53 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 013F Signing time: Thu 23 Jul 2026 07:16:51 +0000 Manifest this update: Thu 23 Jul 2026 07:16:51 +0000 Manifest next update: Thu 30 Jul 2026 07:16:51 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: bGiDOVudVFnfZuj2Ye8uI9UhwxV0bNkef/CjGQIO8Os=) 2: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=) 3: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=) 4: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=) 5: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Jul 23 07:16:51 2026 GMT Not After : Jul 30 07:16:51 2026 GMT Subject: CN=6a61bfe3-d663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:c4:7a:95:81:8a:ba:31:2a:59:a2:ba:97: cf:8f:c8:d0:89:85:7e:c5:5a:b9:02:f8:a5:01:8d: d8:3c:e7:85:a1:ae:17:7b:8f:5e:1c:e1:8e:c5:d6: 4b:01:c2:da:63:3f:1e:b2:52:d4:af:b4:68:50:80: 77:ba:3a:34:68:3e:11:68:ee:59:83:8c:9c:a4:3c: 05:21:f2:66:1a:03:19:13:98:a6:0a:7c:90:c8:8f: 6d:c7:d8:de:37:1e:ee:9d:54:85:31:6b:2c:8d:d8: ce:49:48:23:f1:ef:13:16:1f:78:56:49:34:6e:f0: 02:15:99:a5:85:58:b7:27:96:1c:14:82:a7:2a:b8: 96:2f:44:d7:86:01:ca:ce:1b:70:52:f7:b5:a5:63: 56:db:b7:8d:64:d1:31:31:ba:3c:dd:a7:86:92:0b: dc:94:82:a2:c6:ec:fc:ef:b8:ad:f0:68:98:48:62: 8c:32:6e:c4:11:cd:0a:5c:60:3b:ad:d8:89:c9:b8: 52:b2:71:78:9e:70:7b:75:89:f6:4a:17:f9:a3:c5: 09:1a:fd:53:86:8e:5c:a4:44:84:c2:72:cf:62:92: b3:02:f6:40:9b:dc:65:44:68:c9:82:64:97:8d:6f: 6d:65:0a:92:65:cf:9d:cc:9f:c8:8c:21:5c:a7:4d: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:84:80:B2:FE:51:75:62:A1:08:A5:2C:29:59:87:25:4E:B2:53 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6f:ac:b1:66:b4:ba:b0:b1:39:d1:39:f3:e7:da:5e:13:1e: fd:28:63:ec:ae:2d:b3:aa:8c:82:ba:38:44:72:21:9c:06:89: 16:ec:2e:2d:45:f5:8d:5d:2b:0b:06:20:a0:32:0b:47:fd:c7: 3f:40:7f:dd:c7:a0:3f:79:98:6e:48:9a:e9:3c:a8:73:95:0f: b6:09:68:03:7a:c5:a8:29:01:ba:a9:39:ac:29:2a:64:00:6f: be:0c:96:b2:0b:a8:2d:98:04:92:a9:57:86:47:8f:30:52:41: 1d:d6:6e:a7:52:05:43:55:76:d8:91:7d:8f:76:0d:4c:a9:ee: 50:a6:46:07:67:d3:3a:10:4f:c5:43:0a:d5:e7:59:4f:ec:b5: b4:17:15:c6:29:23:03:4d:37:d8:5d:d8:1d:d2:c2:f3:61:d1: cd:cc:40:cc:a4:e7:b2:7d:08:a4:99:2e:87:33:88:df:58:38: 94:f2:cc:42:ef:f5:f1:31:4e:21:79:18:ff:bd:22:3e:c8:9f: c5:03:7d:62:c3:4c:5f:a1:2d:a8:39:a9:bc:52:0b:72:e3:a5: 8b:49:9c:b5:d9:25:b8:93:b9:2b:66:5c:95:cc:f9:3c:22:15: 1f:c9:62:38:b5:60:4d:a1:cd:ce:3c:90:3c:4d:4e:0a:51:8a: d8:13:b0:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjYwNzIzMDcxNjUxWhcNMjYwNzMwMDcxNjUxWjAYMRYwFAYD VQQDEw02YTYxYmZlMy1kNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueTEepWBiroxKlmiupfPj8jQiYV+xVq5AvilAY3YPOeFoa4Xe49eHOGOxdZL AcLaYz8eslLUr7RoUIB3ujo0aD4RaO5Zg4ycpDwFIfJmGgMZE5imCnyQyI9tx9je Nx7unVSFMWssjdjOSUgj8e8TFh94Vkk0bvACFZmlhVi3J5YcFIKnKriWL0TXhgHK zhtwUve1pWNW27eNZNExMbo83aeGkgvclIKixuz877it8GiYSGKMMm7EEc0KXGA7 rdiJybhSsnF4nnB7dYn2Shf5o8UJGv1Tho5cpESEwnLPYpKzAvZAm9xlRGjJgmSX jW9tZQqSZc+dzJ/IjCFcp00/UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMqhICy /lF1YqEIpSwpWYclTrJTMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb2+ssWa0urCxOdE58+faXhMe/Shj7K4ts6qMgro4RHIhnAaJFuwuLUX1jV0r CwYgoDILR/3HP0B/3cegP3mYbkia6Tyoc5UPtgloA3rFqCkBuqk5rCkqZABvvgyW sguoLZgEkqlXhkePMFJBHdZup1IFQ1V22JF9j3YNTKnuUKZGB2fTOhBPxUMK1edZ T+y1tBcVxikjA0032F3YHdLC82HRzcxAzKTnsn0IpJkuhzOI31g4lPLMQu/18TFO IXkY/70iPsifxQN9YsNMX6EtqDmpvFILcuOli0mctdkluJO5K2Zclcz5PCIVH8li OLVgTaHNzjyQPE1OClGK2BOwMg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:49:13 2026 by rpki-client