$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: 4c+kiaDY64dieaemWBdXmNBtwRr8TYtp4oieI0lAOsQ= Subject key identifier: 4B:1F:E5:E0:96:9B:F7:EE:DD:D6:7D:17:64:F0:C5:85:75:80:0F:DC Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 0100 Signing time: Wed 25 Mar 2026 19:02:04 +0000 Manifest this update: Wed 25 Mar 2026 19:02:04 +0000 Manifest next update: Wed 01 Apr 2026 19:02:04 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: +eEfd69AglJvok8qFQ15PKJn15syzXVP/jE0ULTizbA=) 2: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: Tw9tkubBBNCNa0WzdkiGoAB9GeB7p8eEnqNQk5A660Q=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: wy1fO8emrrb11LIF29YjzsQF2VR/akidMRTHMxAcTfI=) 4: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=) 5: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Mar 25 19:02:04 2026 GMT Not After : Apr 1 19:02:04 2026 GMT Subject: CN=69c4312c-ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:83:87:e3:4f:3e:b4:43:25:7b:b2:6d:b9: ef:84:99:e8:de:fa:e5:a8:37:23:7c:9a:74:2a:f5: 53:ee:b2:90:42:31:20:91:1b:49:90:01:64:e4:35: d5:cf:d7:2d:d0:92:96:f8:d7:a9:20:de:9a:7d:c4: 62:72:34:23:a7:27:54:a2:8e:61:44:7f:5c:6e:77: 93:39:4f:49:33:67:e7:3d:4b:6e:1b:e1:a3:05:5d: 36:6d:56:0b:17:42:17:08:d1:f7:89:9a:ca:c0:a5: 9d:4a:24:b7:4a:ff:87:e9:17:b0:9c:52:7a:18:a5: c0:da:ce:8d:4d:43:3b:95:b2:d4:fc:3d:c3:a9:b3: fb:57:01:a9:61:a0:a0:52:90:39:2e:9b:34:35:be: ca:d8:26:65:a3:17:4c:32:c3:26:96:75:c0:b2:3f: d0:d6:2c:f6:0b:8a:75:91:55:72:b4:d1:f5:8a:0e: b0:11:8b:dd:87:8f:11:d5:4d:c7:9c:49:02:1b:16: 55:59:d1:2f:52:e2:c6:0d:89:45:14:b2:4b:a6:d2: e4:f2:66:fc:cf:0b:1c:ad:de:85:5d:81:36:30:65: cc:ad:58:dc:42:52:7d:84:25:e4:ce:49:ab:7b:61: f6:db:de:39:77:26:15:42:5b:12:61:c8:fb:ba:4d: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:E5:E0:96:9B:F7:EE:DD:D6:7D:17:64:F0:C5:85:75:80:0F:DC X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:11:6d:e8:24:37:42:80:8d:6a:96:d6:1a:13:30:54:cf:2a: 82:a0:4b:61:b5:ec:eb:1b:3a:e6:4e:41:6b:6f:e6:77:a7:62: 94:b3:0a:b7:bd:3d:d1:ae:37:88:38:81:c3:e8:cc:99:8f:8b: 66:cc:44:84:9c:0f:f2:c0:95:e4:b1:31:5a:a2:31:be:23:c9: 82:99:a3:9a:6f:c1:f4:d5:55:cc:f0:74:e9:a4:3d:92:3b:91: 93:36:7b:cb:40:58:ff:83:a3:ce:27:b6:fe:66:85:40:1e:8e: e7:e5:bb:1f:6e:89:8e:21:1e:20:9a:6a:68:50:ff:7e:f2:71: fb:01:81:48:98:0a:2d:42:37:d4:b4:00:76:9a:f7:35:1f:45: 63:0e:dc:62:5d:99:f4:64:6c:78:72:c0:cb:0c:0e:3e:a3:a8: 2d:9d:0a:e5:f2:61:4c:b3:50:bd:61:0a:b8:80:72:11:e9:25: e0:84:55:2b:9b:e8:bb:6c:11:1e:30:bf:bc:49:20:a7:94:f8: 0d:d5:5d:4f:ec:60:c2:15:f1:a9:af:7c:85:17:ae:a0:84:96: 9f:f2:b5:ce:35:7f:17:be:a7:c0:30:64:13:04:f5:5c:60:05: c2:95:d8:b5:23:7c:1a:2f:42:c5:48:4f:55:2c:d9:22:6d:fc: cf:aa:35:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjYwMzI1MTkwMjA0WhcNMjYwNDAxMTkwMjA0WjAYMRYwFAYD VQQDEw02OWM0MzEyYy1lYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp6Dh+NPPrRDJXuybbnvhJno3vrlqDcjfJp0KvVT7rKQQjEgkRtJkAFk5DXV z9ct0JKW+NepIN6afcRicjQjpydUoo5hRH9cbneTOU9JM2fnPUtuG+GjBV02bVYL F0IXCNH3iZrKwKWdSiS3Sv+H6RewnFJ6GKXA2s6NTUM7lbLU/D3DqbP7VwGpYaCg UpA5Lps0Nb7K2CZloxdMMsMmlnXAsj/Q1iz2C4p1kVVytNH1ig6wEYvdh48R1U3H nEkCGxZVWdEvUuLGDYlFFLJLptLk8mb8zwscrd6FXYE2MGXMrVjcQlJ9hCXkzkmr e2H22945dyYVQlsSYcj7uk1AYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsf5eCW m/fu3dZ9F2TwxYV1gA/cMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMBFt6CQ3QoCNapbWGhMwVM8qgqBLYbXs6xs65k5Ba2/md6dilLMKt7090a43 iDiBw+jMmY+LZsxEhJwP8sCV5LExWqIxviPJgpmjmm/B9NVVzPB06aQ9kjuRkzZ7 y0BY/4Ojzie2/maFQB6O5+W7H26JjiEeIJpqaFD/fvJx+wGBSJgKLUI31LQAdpr3 NR9FYw7cYl2Z9GRseHLAywwOPqOoLZ0K5fJhTLNQvWEKuIByEekl4IRVK5vou2wR HjC/vEkgp5T4DdVdT+xgwhXxqa98hReuoISWn/K1zjV/F76nwDBkEwT1XGAFwpXY tSN8Gi9CxUhPVSzZIm38z6o1kA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:24 2026 by rpki-client