$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft File: hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json) Hash identifier: xXpkhhJ3qZ7G8y7b0ugT2UgYhAN8RoaGW+VngCDeg7Q= Subject key identifier: A7:EA:6B:BA:E3:7B:EF:A8:A8:3D:66:C0:3B:C2:8F:4A:B0:32:B5:7A Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft Manifest number: 20 Signing time: Wed 13 May 2026 09:03:55 +0000 Manifest this update: Wed 13 May 2026 09:03:54 +0000 Manifest next update: Wed 20 May 2026 09:03:54 +0000 Files and hashes: 1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: a7bFvuHT31VTuMps/2kLWn5pqwwaekv5wbKKPsr/rA4=) 2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D Validity Not Before: May 13 09:03:54 2026 GMT Not After : May 20 09:03:54 2026 GMT Subject: CN=6a043e7b-30ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:c9:7c:51:f8:eb:9e:73:5b:dc:fc:7d:3c: 5c:60:2a:78:5d:61:75:32:82:6f:d9:e5:96:aa:3e: c2:e4:83:0d:86:18:02:84:9d:22:4e:c0:8b:05:5d: 80:67:f3:1d:c3:80:67:20:c1:e3:5f:68:89:84:36: 83:b8:82:2b:f2:bf:09:bf:91:1b:38:6a:dc:e0:f0: f9:b7:6c:75:e6:57:1b:58:1b:6b:3f:eb:22:2d:6f: 24:08:e0:4f:27:61:86:5b:10:5b:0c:6a:15:85:61: a4:f0:63:b4:da:ce:5a:4a:f1:87:56:07:03:97:e2: 97:e9:4b:eb:3b:b1:65:2f:71:23:77:8a:63:2e:01: ef:af:b5:af:af:77:e4:1f:de:55:fa:b5:89:0b:bb: 7b:47:db:ad:fb:bc:b6:fe:d9:ba:cf:0b:f0:cd:59: b9:6f:c2:08:1e:f2:04:4d:49:95:1a:de:6a:c6:a7: bc:42:c7:30:70:cd:e9:46:b1:64:a7:31:17:62:f9: 31:05:1c:3e:7e:56:38:22:80:d3:5c:ae:ad:c1:20: 69:b2:08:2d:ec:b7:d6:c7:07:92:d8:6f:86:6c:be: de:99:5c:b9:81:49:13:22:ae:7c:a1:8c:51:a4:fe: 1b:f2:13:9b:23:7f:df:57:97:7c:40:c6:a5:06:b1: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:6B:BA:E3:7B:EF:A8:A8:3D:66:C0:3B:C2:8F:4A:B0:32:B5:7A X509v3 Authority Key Identifier: keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:37:cb:7e:28:af:a7:b3:4b:3c:09:3b:f1:9a:14:41:7f:d8: 33:68:a3:80:e4:fc:99:15:1f:9d:54:81:ed:7b:c5:23:3a:a4: fe:2c:8d:bc:b0:cb:3c:eb:72:cc:af:9b:a7:89:62:ee:85:3e: 7f:a0:05:15:b2:88:b3:ce:d5:f3:cd:84:6e:35:03:fa:15:2f: 32:44:dc:5b:b5:0c:3e:2a:76:dc:72:de:33:43:77:2e:38:14: 58:c3:fe:ad:d3:63:46:41:3e:31:7b:9b:d5:0a:df:72:a9:1a: a8:3f:97:17:d2:e9:47:08:fd:75:d2:f9:bc:46:e5:ea:06:f9: 7a:b6:e1:df:9f:3b:40:61:27:28:60:51:d8:f0:8b:a2:3b:2f: 3b:7b:d8:a5:c9:80:50:d6:13:5f:c7:b5:32:65:82:29:e3:19: 2b:f1:e9:f1:3a:3d:80:85:0b:48:da:4c:f5:3f:29:4a:b6:d9: 96:39:c4:33:a4:62:db:2f:51:41:ea:23:6f:00:b3:3c:91:57: 23:2b:da:0e:96:90:f0:5d:ef:35:4d:8e:4b:01:17:52:8a:14: e4:d0:65:bd:ba:37:09:22:8e:ab:a0:86:63:0b:43:6a:87:4d: e5:6d:79:51:4c:5f:68:07:96:e3:10:3e:c4:c6:1e:68:c2:2e: a4:29:35:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzBCQjExMC8GA1UEBRMoODY1OUUwRkVEQUNEQjY5MDEzOUVENUQzMzU1ODc0NzYy RDdBMTg5RDAeFw0yNjA1MTMwOTAzNTRaFw0yNjA1MjAwOTAzNTRaMBgxFjAUBgNV BAMTDTZhMDQzZTdiLTMwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpisl8UfjrnnNb3Px9PFxgKnhdYXUygm/Z5ZaqPsLkgw2GGAKEnSJOwIsFXYBn 8x3DgGcgweNfaImENoO4givyvwm/kRs4atzg8Pm3bHXmVxtYG2s/6yItbyQI4E8n YYZbEFsMahWFYaTwY7TazlpK8YdWBwOX4pfpS+s7sWUvcSN3imMuAe+vta+vd+Qf 3lX6tYkLu3tH2637vLb+2brPC/DNWblvwgge8gRNSZUa3mrGp7xCxzBwzelGsWSn MRdi+TEFHD5+VjgigNNcrq3BIGmyCC3st9bHB5LYb4Zsvt6ZXLmBSRMirnyhjFGk /hvyE5sjf99Xl3xAxqUGsbblAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp+pruuN7 76ioPWbAO8KPSrAytXowHwYDVR0jBBgwFoAUhlng/trNtpATntXTNVh0di16GJ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMEJCLzA5OTEyNzI4MjRE MTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBBVG50WFROVmgwZGkxNkdK MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGxuZ190ck50cEFUbnRYVE5WaDBkaTE2R0owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MEJCLzA5OTEyNzI4MjREMTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBB VG50WFROVmgwZGkxNkdKMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMN8t+KK+ns0s8CTvxmhRBf9gzaKOA5PyZFR+dVIHte8UjOqT+LI28sMs863LM r5uniWLuhT5/oAUVsoizztXzzYRuNQP6FS8yRNxbtQw+Knbcct4zQ3cuOBRYw/6t 02NGQT4xe5vVCt9yqRqoP5cX0ulHCP110vm8RuXqBvl6tuHfnztAYScoYFHY8Iui Oy87e9ilyYBQ1hNfx7UyZYIp4xkr8enxOj2AhQtI2kz1PylKttmWOcQzpGLbL1FB 6iNvALM8kVcjK9oOlpDwXe81TY5LARdSihTk0GW9ujcJIo6roIZjC0Nqh03lbXlR TF9oB5bjED7Exh5owi6kKTW3 -----END CERTIFICATE-----Generated at Wed May 13 15:54:56 2026 by rpki-client