$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json) Hash identifier: Iuz7QVA9yghqktJ0uM/hLzxS5aQxKErMaroCnoRQXAY= Subject key identifier: D9:EE:60:32:E9:D7:F3:A3:26:30:A0:7F:3D:4A:7B:03:5B:78:DB:CE Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft Manifest number: 045F Signing time: Thu 26 Mar 2026 23:56:43 +0000 Manifest this update: Thu 26 Mar 2026 23:56:42 +0000 Manifest next update: Thu 02 Apr 2026 23:56:42 +0000 Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: vc8BsocjO974/aBZgZXvN0bgE1xIHJPLypet1bpvbKw=) 2: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: 2+6KJayAWnQFJXHL2WauDqgBMec8ccqiiY0r+7oqsgs=) 3: F4639D76356211F09A66C487C4F9AE02.roa (hash: 1UN4KPGqZ6uoZhzgBcPw2J3Eo3ejGF+DzvEQ3A+zIIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Validity Not Before: Mar 26 23:56:42 2026 GMT Not After : Apr 2 23:56:42 2026 GMT Subject: CN=69c5c7ba-e4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:77:e7:f8:fc:60:27:63:80:67:76:36:17: 6d:1a:52:c6:b2:d6:ac:1f:1f:50:03:60:6b:8b:86: c2:66:db:39:63:b5:b3:74:39:9d:30:b5:f8:f3:f1: e1:4c:ef:90:45:76:60:4d:ce:07:af:36:b1:c0:f5: ad:83:58:d1:fa:07:76:0a:4f:51:82:35:51:b2:77: af:6d:57:77:7a:cf:fc:8f:1f:84:b8:d8:93:eb:46: 7c:59:93:b4:aa:31:05:76:12:39:9f:e8:68:6c:1b: d9:93:21:80:50:b8:fb:4b:44:21:0a:92:e5:a6:38: ea:8b:75:80:8c:1f:4f:81:37:37:61:cd:9e:0b:9e: 94:91:c5:b8:ab:11:29:83:8e:e9:48:8f:c2:6e:3e: 32:19:16:48:36:36:e6:10:e1:d7:b6:b7:25:7c:7e: f8:30:0d:8c:45:c1:1d:9b:5b:8d:b1:67:a1:ac:54: 05:54:a1:dc:0f:72:6c:ec:a2:ef:d3:45:d8:c9:b2: 50:3a:75:9b:3d:98:a4:ee:8e:09:14:e0:39:f2:b7: da:dd:e0:4b:34:6b:d0:c3:3a:92:f3:2d:88:30:f5: e2:ad:a2:9b:3d:dd:da:e3:34:b8:8e:56:3b:33:cd: 37:1a:3e:2a:82:55:54:1c:97:72:c1:91:39:37:cc: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:60:32:E9:D7:F3:A3:26:30:A0:7F:3D:4A:7B:03:5B:78:DB:CE X509v3 Authority Key Identifier: keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:2e:f1:6f:ed:d6:a0:46:4d:91:f2:2f:75:88:c7:71:35: b4:60:06:73:63:8b:88:35:0c:08:bc:1b:ce:b3:48:ae:4d:22: 6d:73:ee:9c:8d:a9:e5:39:d8:c9:13:6e:a4:bd:2e:20:7e:df: 94:56:2a:8f:c0:06:71:40:b2:ec:8f:b8:e0:71:83:a9:75:cd: 08:a6:cc:c7:3d:a6:3b:c2:73:27:89:d4:a2:40:96:ec:3a:43: a6:45:58:7e:a8:3c:d6:38:d4:da:c9:a5:05:5c:95:da:5a:b0: 8f:66:b1:a9:55:e2:71:9d:c8:34:8a:08:fe:c7:c5:4e:4c:30: 61:d9:39:38:06:b0:aa:f1:8e:32:90:ed:2d:1c:0e:cf:84:9f: a3:99:73:ab:97:00:7d:2a:26:ac:e6:59:32:0c:ea:dc:18:12: 50:e5:7d:82:02:ea:5c:f6:81:57:6b:48:eb:dc:67:e4:cb:41: 2f:e9:e4:a2:c5:80:79:78:73:28:4a:cb:d4:5b:1b:1c:9a:b6: 5c:f6:66:66:2c:41:6f:4d:3b:20:7d:98:01:79:0a:ab:80:b8: 5a:48:26:b5:d1:a7:47:4a:a3:54:f6:2c:81:f3:03:5f:a1:13: f9:cf:1d:a8:c6:24:5a:21:0e:75:5f:68:ea:76:0e:0b:c7:d5: 7f:3b:86:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD QUY0NkQ3RDkwHhcNMjYwMzI2MjM1NjQyWhcNMjYwNDAyMjM1NjQyWjAYMRYwFAYD VQQDEw02OWM1YzdiYS1lNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVV35/j8YCdjgGd2NhdtGlLGstasHx9QA2Bri4bCZts5Y7WzdDmdMLX48/Hh TO+QRXZgTc4HrzaxwPWtg1jR+gd2Ck9RgjVRsnevbVd3es/8jx+EuNiT60Z8WZO0 qjEFdhI5n+hobBvZkyGAULj7S0QhCpLlpjjqi3WAjB9PgTc3Yc2eC56UkcW4qxEp g47pSI/Cbj4yGRZINjbmEOHXtrclfH74MA2MRcEdm1uNsWehrFQFVKHcD3Js7KLv 00XYybJQOnWbPZik7o4JFOA58rfa3eBLNGvQwzqS8y2IMPXiraKbPd3a4zS4jlY7 M803Gj4qglVUHJdywZE5N8zx1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnuYDLp 1/OjJjCgfz1KewNbeNvOMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0NS9FMEQ5RjM2NDhDOTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdI Z0tCd1Y4c3l0eTdLOUcxOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfYu8W/t1qBGTZHyL3WIx3E1tGAGc2OLiDUMCLwbzrNIrk0ibXPunI2p5TnY yRNupL0uIH7flFYqj8AGcUCy7I+44HGDqXXNCKbMxz2mO8JzJ4nUokCW7DpDpkVY fqg81jjU2smlBVyV2lqwj2axqVXicZ3INIoI/sfFTkwwYdk5OAawqvGOMpDtLRwO z4Sfo5lzq5cAfSomrOZZMgzq3BgSUOV9ggLqXPaBV2tI69xn5MtBL+nkosWAeXhz KErL1FsbHJq2XPZmZixBb007IH2YAXkKq4C4WkgmtdGnR0qjVPYsgfMDX6ET+c8d qMYkWiEOdV9o6nYOC8fVfzuGBg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:47:07 2026 by rpki-client