$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: 7Xcvqjf4k+7ThHtLMtpmNXRPKwXCkVH4P1zaipIBJJs= Subject key identifier: 67:4F:EC:6A:48:E8:8B:4C:A0:89:ED:19:D3:EC:E0:B6:2D:E6:C4:FB Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 0435 Signing time: Wed 29 Jul 2026 01:00:47 +0000 Manifest this update: Wed 29 Jul 2026 01:00:46 +0000 Manifest next update: Wed 05 Aug 2026 01:00:46 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: u0xNVkYbxn521/VbZMSo4OrKYNufKE9DRoljmsotxRk=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: DeN5+WLuYB95EX5XxNOKqEvwckp++ai7lfprhRYcj3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Jul 29 01:00:46 2026 GMT Not After : Aug 5 01:00:46 2026 GMT Subject: CN=6a6950bf-c67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:87:c8:13:3d:92:f2:69:15:29:b8:58:10: 95:6a:64:4c:ab:d7:78:9e:9f:d9:11:b7:15:a4:9b: a8:ff:aa:17:54:15:30:55:62:fc:7c:ba:e3:64:36: 0c:a3:ab:e4:5f:cc:74:49:49:d4:10:df:d9:bc:37: 63:24:95:bb:d2:af:93:96:86:d4:d7:45:14:6f:21: 42:db:31:b5:35:39:14:ed:c2:28:89:94:e7:e8:e6: c1:25:46:d1:11:80:ba:99:e9:3c:94:67:03:26:69: 5d:22:bd:df:b0:d1:a1:cd:fd:70:ed:e3:fc:fb:eb: 4b:fd:05:6a:a1:06:17:c6:9e:42:69:29:58:d1:c3: be:b2:3e:3c:1d:15:cf:c2:9f:3f:2a:a2:57:ca:fe: 9a:f0:41:02:66:c4:b8:78:33:4a:e8:2a:56:c1:25: c0:55:7a:a5:34:10:dd:fc:69:64:4e:c4:2e:ff:c1: 72:60:82:a5:e4:24:4f:9c:0b:45:73:e7:f9:c5:e8: 67:e8:9e:09:45:18:92:20:4f:39:0a:c1:3d:f3:cb: ae:fd:ca:11:ef:c2:82:c9:99:e0:36:eb:cd:12:54: 9c:36:fc:1c:f8:94:7e:1b:74:f2:d7:fb:1d:52:12: d8:7b:9b:01:7b:4d:4c:08:3b:d0:4e:65:d6:40:a1: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4F:EC:6A:48:E8:8B:4C:A0:89:ED:19:D3:EC:E0:B6:2D:E6:C4:FB X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e0:69:9b:d9:47:9a:75:87:a7:46:5c:15:dd:86:63:d2:0b: 78:6b:88:d6:ce:3c:06:39:02:3c:00:67:85:eb:eb:4e:c9:d9: 82:d1:10:ee:01:9e:9b:d8:e7:32:39:6f:29:b2:ca:86:ff:49: 27:8f:28:d0:1e:38:ee:b3:06:57:9e:f2:d5:4c:58:9b:f6:f4: 24:40:84:c2:f1:5c:22:6b:bf:58:95:00:9b:6b:ac:71:a5:f5: 1e:a3:3d:a7:17:02:0c:1d:f3:f2:2f:c1:ae:b4:a3:ca:6c:ce: f0:1f:ef:02:73:33:3a:a5:7c:73:9c:5b:a0:89:b3:14:17:0e: 22:e8:a6:26:19:78:a5:5a:46:4b:71:05:00:08:86:06:d8:59: 84:39:0d:3c:99:97:5d:50:7c:9a:29:f8:35:38:3b:f3:56:2a: 0b:de:99:f4:fd:8d:b5:0f:69:44:fa:5d:8e:fc:a5:f9:2a:cc: 69:9b:9b:bf:6f:f5:b0:3c:d0:ed:a1:29:5b:12:36:e6:70:fc: 36:58:3f:82:3b:1a:38:77:5e:3e:58:d7:07:2c:83:b2:79:2f: 38:18:98:3f:49:f6:12:86:28:a1:55:9d:82:f0:c4:a5:54:8f: dd:a7:47:37:de:6f:7b:7a:04:a7:52:28:ef:3a:38:a0:f4:06: 76:b4:b9:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjYwNzI5MDEwMDQ2WhcNMjYwODA1MDEwMDQ2WjAYMRYwFAYD VQQDEw02YTY5NTBiZi1jNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8SHyBM9kvJpFSm4WBCVamRMq9d4np/ZEbcVpJuo/6oXVBUwVWL8fLrjZDYM o6vkX8x0SUnUEN/ZvDdjJJW70q+TlobU10UUbyFC2zG1NTkU7cIoiZTn6ObBJUbR EYC6mek8lGcDJmldIr3fsNGhzf1w7eP8++tL/QVqoQYXxp5CaSlY0cO+sj48HRXP wp8/KqJXyv6a8EECZsS4eDNK6CpWwSXAVXqlNBDd/GlkTsQu/8FyYIKl5CRPnAtF c+f5xehn6J4JRRiSIE85CsE988uu/coR78KCyZngNuvNElScNvwc+JR+G3Ty1/sd UhLYe5sBe01MCDvQTmXWQKEv1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdP7GpI 6ItMoIntGdPs4LYt5sT7MB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+Bpm9lHmnWHp0ZcFd2GY9ILeGuI1s48BjkCPABnhevrTsnZgtEQ7gGem9jn MjlvKbLKhv9JJ48o0B447rMGV57y1UxYm/b0JECEwvFcImu/WJUAm2uscaX1HqM9 pxcCDB3z8i/BrrSjymzO8B/vAnMzOqV8c5xboImzFBcOIuimJhl4pVpGS3EFAAiG BthZhDkNPJmXXVB8min4NTg781YqC96Z9P2NtQ9pRPpdjvyl+SrMaZubv2/1sDzQ 7aEpWxI25nD8Nlg/gjsaOHdePljXByyDsnkvOBiYP0n2EoYooVWdgvDEpVSP3adH N95ve3oEp1Io7zo4oPQGdrS5kg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:20:10 2026 by rpki-client