$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft File: He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json) Hash identifier: Y4fbO5vwRZGR7XucvLxpn4JKTHEoIR2zkar2lSCvOgo= Subject key identifier: CC:E2:81:E9:25:66:C5:D8:22:83:79:A5:EE:7E:4E:B6:C8:13:81:04 Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft Manifest number: 02B2 Signing time: Mon 27 Jul 2026 02:48:24 +0000 Manifest this update: Mon 27 Jul 2026 02:48:23 +0000 Manifest next update: Mon 03 Aug 2026 02:48:23 +0000 Files and hashes: 1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: B2aqCjpug0Fs9am8MtgmEydUOKxOC7brEzYJdgsO7dQ=) 2: 54365208708411EDA8B14246C4F9AE02.roa (hash: XkgCUe6o/GCC4RXMS466VJWBGD4478vydtNuBFIJtZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Jul 27 02:48:23 2026 GMT Not After : Aug 3 02:48:23 2026 GMT Subject: CN=6a66c6f8-760d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:38:e2:01:5b:92:22:06:5b:67:df:4c:cd: 15:77:92:ee:9c:b9:37:39:8a:98:b9:e8:f6:4e:2a: bd:5b:79:58:64:af:aa:40:bc:28:26:36:ac:e4:4a: 00:a9:f8:85:56:f8:8d:aa:10:84:f0:c3:71:b2:1f: a7:64:88:e0:86:2a:5b:dd:7e:b8:3d:c0:27:b7:e1: 0c:cb:f5:cb:86:8d:26:00:82:aa:9b:af:f1:c2:0b: f0:f0:d4:4f:90:60:48:8b:e9:bc:28:83:be:61:2e: 7c:78:00:12:51:e7:49:d7:06:be:33:93:43:d7:da: ff:a1:9b:c9:04:c5:59:9d:63:be:30:d8:08:f1:f8: cc:9d:d0:0c:ab:e3:0e:be:03:fe:8f:c8:e8:98:62: 8c:dd:d2:fe:91:a6:1d:c5:bd:e0:2b:19:1e:d1:40: be:ed:4f:24:1a:cb:91:db:e9:04:1b:3d:21:db:0d: d8:a7:33:b5:d3:4a:36:b8:49:c3:14:be:f1:74:36: af:38:ec:1d:2e:c0:34:5d:a3:36:9a:9e:8c:78:33: 05:7c:fc:3e:5a:c2:69:39:18:4c:de:a4:6c:14:7f: 65:9e:97:34:85:ab:04:17:1b:b4:10:6a:e3:31:90: 50:ec:56:b6:64:38:7a:24:ca:b2:24:ae:a2:53:43: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:81:E9:25:66:C5:D8:22:83:79:A5:EE:7E:4E:B6:C8:13:81:04 X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f7:b7:b0:41:c1:d8:54:36:6d:02:76:e2:f4:e6:78:86:ec: bc:4e:82:8f:ec:1c:80:12:07:ed:37:48:33:34:34:99:d2:a0: 95:80:7a:66:72:58:9a:f4:9b:f3:f3:fc:80:97:a0:bb:75:e2: 71:c5:eb:8c:5f:2e:ff:65:57:6b:dd:22:8c:40:59:cb:79:cc: 9c:52:46:e8:e7:0c:d3:79:75:82:b1:01:b7:86:6f:11:8b:15: 82:22:9a:c7:95:eb:37:3a:bb:43:7d:fa:5e:4f:a0:b7:3e:2b: ed:5a:b5:e8:e1:42:ce:3d:a1:92:b0:3e:ba:31:f6:9c:e7:04: 45:d5:3a:f3:e1:4e:c3:41:26:30:ee:da:c0:df:e7:ca:92:bf: 48:89:14:cf:ae:1a:17:e8:cc:97:24:66:5f:70:c7:ec:80:44: a5:88:6d:e2:48:5e:0c:c6:0d:cf:5c:56:ce:c1:0f:d1:63:65: b9:dc:6b:d8:91:e4:56:94:ea:f3:98:72:77:8c:59:2d:4b:80: b0:42:ec:4e:2c:e4:e0:6b:80:33:31:63:b5:a9:4f:d3:56:fb: 75:28:fc:3e:ed:eb:58:82:47:48:c5:05:d4:c6:49:a6:c2:37: dd:af:ff:47:8b:b3:46:a1:67:3b:dd:ab:66:4b:75:eb:bb:a1: 29:ba:02:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjYwNzI3MDI0ODIzWhcNMjYwODAzMDI0ODIzWjAYMRYwFAYD VQQDEw02YTY2YzZmOC03NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFY44gFbkiIGW2ffTM0Vd5LunLk3OYqYuej2Tiq9W3lYZK+qQLwoJjas5EoA qfiFVviNqhCE8MNxsh+nZIjghipb3X64PcAnt+EMy/XLho0mAIKqm6/xwgvw8NRP kGBIi+m8KIO+YS58eAASUedJ1wa+M5ND19r/oZvJBMVZnWO+MNgI8fjMndAMq+MO vgP+j8jomGKM3dL+kaYdxb3gKxke0UC+7U8kGsuR2+kEGz0h2w3YpzO100o2uEnD FL7xdDavOOwdLsA0XaM2mp6MeDMFfPw+WsJpORhM3qRsFH9lnpc0hasEFxu0EGrj MZBQ7Fa2ZDh6JMqyJK6iU0Om5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzigekl ZsXYIoN5pe5+TrbIE4EEMB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODVFMy8xQjEyQTgyNDcwNzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdo amRldEJxMnF4SkVlUGk5NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMve3sEHB2FQ2bQJ24vTmeIbsvE6Cj+wcgBIH7TdIMzQ0mdKglYB6ZnJYmvSb 8/P8gJegu3XiccXrjF8u/2VXa90ijEBZy3nMnFJG6OcM03l1grEBt4ZvEYsVgiKa x5XrNzq7Q336Xk+gtz4r7Vq16OFCzj2hkrA+ujH2nOcERdU68+FOw0EmMO7awN/n ypK/SIkUz64aF+jMlyRmX3DH7IBEpYht4kheDMYNz1xWzsEP0WNludxr2JHkVpTq 85hyd4xZLUuAsELsTizk4GuAMzFjtalP01b7dSj8Pu3rWIJHSMUF1MZJpsI33a// R4uzRqFnO92rZkt167uhKboCcg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:51 2026 by rpki-client