$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: 5b21IUX5ZMWUZNoRfgjm6uCytffzAldPLYVzfIBKL6k= Subject key identifier: CB:B6:5B:5C:E3:1A:46:6F:97:6E:0D:D1:3E:30:77:CC:D3:24:E0:C5 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 0745 Signing time: Tue 28 Jul 2026 22:20:29 +0000 Manifest this update: Tue 28 Jul 2026 22:20:28 +0000 Manifest next update: Tue 04 Aug 2026 22:20:28 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: hvfrSm6rrSM1OLTXKMqUR+GTgvPwB18qTWrXeNWBrdM=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Jul 28 22:20:28 2026 GMT Not After : Aug 4 22:20:28 2026 GMT Subject: CN=6a692b2d-0a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:d3:54:af:fd:da:bc:3b:73:8f:5a:06:1c: e1:50:54:e8:e5:24:61:b7:16:bd:4f:a7:e4:eb:93: 25:91:c0:1d:1d:b4:84:af:09:b6:df:01:39:bd:a5: ea:f3:7e:ab:b9:99:c1:c4:a4:63:ab:5a:56:0e:9d: 1d:fb:47:9d:85:a9:f0:a7:bb:ee:db:e6:1b:44:17: 73:8d:80:a8:7e:dd:b4:a4:d9:da:40:0a:93:f4:bb: af:46:96:96:42:69:c3:70:1e:8a:63:b6:bf:00:ef: 27:a2:ef:6a:e9:7c:67:0d:5f:ff:2e:07:f1:cb:09: 41:21:e6:ae:80:0d:85:50:b8:f8:32:b2:92:02:bc: 21:fe:f5:4c:d6:30:7e:40:5f:dd:96:89:19:4c:1c: bf:7e:12:5f:06:44:19:86:2b:9e:4e:54:d5:3c:33: 0c:71:c2:d2:3b:7a:73:3b:1e:41:c3:0a:cf:34:f5: 36:97:c1:0f:f6:3f:d8:26:4c:d0:9f:9e:52:bc:8f: 88:ba:7a:ad:a1:e6:8f:b9:20:ab:d8:a0:da:63:2a: df:67:66:91:ae:77:1a:45:a6:0b:af:e9:f5:38:ce: 1b:15:3c:fe:4b:cd:e7:5b:78:f1:98:cb:19:84:4b: 8d:4f:ce:0d:50:73:37:b9:dd:99:db:62:42:25:cf: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B6:5B:5C:E3:1A:46:6F:97:6E:0D:D1:3E:30:77:CC:D3:24:E0:C5 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a6:f4:8c:28:ab:a6:25:9c:e0:a9:69:f6:cd:72:58:45:12: 15:53:71:e0:b6:ea:8b:86:d6:fa:02:d3:8f:26:7e:d2:ca:af: 0d:74:9a:19:56:0e:f0:ec:b1:4a:28:73:09:55:f2:11:61:04: a8:0a:f1:17:df:e5:c9:4e:42:1f:8c:99:5a:d1:b9:45:cd:ac: bf:d9:e7:38:30:a8:9f:1c:75:49:cf:3b:25:d9:aa:b3:a9:9a: 1b:7a:ee:73:68:01:9c:67:83:4d:f5:f9:9d:8a:24:6c:13:d6: 51:15:ba:a7:58:e0:6b:b5:0d:4b:3f:ff:fa:72:d8:05:42:9e: ae:09:79:14:01:35:30:ab:2c:33:4c:cf:96:0a:01:5b:c5:82: 00:db:d0:6e:f3:19:46:a1:02:2c:32:72:a0:b7:e6:8c:b4:7d: f0:06:86:bd:37:fe:ca:a5:bf:ea:f4:84:02:2f:43:21:44:eb: f6:d6:26:12:8c:f8:92:5d:36:f4:44:ab:25:7b:f2:00:a4:be: e6:a8:93:82:ca:20:f1:e1:93:38:58:62:76:ec:ef:40:b1:45: 2c:31:3d:e9:fe:cc:59:70:30:ea:89:9e:a5:16:13:8b:48:5c: 5b:1c:b5:f4:3c:8d:2e:f1:23:26:d6:79:05:c4:80:d0:39:2f: ba:6f:bf:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjYwNzI4MjIyMDI4WhcNMjYwODA0MjIyMDI4WjAYMRYwFAYD VQQDEw02YTY5MmIyZC0wYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykjTVK/92rw7c49aBhzhUFTo5SRhtxa9T6fk65MlkcAdHbSErwm23wE5vaXq 836ruZnBxKRjq1pWDp0d+0edhanwp7vu2+YbRBdzjYCoft20pNnaQAqT9LuvRpaW QmnDcB6KY7a/AO8nou9q6XxnDV//LgfxywlBIeaugA2FULj4MrKSArwh/vVM1jB+ QF/dlokZTBy/fhJfBkQZhiueTlTVPDMMccLSO3pzOx5BwwrPNPU2l8EP9j/YJkzQ n55SvI+IunqtoeaPuSCr2KDaYyrfZ2aRrncaRaYLr+n1OM4bFTz+S83nW3jxmMsZ hEuNT84NUHM3ud2Z22JCJc9k2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMu2W1zj GkZvl24N0T4wd8zTJODFMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACqb0jCirpiWc4Klp9s1yWEUSFVNx4Lbqi4bW+gLTjyZ+0sqvDXSaGVYO8Oyx SihzCVXyEWEEqArxF9/lyU5CH4yZWtG5Rc2sv9nnODConxx1Sc87Jdmqs6maG3ru c2gBnGeDTfX5nYokbBPWURW6p1jga7UNSz//+nLYBUKergl5FAE1MKssM0zPlgoB W8WCANvQbvMZRqECLDJyoLfmjLR98AaGvTf+yqW/6vSEAi9DIUTr9tYmEoz4kl02 9ESrJXvyAKS+5qiTgsog8eGTOFhiduzvQLFFLDE96f7MWXAw6omepRYTi0hcWxy1 9DyNLvEjJtZ5BcSA0Dkvum+/HA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:58:32 2026 by rpki-client