$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft File: HQSsXQPY72rEMd4aeq57aHaBtjY.mft (raw, json) Hash identifier: wWwJn7+5grF4gqC5uZKnwsSKRaeAV/QsWOuo2MNVLIc= Subject key identifier: 1A:2F:FE:78:89:F3:34:20:7F:A6:25:A6:51:8D:4A:AA:87:10:A5:38 Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 Certificate issuer: /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Certificate serial: 08C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft Manifest number: 08AA Signing time: Sun 26 Jul 2026 21:12:12 +0000 Manifest this update: Sun 26 Jul 2026 21:12:11 +0000 Manifest next update: Sun 02 Aug 2026 21:12:11 +0000 Files and hashes: 1: HQSsXQPY72rEMd4aeq57aHaBtjY.crl (hash: opCNYywLWcz2qjM0RDKymyWV/Xaq8vOLKjLcClGoGps=) 2: 66EE9D94152511ECAD055780C4F9AE02.roa (hash: tHkWBsWt7zg/nHnhpSyeoXJLDbxfBsQ1sUqpG3dRgvY=) 3: 111E53B6152811ECB2C0B70BC4F9AE02.roa (hash: y/9w6PkfJPP5x9xoypT09kJGazem+FcljWHoJZSxFMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636 Validity Not Before: Jul 26 21:12:11 2026 GMT Not After : Aug 2 21:12:11 2026 GMT Subject: CN=6a66782c-880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:76:4e:e2:6c:2b:5e:dd:86:26:f1:fa:8a: 01:40:b1:fa:bf:e7:49:02:1b:f5:46:f5:9c:d4:4e: a4:15:e7:01:8b:fb:09:18:cf:b2:0a:92:33:26:18: 74:cd:93:5c:f8:01:1b:8b:75:8e:61:04:97:48:c7: ec:7b:0e:e3:95:56:cb:0d:49:4a:a2:cb:0e:59:a3: 60:ee:3f:a6:01:1a:56:ec:47:be:ca:d5:7b:0d:c9: be:28:06:8e:f2:b8:6b:12:09:9c:4c:bd:12:74:7c: b8:37:93:ab:d3:29:13:95:08:2a:5a:1f:e4:2d:c7: 37:07:e0:43:65:8d:27:35:a6:22:70:b5:ca:5a:1a: 33:94:36:8b:72:48:3a:c8:91:f4:16:99:3c:b3:64: a4:70:2a:47:9f:91:91:f5:ef:04:17:7f:66:89:32: f2:2c:c5:6b:86:98:ff:b1:f3:1d:7e:e2:63:ed:94: 00:2d:e7:cd:89:39:c1:9d:ab:c2:3c:52:06:0c:76: f5:1a:c0:29:0d:72:a7:83:f4:89:48:01:27:9f:4a: d8:e9:50:66:eb:67:cd:11:cd:1b:6d:c9:42:92:53: 00:55:bb:20:43:81:90:99:3c:e3:c0:d0:75:cc:0e: c6:bc:42:02:79:a5:f9:62:4a:e3:b1:4a:7a:ad:c7: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:FE:78:89:F3:34:20:7F:A6:25:A6:51:8D:4A:AA:87:10:A5:38 X509v3 Authority Key Identifier: keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ac:77:88:10:13:08:d6:88:8c:cd:41:d7:a6:0d:7f:d7:23: 6d:7d:00:1d:cd:ad:69:66:dd:39:01:09:eb:cf:83:54:ea:be: 89:69:44:2a:20:f7:f7:00:57:0f:98:8a:73:c4:b1:62:1a:a2: bb:10:47:ca:d9:e2:eb:c6:ef:42:2b:2a:d7:94:29:75:a6:e6: 1c:11:c0:06:34:7b:35:01:93:bb:45:ea:a6:b5:13:15:9e:54: 20:80:65:4c:45:fa:90:2f:8d:43:a9:cf:b1:83:ba:b7:fd:df: 6d:44:ff:cb:07:10:f4:b7:4d:5c:9c:9b:15:09:85:c4:3c:ce: 5b:7c:8d:66:8c:8b:a1:a3:1b:27:f4:16:84:04:6e:ef:09:2f: 7a:0f:37:ef:fc:d5:25:ee:66:fe:1c:16:64:e9:cd:ab:44:1d: 00:43:bd:01:ce:57:83:71:9d:26:d8:93:07:86:ea:2d:8a:72: 09:ba:dd:08:b3:3e:9a:ea:a4:a0:ee:39:b6:33:09:55:4b:99: 65:c3:3f:55:b6:67:f4:34:1d:32:4b:6e:f0:e7:06:65:e6:f2: cb:f2:65:7b:f1:a3:0c:57:ef:28:6d:de:86:cc:86:45:0f:07: d1:f7:8b:38:b3:e4:3e:57:08:69:4d:2e:b1:98:e0:26:56:b3: f5:8c:2a:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMkQxMTAvBgNVBAUTKDFEMDRBQzVEMDNEOEVGNkFDNDMxREUxQTdBQUU3QjY4 NzY4MUI2MzYwHhcNMjYwNzI2MjExMjExWhcNMjYwODAyMjExMjExWjAYMRYwFAYD VQQDEw02YTY2NzgyYy04ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjN2TuJsK17dhibx+ooBQLH6v+dJAhv1RvWc1E6kFecBi/sJGM+yCpIzJhh0 zZNc+AEbi3WOYQSXSMfsew7jlVbLDUlKossOWaNg7j+mARpW7Ee+ytV7Dcm+KAaO 8rhrEgmcTL0SdHy4N5Or0ykTlQgqWh/kLcc3B+BDZY0nNaYicLXKWhozlDaLckg6 yJH0Fpk8s2SkcCpHn5GR9e8EF39miTLyLMVrhpj/sfMdfuJj7ZQALefNiTnBnavC PFIGDHb1GsApDXKng/SJSAEnn0rY6VBm62fNEc0bbclCklMAVbsgQ4GQmTzjwNB1 zA7GvEICeaX5YkrjsUp6rcdLzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBov/niJ 8zQgf6YlplGNSqqHEKU4MB8GA1UdIwQYMBaAFB0ErF0D2O9qxDHeGnque2h2gbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEyRC9EQTQ2NjA5QUY3 QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcyckVNZDRhZXE1N2FIYUJ0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRU3NYUVBZNzJyRU1kNGFlcTU3YUhhQnRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEyRC9EQTQ2NjA5QUY3QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcy ckVNZDRhZXE1N2FIYUJ0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYqx3iBATCNaIjM1B16YNf9cjbX0AHc2taWbdOQEJ68+DVOq+iWlEKiD39wBX D5iKc8SxYhqiuxBHytni68bvQisq15QpdabmHBHABjR7NQGTu0XqprUTFZ5UIIBl TEX6kC+NQ6nPsYO6t/3fbUT/ywcQ9LdNXJybFQmFxDzOW3yNZoyLoaMbJ/QWhARu 7wkveg837/zVJe5m/hwWZOnNq0QdAEO9Ac5Xg3GdJtiTB4bqLYpyCbrdCLM+muqk oO45tjMJVUuZZcM/VbZn9DQdMktu8OcGZebyy/Jle/GjDFfvKG3ehsyGRQ8H0feL OLPkPlcIaU0usZjgJlaz9YwqZw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:32:41 2026 by rpki-client