$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: 1ttmpnLJ9UKxHP+TpbhOizStIElAGNoR2iWIgcG835U= Subject key identifier: 37:74:4B:56:51:4A:A6:E7:A4:2E:2B:2F:CE:53:3A:E3:3F:39:0C:82 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0474 Signing time: Mon 27 Jul 2026 01:13:06 +0000 Manifest this update: Mon 27 Jul 2026 01:13:05 +0000 Manifest next update: Mon 03 Aug 2026 01:13:05 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: xw4VlrcMN+PkOfiOUt+Nq8aRe1DWzSXOBPgIHlOSC1Q=) 2: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) 3: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) 4: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Jul 27 01:13:05 2026 GMT Not After : Aug 3 01:13:05 2026 GMT Subject: CN=6a66b0a2-d7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:1b:0e:8d:a6:5a:f1:b4:8f:d0:21:76:6c: 86:ce:f6:41:1e:a1:d4:1d:10:03:4a:8d:b2:48:88: 86:a5:69:47:fa:ec:f1:cb:58:39:38:59:1c:50:3f: 01:fa:4e:4c:79:be:3a:e7:58:cd:bb:71:1e:91:ae: 68:d4:8f:1e:78:d8:46:82:d4:38:60:f4:7d:64:c1: cf:44:66:f9:e1:b0:f6:be:e7:f0:ac:2f:87:ba:e6: 4b:7b:1c:bc:b7:82:b8:eb:3d:7c:7d:61:9a:88:ab: 84:61:06:78:aa:a1:88:bf:96:1f:16:e0:ec:54:81: d3:b4:83:c7:d9:3d:b3:de:49:ec:2a:68:f3:66:b9: 99:b6:da:b9:ee:d5:30:b2:50:2c:78:ca:9a:70:9c: 88:6e:f8:56:62:39:51:6c:b1:35:8d:21:81:0f:80: 70:4e:4a:da:fa:7f:54:8f:fc:00:3a:06:b2:e5:9a: 39:c3:e2:22:9f:1e:e3:5c:b6:bd:0b:41:dc:ac:ae: 61:77:15:b3:45:a9:74:e7:f1:47:6b:cc:05:a0:bf: 70:91:6d:f3:1a:d6:f2:0d:26:d9:ed:c8:12:93:ae: 6e:1e:37:fb:f9:aa:98:05:09:e1:8b:3c:89:5f:d8: 56:25:1c:03:0d:c8:8f:2d:1b:79:23:a1:d5:fb:72: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:74:4B:56:51:4A:A6:E7:A4:2E:2B:2F:CE:53:3A:E3:3F:39:0C:82 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:eb:ef:01:eb:ca:c4:54:36:c9:69:22:f5:8a:3f:54:ed:12: ab:95:01:85:65:5d:46:d2:ae:d6:d5:10:9f:64:f7:78:10:9e: b4:fc:91:ee:d8:81:cf:78:04:37:85:7e:c1:5c:7c:0e:f2:a1: b3:9f:94:0e:5c:eb:bc:f6:23:d4:cf:64:c4:f3:1e:bc:a5:f1: da:6d:45:8e:35:d9:df:7c:6a:61:59:53:37:1d:42:b8:6a:69: c0:02:07:aa:25:64:5f:28:18:2c:3a:d5:de:51:e9:b4:95:4b: 7e:f7:d8:a6:12:93:ac:4c:7a:1a:cc:30:00:d8:54:b6:1b:20: ab:ac:e8:20:a4:06:d0:1a:80:fa:d1:3c:42:63:6d:9c:f5:1a: 1a:42:ef:83:ed:8e:e9:96:44:fd:69:90:83:eb:e9:1b:14:d3: a2:5f:68:97:fa:de:a8:22:d6:08:f9:82:be:1c:ec:81:87:74: af:5a:3d:93:b4:bf:eb:4a:db:77:77:47:02:64:4b:24:6c:62: ce:14:b1:bd:ad:15:6a:d6:c1:4c:dc:58:98:bc:29:47:44:54: 0a:c8:69:a1:58:7b:0f:a0:ea:1e:b9:ef:4e:b7:43:af:23:ef: 96:69:df:51:6d:95:c7:2c:1c:e9:de:ab:07:fa:d7:27:7e:47: d1:65:4b:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwNzI3MDExMzA1WhcNMjYwODAzMDExMzA1WjAYMRYwFAYD VQQDEw02YTY2YjBhMi1kN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAop8bDo2mWvG0j9AhdmyGzvZBHqHUHRADSo2ySIiGpWlH+uzxy1g5OFkcUD8B +k5Meb4651jNu3Eeka5o1I8eeNhGgtQ4YPR9ZMHPRGb54bD2vufwrC+HuuZLexy8 t4K46z18fWGaiKuEYQZ4qqGIv5YfFuDsVIHTtIPH2T2z3knsKmjzZrmZttq57tUw slAseMqacJyIbvhWYjlRbLE1jSGBD4BwTkra+n9Uj/wAOgay5Zo5w+Iinx7jXLa9 C0HcrK5hdxWzRal05/FHa8wFoL9wkW3zGtbyDSbZ7cgSk65uHjf7+aqYBQnhizyJ X9hWJRwDDciPLRt5I6HV+3IA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDd0S1ZR SqbnpC4rL85TOuM/OQyCMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACevvAevKxFQ2yWki9Yo/VO0Sq5UBhWVdRtKu1tUQn2T3eBCetPyR7tiBz3gE N4V+wVx8DvKhs5+UDlzrvPYj1M9kxPMevKXx2m1FjjXZ33xqYVlTNx1CuGppwAIH qiVkXygYLDrV3lHptJVLfvfYphKTrEx6GswwANhUthsgq6zoIKQG0BqA+tE8QmNt nPUaGkLvg+2O6ZZE/WmQg+vpGxTTol9ol/reqCLWCPmCvhzsgYd0r1o9k7S/60rb d3dHAmRLJGxizhSxva0VatbBTNxYmLwpR0RUCshpoVh7D6DqHrnvTrdDryPvlmnf UW2Vxywc6d6rB/rXJ35H0WVLRw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:09 2026 by rpki-client