$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: oWK7lHzGnWz4RHv0498Cg1wTXEWNwLyIDiA71Nb26ow= Subject key identifier: DC:00:B6:91:4B:49:7C:66:D5:5B:2C:DB:21:2B:17:CF:3B:04:56:A6 Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 3582 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 3582 Signing time: Tue 28 Jul 2026 14:22:21 +0000 Manifest this update: Tue 28 Jul 2026 14:22:21 +0000 Manifest next update: Tue 04 Aug 2026 14:22:21 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: b0KC1BxMNTyld4HlWJtHhNeWkykob/LzhThD9e+MoLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13698 (0x3582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Validity Not Before: Jul 28 14:22:21 2026 GMT Not After : Aug 4 14:22:21 2026 GMT Subject: CN=6a68bb1d-40c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:b2:36:4c:27:69:0e:80:96:fc:2e:ff:5d: e1:c7:ed:a6:40:3c:39:d7:e3:d1:00:5c:d6:88:59: 92:f3:47:62:b1:cf:c3:7f:7a:1a:5b:fc:99:49:d6: 41:8c:1a:b8:6d:bd:89:00:5d:f2:7a:8f:bf:fe:23: 73:9d:9a:f1:e2:d8:b1:aa:4f:c3:2a:a9:7f:4c:74: a4:ae:e5:a5:6a:a5:21:51:7a:4d:ab:8c:82:4d:e4: a4:9c:9f:ed:d5:3e:05:c6:4a:aa:a6:6c:c9:58:9c: 93:90:8f:8b:df:f9:9d:04:e7:3e:3a:a4:7a:8e:19: c4:31:08:44:23:6b:c7:c6:c9:df:da:fa:f7:f1:20: 34:f3:7c:7d:17:08:47:b3:1f:10:3c:e6:45:8a:ce: d4:05:25:3f:7d:5b:cc:b2:03:cf:02:63:ef:f8:96: c5:2c:17:b7:37:86:c4:b3:47:44:62:5c:ee:e4:67: 21:08:4e:8d:31:df:66:c1:8c:b8:11:60:27:da:d9: 42:47:82:9f:0f:1d:8f:e0:9b:33:5e:b5:33:f0:96: 77:d1:ac:de:a0:d4:8c:b1:ec:df:9e:1c:8d:bd:06: fd:c4:85:cc:10:f9:f3:f7:a9:4b:b1:0f:35:3a:a3: e0:19:9b:5e:c4:e1:ab:c4:51:2d:ff:d5:1a:6c:8f: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:B6:91:4B:49:7C:66:D5:5B:2C:DB:21:2B:17:CF:3B:04:56:A6 X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:38:db:cd:0f:63:f6:59:07:eb:9b:0d:eb:e6:94:cb:0a: 41:43:f2:06:1f:02:8c:e1:29:c1:84:d8:86:41:f8:aa:37:5c: 1c:82:ca:fd:23:2c:3a:3e:56:e2:bf:d2:28:bb:e4:ed:09:d0: a9:e9:68:12:ab:40:6b:63:6e:c7:dd:ef:1e:bd:cf:37:99:e8: 3d:00:95:5c:21:c9:5d:5a:45:7b:59:88:9f:10:f7:51:36:5b: a9:f7:f6:36:0c:76:43:2f:d9:40:9d:61:c3:88:51:2f:0d:16: ac:fb:7c:c3:ec:7f:96:07:9b:de:7e:d6:f5:fc:b7:24:09:d3: 9b:ac:74:99:16:c9:73:42:82:94:ca:62:c6:0d:36:dc:28:2f: 5f:93:5d:6d:a1:8c:1e:d1:df:22:8a:3b:fb:fa:78:c3:62:1f: c6:df:31:13:84:39:be:ba:8e:05:f0:24:6b:b7:f4:d1:c5:d4: f4:8f:9c:c1:d0:27:8a:9f:3e:45:e0:b4:44:7a:58:3c:fd:7d: 60:7d:b5:2b:27:47:a8:16:cc:44:c9:19:19:9e:0c:83:1c:16: a9:4e:79:2f:af:15:eb:30:4e:0d:6a:f4:ad:bc:09:57:6a:a2: 6b:fd:af:30:4f:b9:d3:f9:9c:a6:63:69:79:10:83:80:9a:5e: 16:b4:9d:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjYwNzI4MTQyMjIxWhcNMjYwODA0MTQyMjIxWjAYMRYwFAYD VQQDEw02YTY4YmIxZC00MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwOyNkwnaQ6Alvwu/13hx+2mQDw51+PRAFzWiFmS80disc/Df3oaW/yZSdZB jBq4bb2JAF3yeo+//iNznZrx4tixqk/DKql/THSkruWlaqUhUXpNq4yCTeSknJ/t 1T4FxkqqpmzJWJyTkI+L3/mdBOc+OqR6jhnEMQhEI2vHxsnf2vr38SA083x9FwhH sx8QPOZFis7UBSU/fVvMsgPPAmPv+JbFLBe3N4bEs0dEYlzu5GchCE6NMd9mwYy4 EWAn2tlCR4KfDx2P4JszXrUz8JZ30azeoNSMsezfnhyNvQb9xIXMEPnz96lLsQ81 OqPgGZtexOGrxFEt/9UabI9maQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwAtpFL SXxm1Vss2yErF887BFamMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTE4280PY/ZZB+ubDevmlMsKQUPyBh8CjOEpwYTYhkH4qjdcHILK/SMsOj5W 4r/SKLvk7QnQqeloEqtAa2Nux93vHr3PN5noPQCVXCHJXVpFe1mInxD3UTZbqff2 Ngx2Qy/ZQJ1hw4hRLw0WrPt8w+x/lgeb3n7W9fy3JAnTm6x0mRbJc0KClMpixg02 3CgvX5NdbaGMHtHfIoo7+/p4w2Ifxt8xE4Q5vrqOBfAka7f00cXU9I+cwdAnip8+ ReC0RHpYPP19YH21KydHqBbMRMkZGZ4MgxwWqU55L68V6zBODWr0rbwJV2qia/2v ME+50/mcpmNpeRCDgJpeFrSd6A== -----END CERTIFICATE-----Generated at Tue Jul 28 19:36:52 2026 by rpki-client