$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: mc482jjwbUd5zyPvazXAqLp+781U9vgbYAF84G0x550= Subject key identifier: 13:5A:8A:20:6F:B9:1D:87:C7:5F:43:FC:93:31:AB:C3:80:B6:78:E7 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0E53 Signing time: Tue 28 Jul 2026 17:54:58 +0000 Manifest this update: Tue 28 Jul 2026 17:54:57 +0000 Manifest next update: Tue 04 Aug 2026 17:54:57 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: +tHyu0QE/6eQPM+Hrj54zkkEIQOsCfxNB4lQgXSJi/o=) 2: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: SKc7rTK6TrshCb8g4KIsNcbpMMrJrhQX8+vln7hiYKM=) 3: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: NM4ahWOPO+ilsHy5HGWnTut3f/HXCR5WoP1fo7WCekM=) 4: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 8EN8240RkeXll20v+ZKEM2l0H0r1O4pLdIwi1aSMet0=) 5: D0551B50046411F09760073DC4F9AE02.roa (hash: JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=) 6: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY=) 7: F2826A504FCF11EB88444467C4F9AE02.roa (hash: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow=) 8: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: I6uNdzqOJkpVqoIsCJtM/LW7p85XLPeVISRh21FNOaE=) 9: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3737 (0xe99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jul 28 17:54:57 2026 GMT Not After : Aug 4 17:54:57 2026 GMT Subject: CN=6a68ecf2-bfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:c1:4d:cf:5d:ae:53:85:2f:93:2c:df:40: 04:af:bd:4e:04:97:dc:50:13:6d:35:e6:be:5e:c7: 36:89:3c:92:71:23:62:d4:b5:15:b2:c9:f8:06:bd: 13:da:3f:d8:72:43:13:cf:19:48:6b:f5:93:dc:c0: 77:9c:2f:a1:2e:2b:c8:2b:02:0d:f1:d2:db:0e:13: b8:0b:7a:fc:2d:d7:50:3a:d5:08:03:32:f5:ff:57: fd:e4:95:f6:e9:07:90:e7:93:01:67:64:09:e4:24: 8d:eb:d9:be:18:98:77:bc:ee:7d:8a:f1:e1:11:c4: 82:97:82:b9:9c:27:ce:f4:3e:5a:b0:97:b3:78:69: 3f:69:5e:0b:8b:32:f1:42:07:cc:c6:52:1f:4b:eb: 62:8b:29:b9:78:b1:7e:0e:da:26:90:08:4d:d9:6d: d2:d9:b2:a2:f9:8c:c8:c1:73:05:85:e2:f9:62:2e: fa:66:ed:44:8d:87:34:d4:0e:6c:4f:6a:d7:96:ff: 62:c9:f6:d2:64:d0:f5:70:46:17:57:2e:1e:dd:ff: 4d:89:57:7a:5c:eb:6e:e6:b2:05:6f:6a:ac:78:82: f6:6b:0b:e7:79:8d:e7:1e:95:cc:27:dd:0a:84:e9: 78:d8:5f:73:48:b5:22:f3:13:97:48:8a:68:c8:ec: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5A:8A:20:6F:B9:1D:87:C7:5F:43:FC:93:31:AB:C3:80:B6:78:E7 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:91:b1:ff:a5:a4:b4:63:b9:bd:78:c9:f3:60:f1:e3:25:ef: 8b:25:1b:a4:3d:23:dc:14:08:ec:88:3f:a4:54:dd:82:b9:41: e1:f8:5a:6a:92:43:07:3f:7f:17:74:2d:3e:5c:12:f1:17:f7: 00:d3:05:a0:2b:61:57:71:dc:06:cd:0e:d5:71:0b:8e:32:a1: f3:9b:6c:22:5f:4c:41:9e:d4:1a:21:c2:dc:50:24:81:54:b3: 43:a9:bc:d6:5f:18:27:c6:75:d2:da:11:e4:28:33:02:9d:f8: de:71:00:43:ff:47:16:1d:97:a1:63:5c:d4:cc:60:8e:34:0d: a6:24:53:97:09:71:17:12:60:e9:a5:20:ed:d8:a2:77:10:9f: 1e:7b:91:76:c5:1a:fe:3d:4a:1e:a5:0c:87:97:3f:74:18:06: 3d:44:c7:6c:f2:71:e1:51:86:14:44:45:1b:43:04:a2:22:e7: 2c:89:b0:a9:38:7e:73:1c:79:2f:9f:86:12:28:53:ab:12:79: d8:e3:df:a6:76:54:8d:d2:53:db:32:cd:0d:4e:ce:68:fc:b8: 6e:95:d9:f2:7d:0b:2e:a1:0f:a0:91:ed:34:4b:ce:53:6d:71: 78:f6:6c:61:3b:34:ff:65:41:9e:7e:a1:86:a3:89:89:51:68: 38:b2:f3:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYwNzI4MTc1NDU3WhcNMjYwODA0MTc1NDU3WjAYMRYwFAYD VQQDEw02YTY4ZWNmMi1iZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6DBTc9drlOFL5Ms30AEr71OBJfcUBNtNea+Xsc2iTyScSNi1LUVssn4Br0T 2j/YckMTzxlIa/WT3MB3nC+hLivIKwIN8dLbDhO4C3r8LddQOtUIAzL1/1f95JX2 6QeQ55MBZ2QJ5CSN69m+GJh3vO59ivHhEcSCl4K5nCfO9D5asJezeGk/aV4LizLx QgfMxlIfS+tiiym5eLF+DtomkAhN2W3S2bKi+YzIwXMFheL5Yi76Zu1EjYc01A5s T2rXlv9iyfbSZND1cEYXVy4e3f9NiVd6XOtu5rIFb2qseIL2awvneY3nHpXMJ90K hOl42F9zSLUi8xOXSIpoyOweAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNaiiBv uR2Hx19D/JMxq8OAtnjnMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt5Gx/6WktGO5vXjJ82Dx4yXviyUbpD0j3BQI7Ig/pFTdgrlB4fhaapJDBz9/ F3QtPlwS8Rf3ANMFoCthV3HcBs0O1XELjjKh85tsIl9MQZ7UGiHC3FAkgVSzQ6m8 1l8YJ8Z10toR5CgzAp343nEAQ/9HFh2XoWNc1MxgjjQNpiRTlwlxFxJg6aUg7dii dxCfHnuRdsUa/j1KHqUMh5c/dBgGPUTHbPJx4VGGFERFG0MEoiLnLImwqTh+cxx5 L5+GEihTqxJ52OPfpnZUjdJT2zLNDU7OaPy4bpXZ8n0LLqEPoJHtNEvOU21xePZs YTs0/2VBnn6hhqOJiVFoOLLzRA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:21:46 2026 by rpki-client