$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: +fnQbgBb0LyG6drKyU6U+TTjAVRJyHmP6sIL9PpL/+Q= Subject key identifier: D4:D1:8F:0D:40:99:0B:76:DA:8D:5A:3C:6E:F7:E9:73:1E:D8:77:ED Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0299 Signing time: Mon 27 Jul 2026 03:01:40 +0000 Manifest this update: Mon 27 Jul 2026 03:01:39 +0000 Manifest next update: Mon 03 Aug 2026 03:01:39 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: GWrdfUopnx9oNAVJH3CWmWMziWyOd1qxPz/HYaMBvSA=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Jul 27 03:01:39 2026 GMT Not After : Aug 3 03:01:39 2026 GMT Subject: CN=6a66ca14-890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:e2:a1:db:e8:73:1c:c8:36:3e:10:4a:6c: 50:73:20:e2:7a:89:c9:94:af:34:de:01:ad:77:9e: 2d:08:6f:e8:4e:7b:ec:e9:b9:b4:f0:26:b0:17:57: 34:de:0d:e6:30:0a:3a:f9:ee:b4:07:48:e5:98:91: db:18:85:85:c7:98:c7:be:ef:77:00:cb:6a:fa:0c: 2b:91:95:1c:46:18:33:91:17:d9:47:46:62:42:94: 04:c9:8b:5b:2f:8b:fc:a9:ed:99:dd:d7:31:00:4a: 07:f5:43:1a:a7:52:de:ee:53:f4:89:31:e9:84:da: 52:ac:46:5d:05:c1:e6:92:6a:6a:cb:c7:43:5a:7e: f3:ad:1f:fb:96:f1:ff:bb:57:85:90:d9:24:58:9c: e7:22:09:e3:48:2a:43:eb:29:59:06:b1:ec:70:22: 8a:f6:01:71:39:18:a5:74:5f:9d:36:b1:62:fe:7a: 4a:99:d6:bb:29:5e:87:30:7f:09:cd:be:db:74:ac: 30:26:b0:56:ff:1d:7d:38:fe:48:8e:1b:3e:82:29: 73:d7:66:b6:2f:56:fb:40:e7:68:db:a2:04:c1:65: a5:26:4f:16:b4:d8:1d:17:c2:b2:b7:62:23:be:54: be:42:56:9b:9e:74:ee:2c:8c:1a:7c:d1:9d:97:e2: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:8F:0D:40:99:0B:76:DA:8D:5A:3C:6E:F7:E9:73:1E:D8:77:ED X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:17:e2:47:ba:8d:8c:27:43:26:4c:9f:ac:78:63:e6:1d:66: 1b:61:de:05:54:5e:ea:7c:bb:82:a1:07:82:bb:04:e1:a7:0a: c2:46:89:7f:1d:b1:78:18:69:24:87:af:8b:5e:c8:ee:0e:4a: 26:d5:d7:8f:46:72:72:3b:55:ad:70:f9:41:3e:80:54:26:a5: d4:d5:c0:41:fb:a7:e0:c0:00:11:af:1e:d5:f9:50:10:6a:38: 3f:0a:a7:9e:17:e0:cc:ad:24:12:b6:2e:4c:95:f5:bb:c4:4a: cd:04:02:05:67:b7:90:c2:21:d9:33:86:8a:42:74:87:ef:62: fa:be:7a:5f:8e:56:d3:d1:05:00:5e:4f:a1:4f:42:99:00:54: e0:3f:62:67:01:dc:45:78:2c:92:41:2e:97:91:f0:10:11:f3: c9:de:a6:62:9b:d8:0a:89:0a:b6:9c:90:f4:d1:e2:c6:39:a5: 2f:04:82:fc:b1:71:88:f9:06:be:46:34:66:33:14:3a:da:24: cc:36:ea:5f:7f:30:d6:c0:95:d3:90:e7:35:92:ed:81:d7:d7: a6:61:6a:e9:ec:d4:21:ba:c6:2a:4e:e7:ba:51:34:cf:bf:37: 5a:b6:53:e5:47:2e:8d:36:04:aa:fd:32:95:46:38:50:d4:9f: 27:3a:b1:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjYwNzI3MDMwMTM5WhcNMjYwODAzMDMwMTM5WjAYMRYwFAYD VQQDEw02YTY2Y2ExNC04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8riodvocxzINj4QSmxQcyDieonJlK803gGtd54tCG/oTnvs6bm08CawF1c0 3g3mMAo6+e60B0jlmJHbGIWFx5jHvu93AMtq+gwrkZUcRhgzkRfZR0ZiQpQEyYtb L4v8qe2Z3dcxAEoH9UMap1Le7lP0iTHphNpSrEZdBcHmkmpqy8dDWn7zrR/7lvH/ u1eFkNkkWJznIgnjSCpD6ylZBrHscCKK9gFxORildF+dNrFi/npKmda7KV6HMH8J zb7bdKwwJrBW/x19OP5Ijhs+gilz12a2L1b7QOdo26IEwWWlJk8WtNgdF8Kyt2Ij vlS+QlabnnTuLIwafNGdl+IYFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTRjw1A mQt22o1aPG736XMe2HftMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeBfiR7qNjCdDJkyfrHhj5h1mG2HeBVRe6ny7gqEHgrsE4acKwkaJfx2xeBhp JIevi17I7g5KJtXXj0ZycjtVrXD5QT6AVCal1NXAQfun4MAAEa8e1flQEGo4Pwqn nhfgzK0kErYuTJX1u8RKzQQCBWe3kMIh2TOGikJ0h+9i+r56X45W09EFAF5PoU9C mQBU4D9iZwHcRXgskkEul5HwEBHzyd6mYpvYCokKtpyQ9NHixjmlLwSC/LFxiPkG vkY0ZjMUOtokzDbqX38w1sCV05DnNZLtgdfXpmFq6ezUIbrGKk7nulE0z783WrZT 5UcujTYEqv0ylUY4UNSfJzqxgw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:43:59 2026 by rpki-client