$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: WJyJCCNDD1WAhrIvwR3eJI/Cdfzw2h/F8GlOhCZL4tI= Subject key identifier: 87:7E:0B:62:2A:61:4B:75:38:C0:E3:14:2C:0C:E2:A7:C5:FC:57:56 Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 01D3 Signing time: Mon 27 Jul 2026 05:23:10 +0000 Manifest this update: Mon 27 Jul 2026 05:23:09 +0000 Manifest next update: Mon 03 Aug 2026 05:23:09 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: CRBXV+UwZJRICQz7Bc/rNKWqq3z6JKKhh3B5WMUpDY0=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Jul 27 05:23:09 2026 GMT Not After : Aug 3 05:23:09 2026 GMT Subject: CN=6a66eb3e-d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:8c:a3:a8:73:2b:a7:0a:a2:2a:fd:94:bc: 02:55:fa:c7:ff:ad:c7:b5:6d:e5:a5:16:34:47:4a: 89:a1:83:13:52:24:27:63:9f:c9:d7:11:ec:b7:ae: af:49:45:ac:5c:74:88:1e:42:df:78:87:fb:7e:61: 13:2b:8c:f0:33:62:e3:8e:04:3c:48:f3:47:8f:03: f3:42:e0:a6:52:9e:a6:cc:47:2e:9a:50:17:83:dd: bc:09:d5:79:53:f1:7c:50:9f:84:b1:cc:30:e6:57: 90:f1:c5:05:b6:9d:81:fe:1e:ce:39:81:73:2b:b5: 3a:0c:09:2a:1f:66:ef:27:a0:74:15:48:ef:53:f7: ae:37:02:b6:c5:45:51:99:9f:c5:12:bf:e9:0f:36: 5e:79:ef:fc:99:4f:e5:27:8b:e2:48:ce:c0:5a:1a: 0f:fd:b9:60:f2:dc:9f:2e:8a:1d:c3:3d:fd:92:75: 7c:12:9f:2a:bb:ad:b3:ca:7e:7a:43:2c:3f:53:ca: f6:bd:21:8e:df:de:06:02:56:89:51:6a:7b:2b:fa: ac:5f:51:76:46:16:ce:00:72:6f:22:5d:99:7f:94: 6a:d8:fa:f4:69:1a:70:68:9f:92:ed:86:7a:71:cd: 1d:74:ad:76:68:db:0e:30:71:24:84:f3:68:83:32: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:0B:62:2A:61:4B:75:38:C0:E3:14:2C:0C:E2:A7:C5:FC:57:56 X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bf:3f:0b:01:e3:45:a9:8f:4b:99:5b:ee:ce:64:39:c6:74: 48:ee:a2:87:31:a4:37:2d:05:bd:17:62:ba:42:ef:9d:bb:f6: a4:17:12:84:59:47:19:5a:d6:ba:b9:cd:90:1e:82:f3:9b:8a: 1f:52:25:ee:bd:f3:12:e8:d6:4e:92:8e:a5:4c:45:d7:47:e2: 20:e5:a2:cf:9a:af:c1:ea:cd:5f:17:3b:e5:bc:47:c6:9f:17: cd:1a:67:0c:6e:8a:fe:f2:f1:f5:de:ee:3d:76:15:73:8a:02: ac:b9:ed:ee:94:3f:c2:2d:4f:19:22:df:cf:77:a3:34:ac:72: 95:78:70:17:ac:f4:76:5f:25:e4:bf:34:71:42:4c:a7:cf:99: a9:3f:d1:ac:71:6d:fc:e6:b6:1b:64:b6:5d:8e:11:d6:3f:f7: 79:1d:d3:be:02:ee:2c:72:fa:5e:78:49:72:ed:66:2b:be:9a: b9:13:bd:6a:d1:69:90:7c:58:ac:67:4f:64:31:2c:5d:c8:a1: e7:cf:93:f4:fb:bc:a7:e8:af:46:f7:56:a4:22:4b:31:2b:05: 8e:d1:63:8d:af:f6:ee:17:b6:73:fa:13:5c:6e:df:ab:79:9d: c4:3b:d3:80:14:2e:b0:4c:4b:0e:87:9e:ef:87:72:9b:6a:8f: 32:38:f9:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjYwNzI3MDUyMzA5WhcNMjYwODAzMDUyMzA5WjAYMRYwFAYD VQQDEw02YTY2ZWIzZS1kNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXSMo6hzK6cKoir9lLwCVfrH/63HtW3lpRY0R0qJoYMTUiQnY5/J1xHst66v SUWsXHSIHkLfeIf7fmETK4zwM2LjjgQ8SPNHjwPzQuCmUp6mzEcumlAXg928CdV5 U/F8UJ+Escww5leQ8cUFtp2B/h7OOYFzK7U6DAkqH2bvJ6B0FUjvU/euNwK2xUVR mZ/FEr/pDzZeee/8mU/lJ4viSM7AWhoP/blg8tyfLoodwz39knV8Ep8qu62zyn56 Qyw/U8r2vSGO394GAlaJUWp7K/qsX1F2RhbOAHJvIl2Zf5Rq2Pr0aRpwaJ+S7YZ6 cc0ddK12aNsOMHEkhPNogzIU+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId+C2Iq YUt1OMDjFCwM4qfF/FdWMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX78/CwHjRamPS5lb7s5kOcZ0SO6ihzGkNy0FvRdiukLvnbv2pBcShFlHGVrW urnNkB6C85uKH1Il7r3zEujWTpKOpUxF10fiIOWiz5qvwerNXxc75bxHxp8XzRpn DG6K/vLx9d7uPXYVc4oCrLnt7pQ/wi1PGSLfz3ejNKxylXhwF6z0dl8l5L80cUJM p8+ZqT/RrHFt/Oa2G2S2XY4R1j/3eR3TvgLuLHL6XnhJcu1mK76auRO9atFpkHxY rGdPZDEsXcih58+T9Pu8p+ivRvdWpCJLMSsFjtFjja/27he2c/oTXG7fq3mdxDvT gBQusExLDoee74dym2qPMjj52g== -----END CERTIFICATE-----Generated at Tue Jul 28 23:04:58 2026 by rpki-client