$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: ox1kYs9yJ9FTAa8Hfp0xLJqCOKIxPXLuYIFqyB3md9c= Subject key identifier: F1:2A:6E:20:C8:04:1C:B6:43:F3:A0:0F:A4:8B:54:D7:1F:A7:14:64 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 043D Signing time: Mon 27 Jul 2026 01:18:46 +0000 Manifest this update: Mon 27 Jul 2026 01:18:45 +0000 Manifest next update: Mon 03 Aug 2026 01:18:45 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: Ltt84FRibtgkJsw0pEiYWtwUFYEMtFG2qbSHiiR/010=) 2: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=) 3: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Jul 27 01:18:45 2026 GMT Not After : Aug 3 01:18:45 2026 GMT Subject: CN=6a66b1f6-f359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:e2:10:d1:28:68:e3:cc:fa:ff:d8:34:99: 3e:50:d4:72:83:ac:66:2d:93:16:dc:c5:75:24:0a: df:c8:10:f9:c6:43:41:9e:c9:9c:3d:75:db:ac:a1: 5a:21:50:79:4f:52:6f:ae:33:02:00:69:f5:58:7b: db:14:c8:09:c4:ec:90:98:5f:31:1c:ac:05:bd:b2: 88:f1:e4:d0:0c:4a:27:df:3e:d0:29:93:d2:f4:33: cd:94:3e:27:9c:ea:8e:7c:02:34:6f:6f:55:29:4d: ab:65:22:53:ae:c0:4f:30:e8:40:a5:77:0a:4c:0e: b3:af:3a:d4:d9:b8:98:e5:cf:e1:cd:9e:5c:48:f9: 86:98:1f:7b:2b:07:62:4a:18:42:b7:91:26:a7:0c: bb:6c:ee:f4:34:6a:12:57:ae:53:32:6f:8e:3e:1b: e3:a4:f7:e5:b4:69:56:7b:98:cf:96:19:f1:b3:b2: dc:0f:58:18:3f:2f:8a:e1:be:19:4d:06:5d:14:4b: b5:bc:4e:2e:a6:2a:38:b7:80:10:0e:6a:97:65:31: 89:68:ba:f2:57:53:4d:5a:bd:27:69:60:cd:ca:75: 1b:b6:3b:9c:66:ba:ce:e3:30:0c:4f:8c:65:00:c6: 95:54:da:fe:b5:43:2b:e1:2b:bb:f6:13:b4:09:b4: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:6E:20:C8:04:1C:B6:43:F3:A0:0F:A4:8B:54:D7:1F:A7:14:64 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:d9:a2:03:91:05:b2:3e:36:78:cb:99:41:a0:32:53:25: f9:1b:95:cc:37:29:4b:d2:31:a1:d4:28:81:b5:b7:b6:07:df: 53:6b:54:b3:02:64:53:1f:84:54:11:50:bd:4e:42:84:6b:80: 66:ea:2b:3f:a4:17:7a:58:5b:c0:0a:96:58:77:96:f8:a6:de: ba:d1:72:48:04:27:77:fe:20:01:04:3c:9a:5c:7d:29:48:53: 5a:32:31:ef:38:1a:01:a7:a1:43:ac:c5:ef:8d:6e:ac:c9:35: f4:ea:a7:3e:3c:b8:75:19:78:da:9f:9a:81:12:99:d6:44:41: a0:e9:52:69:12:36:8e:8b:65:67:d4:70:2e:5c:21:77:30:10: 8b:6c:75:f3:0b:c7:f5:02:ad:ad:03:c0:cb:70:ef:f2:91:4c: 20:bc:cb:fb:4b:f4:a7:57:b8:46:7c:ed:de:ac:b3:8d:dc:47: 6d:86:f0:86:89:9c:4b:a0:4a:f3:59:0d:46:bf:12:ee:52:57: 07:db:af:1a:77:e7:e5:73:2f:4d:f9:53:32:ca:20:9a:70:b9: 4a:d6:33:d3:b6:65:23:28:de:47:42:ad:c5:ad:09:3d:40:2a: 66:4c:47:6d:f5:dc:f7:0b:1f:52:05:ce:d8:45:ec:a0:33:bb: 67:e9:68:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwNzI3MDExODQ1WhcNMjYwODAzMDExODQ1WjAYMRYwFAYD VQQDEw02YTY2YjFmNi1mMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1DiENEoaOPM+v/YNJk+UNRyg6xmLZMW3MV1JArfyBD5xkNBnsmcPXXbrKFa IVB5T1JvrjMCAGn1WHvbFMgJxOyQmF8xHKwFvbKI8eTQDEon3z7QKZPS9DPNlD4n nOqOfAI0b29VKU2rZSJTrsBPMOhApXcKTA6zrzrU2biY5c/hzZ5cSPmGmB97Kwdi ShhCt5Empwy7bO70NGoSV65TMm+OPhvjpPfltGlWe5jPlhnxs7LcD1gYPy+K4b4Z TQZdFEu1vE4upio4t4AQDmqXZTGJaLryV1NNWr0naWDNynUbtjucZrrO4zAMT4xl AMaVVNr+tUMr4Su79hO0CbSYqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEqbiDI BBy2Q/OgD6SLVNcfpxRkMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLzZogORBbI+NnjLmUGgMlMl+RuVzDcpS9IxodQogbW3tgffU2tUswJkUx+E VBFQvU5ChGuAZuorP6QXelhbwAqWWHeW+KbeutFySAQnd/4gAQQ8mlx9KUhTWjIx 7zgaAaehQ6zF741urMk19OqnPjy4dRl42p+agRKZ1kRBoOlSaRI2jotlZ9RwLlwh dzAQi2x18wvH9QKtrQPAy3Dv8pFMILzL+0v0p1e4Rnzt3qyzjdxHbYbwhomcS6BK 81kNRr8S7lJXB9uvGnfn5XMvTflTMsogmnC5StYz07ZlIyjeR0Ktxa0JPUAqZkxH bfXc9wsfUgXO2EXsoDO7Z+loBg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:20 2026 by rpki-client