$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: cZDRQ6HLbEZf6OfYZnte2wUEzQL4PXFCQq2pqWeO1G4= Subject key identifier: 7C:73:4D:34:1A:30:C3:01:F9:D2:07:95:0B:3D:85:D0:BA:0C:6E:DF Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0C64 Signing time: Tue 28 Jul 2026 18:55:42 +0000 Manifest this update: Tue 28 Jul 2026 18:55:42 +0000 Manifest next update: Tue 04 Aug 2026 18:55:42 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: hHjuiVpmtTZpmgH0eMZcwtmrPCqbdFqOOPt5z5ovUNM=) 2: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Jul 28 18:55:42 2026 GMT Not After : Aug 4 18:55:42 2026 GMT Subject: CN=6a68fb2e-de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bb:d3:5e:94:b4:46:40:5e:1c:2c:a9:28:1e: f9:9d:f1:e0:c3:5a:d4:f6:35:62:4b:f2:40:4c:24: 4c:96:49:b9:a1:18:c1:97:8e:64:0d:37:da:54:bf: 0d:1b:b9:9e:a1:c5:3a:89:6f:41:9d:be:57:fd:8b: 16:75:a9:e9:ea:85:00:5a:c0:5a:26:f4:38:5a:88: 43:e6:6d:f6:ae:3b:ed:84:ab:82:d8:b0:c1:5d:1f: a4:6b:33:f4:5d:ad:ee:8e:c5:c7:2b:e1:8c:89:76: 8f:c5:4e:84:44:7a:89:4d:b1:ca:aa:cd:85:0b:9d: 2c:d4:4a:8d:f6:a9:92:bb:a7:70:4a:6f:46:6c:59: 7b:1c:bc:2b:78:ee:a5:8c:4c:40:da:ed:b5:e2:8c: 7b:af:33:a8:9e:86:7b:03:c5:81:be:aa:b7:2c:d5: a1:06:46:b9:4b:43:0e:b0:51:66:0e:59:94:b3:ae: d7:71:b8:69:0e:7f:98:b6:81:2f:33:7f:17:4e:f0: 90:cf:42:05:a9:c2:e4:6e:d2:62:cc:a6:65:57:3e: 76:e5:42:9e:97:53:fd:be:76:d4:95:a1:c6:d2:f8: 4e:66:ba:aa:1e:f8:a3:48:6c:93:76:09:a3:09:d4: ff:18:71:04:bc:07:ba:01:06:d1:2e:ce:55:40:a9: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:4D:34:1A:30:C3:01:F9:D2:07:95:0B:3D:85:D0:BA:0C:6E:DF X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:27:16:e1:85:b5:dc:fd:26:a2:df:9e:1f:0b:6d:01:2e:c2: a1:e2:c1:3d:bd:b4:a2:25:df:e9:1e:57:6e:db:ba:1c:eb:56: f3:a9:88:f2:ae:ed:80:22:17:cb:16:8b:b0:ce:61:d5:17:e1: a3:74:81:f5:82:e8:4e:1f:0f:fb:89:62:2d:c7:b6:24:d3:1a: 1d:86:0d:4e:cb:a9:73:f9:ec:2f:a1:ca:c6:2c:47:fe:73:62: 0d:11:6b:a7:3b:3b:55:3c:be:82:77:8c:e6:24:21:db:80:1e: 21:ce:e1:02:d0:3a:95:9c:36:d8:62:3c:89:b9:91:d4:9f:ea: 12:7b:fa:36:d7:0c:9b:f7:b4:e9:c8:f2:17:54:88:ec:44:40: 45:db:af:9b:33:88:62:a2:21:ef:48:40:be:ad:39:d8:94:30: c1:c3:33:4b:8e:74:0d:2c:a9:c0:a8:6c:94:53:6e:4d:7a:98: a4:07:b0:ba:35:8e:86:e6:0c:97:9a:49:fb:5a:8a:39:0f:dc: 34:fe:5c:06:bd:c5:30:25:f5:2a:e2:a7:49:8f:52:83:72:86: 26:04:cf:31:ec:52:f5:01:b1:4f:03:7a:12:16:8e:8c:0f:0f: 53:d7:fa:77:d7:51:61:07:14:9c:1d:5b:66:de:58:81:dd:f2: 97:12:cf:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjYwNzI4MTg1NTQyWhcNMjYwODA0MTg1NTQyWjAYMRYwFAYD VQQDEw02YTY4ZmIyZS1kZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bvTXpS0RkBeHCypKB75nfHgw1rU9jViS/JATCRMlkm5oRjBl45kDTfaVL8N G7meocU6iW9Bnb5X/YsWdanp6oUAWsBaJvQ4WohD5m32rjvthKuC2LDBXR+kazP0 Xa3ujsXHK+GMiXaPxU6ERHqJTbHKqs2FC50s1EqN9qmSu6dwSm9GbFl7HLwreO6l jExA2u214ox7rzOonoZ7A8WBvqq3LNWhBka5S0MOsFFmDlmUs67XcbhpDn+YtoEv M38XTvCQz0IFqcLkbtJizKZlVz525UKel1P9vnbUlaHG0vhOZrqqHvijSGyTdgmj CdT/GHEEvAe6AQbRLs5VQKl0zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxzTTQa MMMB+dIHlQs9hdC6DG7fMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASicW4YW13P0mot+eHwttAS7CoeLBPb20oiXf6R5Xbtu6HOtW86mI8q7tgCIX yxaLsM5h1Rfho3SB9YLoTh8P+4liLce2JNMaHYYNTsupc/nsL6HKxixH/nNiDRFr pzs7VTy+gneM5iQh24AeIc7hAtA6lZw22GI8ibmR1J/qEnv6NtcMm/e06cjyF1SI 7ERARduvmzOIYqIh70hAvq052JQwwcMzS450DSypwKhslFNuTXqYpAewujWOhuYM l5pJ+1qKOQ/cNP5cBr3FMCX1KuKnSY9Sg3KGJgTPMexS9QGxTwN6EhaOjA8PU9f6 d9dRYQcUnB1bZt5Ygd3ylxLPDg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:45 2026 by rpki-client