$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json) Hash identifier: 6yEl7srroHE8ZdQoPj2s/1ClO5Y6zgCT/IZ2HBTRht8= Subject key identifier: 6C:DF:BB:E2:F8:32:13:BE:AC:AE:FF:78:95:75:87:71:C9:D7:D3:1B Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft Manifest number: 0ACA Signing time: Tue 28 Jul 2026 19:44:33 +0000 Manifest this update: Tue 28 Jul 2026 19:44:32 +0000 Manifest next update: Tue 04 Aug 2026 19:44:32 +0000 Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: kGQ7sIGXJjVlApg8G3histsUJ9zVxokZlOl0SMZxoH8=) 2: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=) 3: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: AAIxMzs/gvYk9K/xu4n64rt4zSe4EjThnQNO0Ai3Jj8=) 4: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: MN08xTHQWyAMmrT/Pkdf4mSOvLZ+rB9gXlkcOfJJ9xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Jul 28 19:44:32 2026 GMT Not After : Aug 4 19:44:32 2026 GMT Subject: CN=6a6906a0-090c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:f8:25:95:db:0a:6d:ed:2d:bf:02:65:7e: c0:41:a9:a2:12:c1:e3:a0:86:47:f6:5f:01:07:1d: 8c:f5:c2:e7:d6:a8:d1:bd:8b:e1:d1:db:12:af:52: b9:18:d6:89:9b:3e:47:ef:a2:fe:a3:bb:9a:e6:e3: 8b:6f:fc:e7:6d:49:69:54:46:a7:65:d7:88:eb:03: ad:60:b6:18:b3:77:1e:fc:52:a2:a7:9b:66:4c:b5: e7:19:29:71:86:b1:d4:56:50:2b:d6:eb:10:22:2b: db:b0:ce:66:69:aa:d9:ac:d0:bd:f2:29:69:07:c0: 03:23:b8:a5:7b:52:71:cf:72:e2:08:4b:c6:08:67: a9:9a:83:f8:ae:28:a0:27:8e:22:a7:6c:45:8f:47: 14:68:c1:94:ef:95:5d:b3:58:b7:de:85:3e:87:ac: 5b:dc:67:c4:a8:9e:de:99:7d:e0:94:23:f1:96:c5: 1d:c4:10:d3:29:81:56:c6:d2:a9:84:e4:db:b6:a5: 8f:53:32:d0:78:f0:5e:8a:b5:d7:96:0c:19:b5:6c: 09:c8:6b:81:dc:a5:3b:ea:ba:25:f1:c1:18:0f:a8: 64:e3:78:1f:f4:a7:ed:89:ef:73:af:75:d9:76:e9: 1f:51:14:b0:9b:d3:19:8d:f6:7e:51:c9:34:25:55: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DF:BB:E2:F8:32:13:BE:AC:AE:FF:78:95:75:87:71:C9:D7:D3:1B X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e2:c1:a0:1e:eb:42:0d:95:b7:ff:94:d7:ca:94:dc:9b:83: 81:d1:3d:72:e5:60:7b:4a:2a:d0:95:08:70:aa:27:0e:69:cf: fc:84:da:da:88:b9:28:4a:8e:80:65:23:9c:a4:4d:f2:ff:4d: da:23:97:7f:9b:14:b1:90:c5:52:c8:c9:15:fc:43:33:3d:d1: 2a:11:dd:f4:8e:80:0e:ee:97:4b:ae:75:11:db:cb:69:b8:f8: 8f:30:da:12:9c:bd:1a:ec:04:95:42:60:85:83:4a:d6:06:d7: 2c:cd:98:21:39:de:f8:d2:3e:88:38:ce:13:1a:95:2c:c2:26: 14:d9:ee:55:19:93:18:9b:45:d2:08:1d:65:12:0b:e4:3f:c2: cc:f9:cf:75:06:5a:90:4e:c3:21:b3:92:43:f2:6c:2f:e1:01: 55:85:c5:fa:9d:a2:83:b2:25:26:16:56:58:f8:18:6d:61:a5: 9e:83:75:fe:95:21:f5:26:02:2e:68:93:49:09:8f:17:a7:09: 1c:88:0f:c2:6b:6f:28:d0:cb:11:d1:49:0d:8f:37:c4:14:e4: bd:19:f4:46:2a:8b:b3:a3:02:94:9c:33:73:61:fb:cc:fd:94: 0c:80:5e:fa:5a:34:51:c0:de:cb:38:68:fe:5d:cf:7f:46:bc: 66:ce:7f:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjYwNzI4MTk0NDMyWhcNMjYwODA0MTk0NDMyWjAYMRYwFAYD VQQDEw02YTY5MDZhMC0wOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm74JZXbCm3tLb8CZX7AQamiEsHjoIZH9l8BBx2M9cLn1qjRvYvh0dsSr1K5 GNaJmz5H76L+o7ua5uOLb/znbUlpVEanZdeI6wOtYLYYs3ce/FKip5tmTLXnGSlx hrHUVlAr1usQIivbsM5maarZrNC98ilpB8ADI7ile1Jxz3LiCEvGCGepmoP4riig J44ip2xFj0cUaMGU75Vds1i33oU+h6xb3GfEqJ7emX3glCPxlsUdxBDTKYFWxtKp hOTbtqWPUzLQePBeirXXlgwZtWwJyGuB3KU76rol8cEYD6hk43gf9Kftie9zr3XZ dukfURSwm9MZjfZ+Uck0JVUGxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzfu+L4 MhO+rK7/eJV1h3HJ19MbMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK aTNLWXlaRUhYTXoxRm5tdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZOLBoB7rQg2Vt/+U18qU3JuDgdE9cuVge0oq0JUIcKonDmnP/ITa2oi5KEqO gGUjnKRN8v9N2iOXf5sUsZDFUsjJFfxDMz3RKhHd9I6ADu6XS651EdvLabj4jzDa Epy9GuwElUJghYNK1gbXLM2YITne+NI+iDjOExqVLMImFNnuVRmTGJtF0ggdZRIL 5D/CzPnPdQZakE7DIbOSQ/JsL+EBVYXF+p2ig7IlJhZWWPgYbWGlnoN1/pUh9SYC LmiTSQmPF6cJHIgPwmtvKNDLEdFJDY83xBTkvRn0RiqLs6MClJwzc2H7zP2UDIBe +lo0UcDeyzho/l3Pf0a8Zs5/PQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:17:05 2026 by rpki-client