$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: PET7f6sGaRPSH1q89ociUiNdsO3jfbnLes0hsbi52lM= Subject key identifier: 5E:47:C0:46:D5:1C:3E:E8:99:37:83:70:3E:84:6F:A9:0F:0C:C7:5C Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: 0124 Signing time: Mon 27 Jul 2026 07:44:02 +0000 Manifest this update: Mon 27 Jul 2026 07:44:01 +0000 Manifest next update: Mon 03 Aug 2026 07:44:01 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: SBSUyBer5Z/5YVBUAmoglwOpu0+V51wKpXPKdQ+8rM4=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Jul 27 07:44:01 2026 GMT Not After : Aug 3 07:44:01 2026 GMT Subject: CN=6a670c41-7e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:87:f2:91:0f:13:4b:d8:69:0e:dd:fb:0a: a6:c3:71:bd:ef:0b:76:20:97:6b:ae:8e:5b:3c:12: be:0a:44:fe:78:ed:62:a4:08:80:14:8e:35:aa:79: e3:eb:b0:f3:24:11:31:9c:a2:a8:e5:5c:2e:da:9a: 7d:22:c2:01:cc:e0:03:bd:53:06:f7:6d:d1:26:33: 8d:95:29:5e:14:80:8f:07:21:ef:2f:aa:67:04:8f: de:b9:fe:8e:72:e9:d2:34:48:a0:bf:c3:7a:b7:ed: 6d:e1:00:10:b1:4d:2c:6e:ff:e0:cf:8b:fa:99:04: a5:a4:dd:4a:02:5b:d5:64:b0:02:b8:eb:5c:f9:d5: a0:65:53:e7:4b:0b:ee:58:95:b4:fa:3c:82:2a:f9: 82:fb:04:b5:c7:81:57:32:9d:50:c4:3f:e7:9a:b8: 86:24:9a:0c:b0:c8:db:2b:d1:14:4d:fd:35:5a:83: b2:51:1c:e0:89:91:cb:de:04:40:22:9a:e6:27:76: df:5e:be:5c:f6:1d:bc:4e:39:6a:62:e2:d0:d4:37: 11:7b:c5:c0:0e:03:71:7b:1c:93:c7:77:f3:22:e1: 9f:00:21:25:df:73:37:bc:be:39:d6:13:ac:4a:1d: 0f:59:aa:16:97:c9:18:09:4a:21:fb:6f:e1:b3:e5: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:C0:46:D5:1C:3E:E8:99:37:83:70:3E:84:6F:A9:0F:0C:C7:5C X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:d2:da:c3:6e:e3:cc:9b:34:01:49:79:bb:bd:cc:3f:4e:fd: 61:a3:6b:91:fc:9a:01:56:92:f7:67:4b:c2:f5:79:31:b7:11: e6:0a:da:4c:c4:90:3e:84:cb:27:68:bc:68:9a:17:39:ef:49: 4d:bc:b7:f9:ea:4b:99:27:a5:2c:cd:5a:0f:b1:77:c4:de:09: 18:5b:86:7e:0f:37:55:02:5a:66:fc:73:22:07:b5:46:59:66: 27:08:ca:b8:86:5c:4a:e1:38:88:c6:83:ff:28:5f:8e:7c:48: 25:01:a3:12:2f:2c:39:d5:0b:9b:55:2b:30:1e:0b:75:60:83: 78:6f:97:6b:67:aa:9b:87:9e:e6:6e:5a:6f:cd:66:cb:4e:a3: 3d:7a:6b:5e:e2:80:f4:62:81:6d:c0:78:ba:2a:cd:fe:b7:1a: 18:ec:b0:12:18:56:5e:25:8d:54:76:4b:8b:3b:49:e1:d2:df: 95:24:66:b1:d5:6f:d2:dd:8a:b1:1c:4b:c7:a4:52:69:de:09: 1e:d9:bf:7d:a0:01:e7:61:64:7e:70:c4:09:42:94:53:c9:0f: af:49:54:d0:48:c8:4f:0c:f2:47:f3:05:58:b3:f0:d0:36:de: 71:66:70:a2:8b:16:6e:35:d9:ca:1c:3a:72:b5:85:94:46:92: 07:2b:f3:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz MEU3NDBGMDcwHhcNMjYwNzI3MDc0NDAxWhcNMjYwODAzMDc0NDAxWjAYMRYwFAYD VQQDEw02YTY3MGM0MS03ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCyH8pEPE0vYaQ7d+wqmw3G97wt2IJdrro5bPBK+CkT+eO1ipAiAFI41qnnj 67DzJBExnKKo5Vwu2pp9IsIBzOADvVMG923RJjONlSleFICPByHvL6pnBI/euf6O cunSNEigv8N6t+1t4QAQsU0sbv/gz4v6mQSlpN1KAlvVZLACuOtc+dWgZVPnSwvu WJW0+jyCKvmC+wS1x4FXMp1QxD/nmriGJJoMsMjbK9EUTf01WoOyURzgiZHL3gRA IprmJ3bfXr5c9h28TjlqYuLQ1DcRe8XADgNxexyTx3fzIuGfACEl33M3vL451hOs Sh0PWaoWl8kYCUoh+2/hs+UruQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5HwEbV HD7omTeDcD6Eb6kPDMdcMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G WGduck5FZUlFNVF3NTBEd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3tLaw27jzJs0AUl5u73MP079YaNrkfyaAVaS92dLwvV5MbcR5graTMSQPoTL J2i8aJoXOe9JTby3+epLmSelLM1aD7F3xN4JGFuGfg83VQJaZvxzIge1RllmJwjK uIZcSuE4iMaD/yhfjnxIJQGjEi8sOdULm1UrMB4LdWCDeG+Xa2eqm4ee5m5ab81m y06jPXprXuKA9GKBbcB4uirN/rcaGOywEhhWXiWNVHZLiztJ4dLflSRmsdVv0t2K sRxLx6RSad4JHtm/faAB52FkfnDECUKUU8kPr0lU0EjITwzyR/MFWLPw0DbecWZw oosWbjXZyhw6crWFlEaSByvzrA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:54:07 2026 by rpki-client