$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: DhlO3bYi47e4n+rVT4WulV9g/xat/OpUdGLriKQt/6Q= Subject key identifier: AB:99:7D:98:7A:9B:B0:1D:52:B9:D3:6B:EB:90:5E:03:59:0E:40:C8 Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: 0131 Signing time: Mon 27 Jul 2026 07:35:25 +0000 Manifest this update: Mon 27 Jul 2026 07:35:25 +0000 Manifest next update: Mon 03 Aug 2026 07:35:25 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: 3G0WXOd/ipr4ZQeOJgpp4WIk7bFZouvr/vPooLWczZM=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Jul 27 07:35:25 2026 GMT Not After : Aug 3 07:35:25 2026 GMT Subject: CN=6a670a3d-4dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:2d:66:75:a0:90:21:58:e4:5f:7e:07:2a: 0a:04:7e:fd:65:41:ca:27:55:79:9c:6c:ee:74:8e: 8c:ea:3b:6d:d1:e0:e9:f8:ab:f5:57:92:63:79:6a: 40:75:9c:9c:0e:17:e8:7c:36:fb:1c:df:2c:79:9f: 2b:6e:52:0d:21:5e:d1:86:bd:96:34:4b:2c:b9:fa: 43:0d:da:de:b2:a9:c3:ae:b4:cd:27:97:30:e7:c9: 9c:84:e0:5a:5e:80:b3:63:94:8d:35:6f:aa:2d:f2: 06:38:4a:26:82:d1:18:9b:25:ed:e0:c4:fd:84:09: ac:67:80:87:aa:c8:00:12:0d:b2:82:19:3b:af:d9: b2:6f:74:d9:18:97:c9:94:83:cb:86:64:1a:1c:ac: ea:5f:74:bd:bd:a0:e1:0b:8f:10:c9:90:f5:eb:39: 4b:25:4a:b3:ce:54:59:db:78:67:c5:90:61:a2:52: 57:ce:ac:af:d2:24:a3:99:4a:74:ef:65:d9:3e:fa: b1:93:78:b5:53:9a:26:5b:e6:02:b2:57:17:48:fe: a1:76:8f:7c:c4:3e:cf:24:e3:7b:c2:d6:31:cb:b1: fd:74:af:c7:4c:94:1d:01:c5:e9:64:f3:d0:29:2e: cf:50:1c:e5:ff:e6:5c:21:ba:74:66:50:cb:35:7b: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:7D:98:7A:9B:B0:1D:52:B9:D3:6B:EB:90:5E:03:59:0E:40:C8 X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:e4:1b:cb:78:75:a6:93:32:df:50:36:ec:5a:c8:e0:52: d6:d6:56:05:d4:b6:50:32:85:bc:64:89:64:0c:a6:bf:e6:73: cf:8e:e0:a9:a4:a5:49:57:a9:e8:3c:6f:07:af:91:bb:65:9e: 17:32:53:97:20:78:a0:8c:4a:91:c3:fd:c4:76:9d:be:27:e0: c1:66:51:19:6a:78:14:c6:0c:47:16:3d:ae:f1:42:42:d2:46: b1:4b:fe:80:9b:01:4a:c1:03:3a:d6:6c:5c:80:24:ab:3c:ac: 19:76:b8:8f:b4:b3:ca:71:1e:31:5d:a2:2f:92:0d:a3:3c:ee: 7f:da:b1:df:33:5c:5b:8a:59:bd:37:2c:b2:96:7b:51:69:ba: b9:09:8d:1a:08:1c:74:21:80:f9:c7:55:eb:ea:87:39:6e:21: f0:71:9d:a5:c0:5c:85:7c:79:69:40:7c:91:4e:2f:5b:4d:ef: b5:cb:8e:60:5b:7d:3e:2f:b6:5f:56:ea:be:27:c5:13:b7:0e: 55:99:d6:da:23:0d:99:c0:86:2b:43:cd:a2:6e:d9:a8:25:06: 91:18:16:b6:49:67:77:10:16:7b:fe:ec:eb:dd:c6:69:e3:cd: a1:43:77:b9:48:36:09:8e:30:9f:0b:11:11:d3:3e:7c:de:f8: 50:48:13:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0QyMjY3NTgyMTA5 MkZGRkQwMkMwHhcNMjYwNzI3MDczNTI1WhcNMjYwODAzMDczNTI1WjAYMRYwFAYD VQQDEw02YTY3MGEzZC00ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtktZnWgkCFY5F9+ByoKBH79ZUHKJ1V5nGzudI6M6jtt0eDp+Kv1V5JjeWpA dZycDhfofDb7HN8seZ8rblINIV7Rhr2WNEssufpDDdresqnDrrTNJ5cw58mchOBa XoCzY5SNNW+qLfIGOEomgtEYmyXt4MT9hAmsZ4CHqsgAEg2yghk7r9myb3TZGJfJ lIPLhmQaHKzqX3S9vaDhC48QyZD16zlLJUqzzlRZ23hnxZBholJXzqyv0iSjmUp0 72XZPvqxk3i1U5omW+YCslcXSP6hdo98xD7PJON7wtYxy7H9dK/HTJQdAcXpZPPQ KS7PUBzl/+ZcIbp0ZlDLNXuDYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuZfZh6 m7AdUrnTa+uQXgNZDkDIMB8GA1UdIwQYMBaAFIXpmcIr7gHDJk09ImdYIQkv/9As MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEzMi9DNEZBMTRGOEI4 MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFjTW1UVDBpWjFnaENTX18w Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFj TW1UVDBpWjFnaENTX18wQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARETkG8t4daaTMt9QNuxayOBS1tZWBdS2UDKFvGSJZAymv+Zzz47gqaSlSVep 6DxvB6+Ru2WeFzJTlyB4oIxKkcP9xHadvifgwWZRGWp4FMYMRxY9rvFCQtJGsUv+ gJsBSsEDOtZsXIAkqzysGXa4j7SzynEeMV2iL5INozzuf9qx3zNcW4pZvTcsspZ7 UWm6uQmNGggcdCGA+cdV6+qHOW4h8HGdpcBchXx5aUB8kU4vW03vtcuOYFt9Pi+2 X1bqvifFE7cOVZnW2iMNmcCGK0PNom7ZqCUGkRgWtklndxAWe/7s693GaePNoUN3 uUg2CY4wnwsREdM+fN74UEgThg== -----END CERTIFICATE-----Generated at Wed Jul 29 00:10:46 2026 by rpki-client