$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: fezDiN4F5J/nTwB3F+x1DGvawJgoRT5B5xEtzPe3mFY= Subject key identifier: 1E:67:42:A5:FB:40:39:FB:D1:C6:7D:44:59:BA:45:B4:27:37:C8:36 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1E2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1DF7 Signing time: Tue 28 Jul 2026 16:11:30 +0000 Manifest this update: Tue 28 Jul 2026 16:11:29 +0000 Manifest next update: Tue 04 Aug 2026 16:11:29 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: 5Dr7otgBZOvMkytMr1axDAY+/sLYLO1F9lynP5u+K2g=) 2: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: SnQLKrTdABnlhkWQ+AVqddVj1mUuPuJmeCU6LxGP6eo=) 3: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: aM1BSZ3PF2IzE+AJHUzu7Yk2PU3p6ogZh2Ox+iMNzws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7724 (0x1e2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Jul 28 16:11:29 2026 GMT Not After : Aug 4 16:11:29 2026 GMT Subject: CN=6a68d4b2-c866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:dc:4e:7d:ad:c6:c8:a8:7f:97:e2:0f:06: d4:17:95:c0:2b:cb:b3:ea:32:38:b3:41:c7:e2:28: f0:c6:77:ed:82:42:20:ea:f1:e4:bd:b4:e5:d7:13: 08:8a:44:a0:b6:75:96:45:92:85:da:cc:31:6f:75: 77:0b:d2:b2:83:63:bb:99:d8:d3:b8:ae:51:60:88: 18:18:29:b1:a5:57:cb:35:5b:81:81:5d:dd:6e:dd: a5:d5:14:93:06:e6:f5:95:2a:aa:6a:6b:4c:4e:68: dc:e8:5d:1d:dd:bc:e7:aa:5c:fe:be:ea:57:a0:a0: 2f:b9:8f:68:48:ba:91:59:5c:34:d7:72:46:f3:f3: c7:02:d6:28:68:87:32:36:29:47:58:75:01:11:bb: b6:30:d2:4a:05:30:ca:50:83:38:9b:f9:7e:68:f5: 1d:18:28:94:ae:92:29:4a:73:cf:dd:2a:80:7e:dc: 22:b0:6f:d0:45:68:b3:09:91:b5:29:68:75:3e:a2: d4:f4:8a:68:79:74:87:c1:76:df:f2:6a:6b:2b:dd: a9:3a:7c:34:f0:20:49:5e:7a:58:7e:e3:23:7e:ba: a8:30:90:79:3a:56:66:a6:fd:58:0c:ce:6c:10:b7: 3e:9a:63:3b:69:78:ee:64:32:f4:b1:d0:f3:5f:ef: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:67:42:A5:FB:40:39:FB:D1:C6:7D:44:59:BA:45:B4:27:37:C8:36 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4f:95:17:fd:7c:8d:ce:fc:e6:1e:ab:d0:2b:a9:c8:7b:2f: 89:57:92:c2:89:78:02:3c:70:1e:ce:a6:13:33:fc:74:54:ad: 8e:14:34:79:5d:de:63:f7:b6:a3:b6:57:d6:87:e7:5e:22:ee: 56:f4:5b:dd:84:5f:a5:d3:fe:f0:59:89:39:f6:a8:60:f4:e4: 0d:2c:6b:15:60:48:d5:a4:61:93:25:e4:fe:e5:1f:e8:a2:c0: 3a:f6:f7:71:c1:4f:61:fe:5c:11:7a:b5:3d:92:e6:f3:ab:09: 1c:6f:e1:66:8c:91:1c:c9:37:6c:37:0c:3f:ab:f1:54:a1:1d: 4d:8f:c3:56:f5:f7:fd:a1:55:1a:a7:26:22:c6:6f:02:b2:9b: 31:61:96:ac:ca:b0:5c:ba:d2:3c:67:bb:1a:e0:e1:74:9e:06: a3:75:43:e5:f0:b3:6b:6b:76:ca:1f:bd:23:4f:1f:35:1f:14: c7:e8:d4:d9:98:e1:9b:1a:46:cc:f5:2f:5a:b1:38:f8:2b:94: 80:18:b8:03:7b:60:c5:0b:c7:d0:65:40:f1:88:b2:e1:16:d5: 34:15:28:d3:cd:5e:eb:c0:7d:c5:47:5d:ac:d8:e1:e5:f3:c4: e2:73:08:d0:ab:7c:5f:79:fa:7f:ce:94:5d:57:3c:c8:b0:3c: 9e:ce:f4:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjYwNzI4MTYxMTI5WhcNMjYwODA0MTYxMTI5WjAYMRYwFAYD VQQDEw02YTY4ZDRiMi1jODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRHcTn2txsiof5fiDwbUF5XAK8uz6jI4s0HH4ijwxnftgkIg6vHkvbTl1xMI ikSgtnWWRZKF2swxb3V3C9Kyg2O7mdjTuK5RYIgYGCmxpVfLNVuBgV3dbt2l1RST Bub1lSqqamtMTmjc6F0d3bznqlz+vupXoKAvuY9oSLqRWVw013JG8/PHAtYoaIcy NilHWHUBEbu2MNJKBTDKUIM4m/l+aPUdGCiUrpIpSnPP3SqAftwisG/QRWizCZG1 KWh1PqLU9IpoeXSHwXbf8mprK92pOnw08CBJXnpYfuMjfrqoMJB5OlZmpv1YDM5s ELc+mmM7aXjuZDL0sdDzX+/tOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5nQqX7 QDn70cZ9RFm6RbQnN8g2MB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0+VF/18jc785h6r0CupyHsviVeSwol4AjxwHs6mEzP8dFStjhQ0eV3eY/e2 o7ZX1ofnXiLuVvRb3YRfpdP+8FmJOfaoYPTkDSxrFWBI1aRhkyXk/uUf6KLAOvb3 ccFPYf5cEXq1PZLm86sJHG/hZoyRHMk3bDcMP6vxVKEdTY/DVvX3/aFVGqcmIsZv ArKbMWGWrMqwXLrSPGe7GuDhdJ4Go3VD5fCza2t2yh+9I08fNR8Ux+jU2ZjhmxpG zPUvWrE4+CuUgBi4A3tgxQvH0GVA8Yiy4RbVNBUo081e68B9xUddrNjh5fPE4nMI 0Kt8X3n6f86UXVc8yLA8ns70+g== -----END CERTIFICATE-----Generated at Tue Jul 28 18:46:53 2026 by rpki-client