$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: 80x6S/oyO2OTT/KK1QQkEDFENP+PYjb/gwdoGnIKlhA= Subject key identifier: CD:20:DB:E1:B3:A9:45:47:77:EA:B9:D0:F7:6D:9C:D3:05:61:AD:D8 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 360C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 35B8 Signing time: Tue 28 Jul 2026 14:41:45 +0000 Manifest this update: Tue 28 Jul 2026 14:41:45 +0000 Manifest next update: Tue 04 Aug 2026 14:41:45 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: bLHeCVvivwc7uiJRqVYDUxUxflLW+wzLIcwFvQ03Q84=) 2: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=) 3: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: i7xoaF0lo4v/u3C3CSr1yIhYmxnuvtGvhXEfUH5uBHU=) 4: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=) 5: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=) 6: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=) 7: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13836 (0x360c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Jul 28 14:41:45 2026 GMT Not After : Aug 4 14:41:45 2026 GMT Subject: CN=6a68bfa9-dbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:39:7e:1b:46:5d:d6:58:fb:4f:ee:b1:63: 64:95:7e:94:eb:66:dd:eb:4f:3c:4e:b1:df:54:b9: c2:07:33:35:3e:9a:6e:ba:f5:a8:51:a0:cb:94:82: ba:03:1c:60:e3:8b:fc:dd:83:e8:01:d9:ed:03:0a: 7a:c8:45:d4:73:f2:0d:ba:70:e2:09:41:87:24:b1: a3:f1:56:ad:54:3e:0c:82:e1:4c:f2:54:bc:35:09: 61:73:5c:9f:d4:13:d6:03:18:4d:68:bb:1d:25:55: 4c:9c:4d:90:de:e9:7a:c8:ad:cb:7d:80:66:c6:04: d5:5b:ba:65:15:24:a3:5e:e7:1b:16:33:05:b5:be: d2:d2:58:b8:5c:ca:d3:2e:b7:b4:b1:e1:5a:e9:81: 74:3b:e8:f7:08:29:a1:9e:30:71:7b:ae:8e:31:6f: 55:04:14:eb:1a:30:e1:2b:17:4b:61:4a:a6:f8:c5: 31:88:6b:f8:94:2a:4f:99:29:4d:e1:e1:98:b6:53: 5c:20:17:92:68:ce:5d:4c:4b:6d:e0:18:36:79:2a: 28:c5:13:4a:ed:9e:c7:9a:45:86:28:d5:82:82:7e: b3:10:16:b4:2d:92:2c:0b:b6:7c:bd:7d:36:d8:40: 24:93:7a:8a:92:44:cc:75:af:63:63:d8:51:78:32: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:DB:E1:B3:A9:45:47:77:EA:B9:D0:F7:6D:9C:D3:05:61:AD:D8 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:be:32:aa:c7:13:d5:5d:a0:4c:04:99:71:c0:3b:2e:37:53: 94:03:a0:3e:f7:65:b8:70:b7:3b:65:77:31:84:8b:41:1e:4e: 30:6a:7f:58:6e:17:1c:29:87:90:ac:f3:e4:ec:9c:45:1c:6a: 15:50:02:5a:e1:e9:86:57:46:83:8a:8a:76:c1:c6:70:f9:d1: b8:bf:fd:57:99:85:b7:60:a3:90:41:fe:b8:f4:7f:05:0e:2c: de:75:ff:aa:6d:c1:c7:7e:f4:88:04:dd:be:92:e4:b0:86:58: 8b:ac:7c:3c:ab:f2:91:e5:67:ea:6b:69:ec:e2:eb:33:86:5d: 46:16:ed:3f:ed:38:a1:cb:51:1a:35:b4:2b:2a:aa:85:d6:7f: fd:bd:0f:e1:a1:67:8c:fc:48:ee:0d:cb:7b:95:42:ae:4c:47: cc:90:d5:ed:63:f2:ab:5b:56:01:0c:b2:ce:73:eb:0f:4b:3d: 57:4a:4e:68:0a:ef:57:5c:a3:a3:89:b5:3f:ac:ab:90:2e:a1: fb:3a:25:87:df:26:f5:9b:67:d5:31:d9:c4:96:87:9c:45:16: 3c:4b:71:66:18:bc:c0:85:ac:25:7b:a8:78:04:78:7e:4d:be: a0:9c:43:87:82:cf:a8:ba:35:25:0e:19:3f:ac:c6:eb:dd:ea: da:19:cd:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNzI4MTQ0MTQ1WhcNMjYwODA0MTQ0MTQ1WjAYMRYwFAYD VQQDEw02YTY4YmZhOS1kYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvk5fhtGXdZY+0/usWNklX6U62bd6088TrHfVLnCBzM1PppuuvWoUaDLlIK6 Axxg44v83YPoAdntAwp6yEXUc/INunDiCUGHJLGj8VatVD4MguFM8lS8NQlhc1yf 1BPWAxhNaLsdJVVMnE2Q3ul6yK3LfYBmxgTVW7plFSSjXucbFjMFtb7S0li4XMrT Lre0seFa6YF0O+j3CCmhnjBxe66OMW9VBBTrGjDhKxdLYUqm+MUxiGv4lCpPmSlN 4eGYtlNcIBeSaM5dTEtt4Bg2eSooxRNK7Z7HmkWGKNWCgn6zEBa0LZIsC7Z8vX02 2EAkk3qKkkTMda9jY9hReDIUwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0g2+Gz qUVHd+q50PdtnNMFYa3YMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnr4yqscT1V2gTASZccA7LjdTlAOgPvdluHC3O2V3MYSLQR5OMGp/WG4XHCmH kKzz5OycRRxqFVACWuHphldGg4qKdsHGcPnRuL/9V5mFt2CjkEH+uPR/BQ4s3nX/ qm3Bx370iATdvpLksIZYi6x8PKvykeVn6mtp7OLrM4ZdRhbtP+04octRGjW0Kyqq hdZ//b0P4aFnjPxI7g3Le5VCrkxHzJDV7WPyq1tWAQyyznPrD0s9V0pOaArvV1yj o4m1P6yrkC6h+zolh98m9Ztn1THZxJaHnEUWPEtxZhi8wIWsJXuoeAR4fk2+oJxD h4LPqLo1JQ4ZP6zG693q2hnN4g== -----END CERTIFICATE-----Generated at Wed Jul 29 02:44:32 2026 by rpki-client