$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: vMXfeJAGg1qBuMf1X+a4l2u6YV4BQhS3qnkON8DiyTQ= Subject key identifier: 42:EF:BA:E1:48:FF:1C:80:D6:18:8E:DD:7D:3C:39:0B:B8:B3:90:13 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D23 Signing time: Tue 28 Jul 2026 18:22:54 +0000 Manifest this update: Tue 28 Jul 2026 18:22:53 +0000 Manifest next update: Tue 04 Aug 2026 18:22:53 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: Ebe8l0Aqi1+uNr9X8pSapeixWe2VJJAm9R6A13+mWjw=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Jul 28 18:22:53 2026 GMT Not After : Aug 4 18:22:53 2026 GMT Subject: CN=6a68f37e-e1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:14:9f:8f:d3:42:b8:94:c8:28:7c:d6:17: 69:2c:b5:85:38:7a:02:fc:4b:57:54:ec:ca:1a:50: 60:b4:db:8f:dc:98:b6:10:68:5f:71:26:25:76:84: 14:4e:93:21:2e:06:d2:cd:ce:a8:e8:93:60:0f:18: 20:b4:9d:f2:cc:7b:a5:fc:95:54:24:3e:8e:4e:75: 86:21:e5:4a:f0:64:ce:2c:72:2b:fc:a5:66:3b:0e: 63:99:72:f6:6f:a7:96:7b:e6:29:c5:4f:00:ae:f0: 70:0a:49:28:3c:86:74:17:ff:3f:6a:eb:e1:ca:01: 42:ea:d3:f4:cd:ae:1f:54:ce:1f:b9:8d:e9:70:db: 8e:d8:3c:9b:d5:ce:92:20:84:4e:9c:7c:c8:0f:63: 45:9a:60:d8:69:fe:7e:27:70:89:ef:7c:17:82:2b: 6b:6b:87:3b:2e:27:ac:5c:ee:52:16:f7:16:21:41: 9a:bf:35:b0:64:eb:c5:0a:b5:a5:81:7b:0d:80:7d: 4e:6c:1a:e4:00:85:e2:7e:8f:91:69:07:c5:16:7b: ed:bb:e2:c8:59:b6:b1:6d:9b:2f:4e:2b:e9:05:06: ae:3a:ad:8a:b8:19:eb:53:14:10:a8:6f:65:78:e9: a5:f1:7a:52:0a:f8:8f:56:7c:84:63:8f:d3:74:43: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EF:BA:E1:48:FF:1C:80:D6:18:8E:DD:7D:3C:39:0B:B8:B3:90:13 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5f:44:86:bc:4a:74:73:96:2f:0f:88:82:19:a9:a7:86:3a: 29:27:37:b8:db:03:e9:da:97:c7:96:f7:d8:a8:d8:28:cd:1a: f2:35:b3:fb:48:9e:d1:3b:13:9b:7d:6f:58:50:23:10:53:2b: 00:4c:6e:6a:d5:9c:a6:2e:77:07:bb:29:ce:51:c8:b5:f3:65: 42:6a:71:3c:d8:0e:dd:23:73:38:e1:4b:89:f4:49:41:eb:c7: 69:ce:6d:8d:3f:42:63:d6:0b:31:b8:aa:3e:9e:96:82:50:12: 3c:c0:98:f8:9c:1d:5f:cd:14:57:88:a9:c9:03:02:1f:f3:a4: c6:3a:5e:69:e0:eb:8e:56:6c:d3:b6:2b:43:f3:99:01:90:15: c1:92:11:f4:65:e8:2a:c7:ae:14:f0:ea:13:9b:ec:70:a1:31: cb:90:85:a6:9b:ba:30:da:d4:06:ae:c7:6c:b3:fe:06:68:84: 7d:49:05:fd:fd:89:83:d6:c5:78:8c:6c:51:96:0c:67:ce:fe: fc:53:df:b5:f0:2b:80:20:aa:a3:cb:23:ba:31:c6:cf:12:b0: 76:90:c7:20:01:08:54:4e:2f:3c:4c:f6:13:9c:1a:73:33:59: 0d:72:73:0b:8f:df:3f:4a:3b:9c:cc:8d:9c:58:c9:6c:2e:d1: c2:e1:29:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNzI4MTgyMjUzWhcNMjYwODA0MTgyMjUzWjAYMRYwFAYD VQQDEw02YTY4ZjM3ZS1lMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPMUn4/TQriUyCh81hdpLLWFOHoC/EtXVOzKGlBgtNuP3Ji2EGhfcSYldoQU TpMhLgbSzc6o6JNgDxggtJ3yzHul/JVUJD6OTnWGIeVK8GTOLHIr/KVmOw5jmXL2 b6eWe+YpxU8ArvBwCkkoPIZ0F/8/auvhygFC6tP0za4fVM4fuY3pcNuO2Dyb1c6S IIROnHzID2NFmmDYaf5+J3CJ73wXgitra4c7LiesXO5SFvcWIUGavzWwZOvFCrWl gXsNgH1ObBrkAIXifo+RaQfFFnvtu+LIWbaxbZsvTivpBQauOq2KuBnrUxQQqG9l eOml8XpSCviPVnyEY4/TdEMu/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELvuuFI /xyA1hiO3X08OQu4s5ATMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVF9EhrxKdHOWLw+Ighmpp4Y6KSc3uNsD6dqXx5b32KjYKM0a8jWz+0ie0TsT m31vWFAjEFMrAExuatWcpi53B7spzlHItfNlQmpxPNgO3SNzOOFLifRJQevHac5t jT9CY9YLMbiqPp6WglASPMCY+JwdX80UV4ipyQMCH/OkxjpeaeDrjlZs07YrQ/OZ AZAVwZIR9GXoKseuFPDqE5vscKExy5CFppu6MNrUBq7HbLP+BmiEfUkF/f2Jg9bF eIxsUZYMZ87+/FPftfArgCCqo8sjujHGzxKwdpDHIAEIVE4vPEz2E5waczNZDXJz C4/fP0o7nMyNnFjJbC7RwuEpvw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:38 2026 by rpki-client