$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: SAQBNyliRbsEdXywZ7iF4pynk7DiHDJFNPpyG+pICPU= Subject key identifier: 52:1A:84:BB:D2:2F:2C:F9:97:C6:7F:E4:62:1D:35:70:E9:C9:1F:36 Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: 0122 Signing time: Mon 27 Jul 2026 07:45:05 +0000 Manifest this update: Mon 27 Jul 2026 07:45:04 +0000 Manifest next update: Mon 03 Aug 2026 07:45:04 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: rQAD/DnORbHO849wDLNjwo2Wa/3QzOt6VcYdYps/bc4=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: BF86bk5wE6Zr1m3LZ6kF7qlbs43Gmk6OeQj3ok60wVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Jul 27 07:45:04 2026 GMT Not After : Aug 3 07:45:04 2026 GMT Subject: CN=6a670c81-ecfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:23:e9:2a:32:f6:25:1a:8e:6b:7f:0b:62: 73:3c:61:cb:fb:88:f2:68:06:7d:b1:71:b9:5b:4c: bf:15:20:6e:5a:6b:31:9a:ec:d6:62:38:e7:7c:95: 43:33:ee:f3:8e:13:dd:33:36:5f:56:e8:e0:c9:50: 74:c2:84:15:e1:2c:5b:01:2f:c1:ef:7f:c5:d3:54: 0e:b1:e5:3c:0f:96:fc:f2:3d:5a:d7:e8:57:ad:ed: 51:9b:18:91:3b:2e:61:2a:8c:9c:8b:29:9f:37:5c: 4f:f9:c7:6d:79:fc:27:34:de:8a:a3:71:86:c4:e0: ba:08:f2:d4:90:a1:ad:89:6f:1c:81:ee:3a:15:80: 2a:68:07:48:4e:54:4d:c9:47:24:53:56:9c:70:94: 90:bd:55:25:f2:0a:2a:db:aa:b7:ee:a8:ed:f0:72: 2d:59:87:17:35:54:9b:be:e5:03:e6:9f:b0:b8:aa: 49:48:91:5a:e3:b9:5e:5c:c3:ef:42:f2:0d:30:b3: 3a:76:de:ee:a1:4d:ab:3f:79:29:33:b3:00:0c:26: cf:15:40:41:0a:99:cf:f9:95:42:26:67:fb:45:25: 9d:ff:9b:50:9a:35:65:32:94:42:7b:1a:11:1e:8c: ec:1b:3a:e4:d5:ac:62:59:fd:ab:1d:0e:7e:7a:4d: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:84:BB:D2:2F:2C:F9:97:C6:7F:E4:62:1D:35:70:E9:C9:1F:36 X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:89:b7:b4:d6:4b:15:fb:ff:71:c5:50:46:41:61:af:e4:7d: 4f:94:25:22:e6:4d:76:67:57:7d:b0:15:96:ef:dd:8c:48:c5: 6c:b2:b6:cf:1f:15:07:d7:c7:59:3c:54:67:fe:d5:92:3b:ec: 21:6f:ce:b0:45:3a:58:9a:a1:a6:00:28:0f:4d:96:03:cf:35: db:17:98:0e:e4:da:1d:e1:9f:a3:b3:b3:6c:e8:df:c4:0a:7a: 5e:94:a0:88:de:fa:ee:74:1d:03:ad:29:0f:fc:21:a5:00:17: d2:bd:de:07:d4:ff:75:ed:51:8c:09:05:fc:44:ed:fe:eb:1f: 4f:bc:61:37:96:5f:55:87:16:b1:d3:89:10:65:0e:62:30:4b: 64:d0:b6:c9:66:5d:6c:44:83:1a:be:38:b6:a3:6c:c2:db:b2: 64:fe:77:3c:50:19:69:eb:06:6d:d5:ca:3d:94:f6:4d:cb:03: 90:e9:ae:56:da:d8:5a:29:cd:8a:9d:84:59:31:cd:fa:4e:9c: 63:ea:f3:4e:c0:6b:c5:db:73:9c:9d:d9:b4:d9:88:14:c1:e6: ec:d7:2a:4e:65:fa:f5:a6:bd:50:06:f2:c5:76:ab:2a:12:ab: 03:fc:56:d8:1c:11:b0:65:c7:06:de:d3:ad:cf:15:62:08:6c: b6:b8:12:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjYwNzI3MDc0NTA0WhcNMjYwODAzMDc0NTA0WjAYMRYwFAYD VQQDEw02YTY3MGM4MS1lY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1Uj6Soy9iUajmt/C2JzPGHL+4jyaAZ9sXG5W0y/FSBuWmsxmuzWYjjnfJVD M+7zjhPdMzZfVujgyVB0woQV4SxbAS/B73/F01QOseU8D5b88j1a1+hXre1RmxiR Oy5hKoyciymfN1xP+cdtefwnNN6Ko3GGxOC6CPLUkKGtiW8cge46FYAqaAdITlRN yUckU1accJSQvVUl8goq26q37qjt8HItWYcXNVSbvuUD5p+wuKpJSJFa47leXMPv QvINMLM6dt7uoU2rP3kpM7MADCbPFUBBCpnP+ZVCJmf7RSWd/5tQmjVlMpRCexoR HozsGzrk1axiWf2rHQ5+ek1ZBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIahLvS Lyz5l8Z/5GIdNXDpyR82MB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfIm3tNZLFfv/ccVQRkFhr+R9T5QlIuZNdmdXfbAVlu/djEjFbLK2zx8VB9fH WTxUZ/7VkjvsIW/OsEU6WJqhpgAoD02WA8812xeYDuTaHeGfo7OzbOjfxAp6XpSg iN767nQdA60pD/whpQAX0r3eB9T/de1RjAkF/ETt/usfT7xhN5ZfVYcWsdOJEGUO YjBLZNC2yWZdbESDGr44tqNswtuyZP53PFAZaesGbdXKPZT2TcsDkOmuVtrYWinN ip2EWTHN+k6cY+rzTsBrxdtznJ3ZtNmIFMHm7NcqTmX69aa9UAbyxXarKhKrA/xW 2BwRsGXHBt7Trc8VYghstrgSJw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:57:43 2026 by rpki-client