$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: BY+ydnp/dlrl4ODKxxXv7TKVIfsUvLePCvjE0XgenyY= Subject key identifier: 42:CE:04:ED:E6:DD:85:F6:D7:D5:80:A6:6E:D6:AA:7C:42:32:3A:EE Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 1D Signing time: Mon 27 Jul 2026 11:24:49 +0000 Manifest this update: Mon 27 Jul 2026 11:24:48 +0000 Manifest next update: Mon 03 Aug 2026 11:24:48 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: g/dGEBhfUubpxeIfEePNNYbgezD3gzun3x9Jvc4R2RA=) 2: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) 3: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Jul 27 11:24:48 2026 GMT Not After : Aug 3 11:24:48 2026 GMT Subject: CN=6a674001-1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:2c:c3:50:27:61:e7:35:a8:21:0f:a6:ab: 34:fd:ba:15:3e:c7:6a:e7:f3:da:07:95:0a:27:9f: bf:30:e3:a7:b0:b1:c4:97:5e:16:b9:5b:48:24:d5: 62:ac:cb:5a:dd:04:25:a7:8d:dd:d7:83:62:07:51: 84:e6:33:19:56:c8:19:3f:80:22:e3:3a:6e:b1:78: 74:86:4b:57:7b:21:06:c0:cc:6a:e9:f8:3c:18:81: e2:9d:13:42:1b:3e:73:38:5c:1d:05:a6:d9:3e:82: fc:34:09:f2:c7:1a:52:a7:f0:19:cf:82:57:fa:1a: a6:b4:53:1b:f1:22:2b:21:16:04:7f:3e:0f:1a:3a: d6:c6:ed:83:4f:28:13:9e:6c:15:db:38:a5:05:ba: d3:01:69:c4:1e:6f:90:bc:3a:82:91:b9:66:0f:bb: bf:a3:a4:94:2c:e5:14:7f:cd:92:bc:41:0e:78:7b: df:7b:2d:de:a9:8f:68:80:c1:d1:02:58:7e:23:2f: 9a:70:3d:8f:3b:d6:74:1d:7a:a3:36:c1:3c:23:65: 06:20:11:44:1e:bb:3b:2b:60:47:df:6a:69:e0:90: 80:d9:3e:13:91:c1:02:28:f7:ae:5a:eb:7b:46:f2: e6:1e:ef:ac:ee:87:9b:d5:a2:1d:70:e1:a8:40:b7: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:04:ED:E6:DD:85:F6:D7:D5:80:A6:6E:D6:AA:7C:42:32:3A:EE X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5a:da:6f:78:ab:24:8d:8e:2e:bc:bc:1d:59:d0:dc:be:b7: d7:d1:70:54:d1:37:60:70:c2:13:70:79:e7:fe:cc:c6:e5:b0: 55:6a:9c:e0:cc:1b:ca:89:3d:1e:8e:ec:6d:0e:37:54:d5:55: 6e:b3:cc:5d:49:37:cf:ce:ec:1d:91:27:dc:b0:15:8c:18:55: 36:02:2c:ba:c1:5f:30:85:32:2d:15:69:c7:f0:0e:61:90:6d: 3c:67:e0:0c:9e:09:98:ba:1d:03:32:dd:8f:cf:97:fd:cb:d2: e9:f4:86:e8:0d:3f:eb:72:cc:60:3f:58:c6:6d:0c:31:f3:b0: 3e:10:93:54:c1:5f:7b:44:ce:a4:19:d9:97:35:12:28:ef:74: 43:b3:48:8a:0a:75:e1:36:6c:aa:5b:bb:31:f3:f9:af:9f:b1: 6b:1d:8f:99:02:ea:a5:ac:c4:19:73:93:5a:7a:95:c4:7a:e9: 8b:af:80:be:bd:a5:95:ec:da:d6:00:3f:8c:90:84:43:52:df: 8b:7d:b6:d9:aa:30:e4:1c:3f:42:1d:ef:37:84:1c:ff:e8:32: 38:ff:f8:87:1e:07:86:f2:fe:b9:a2:3e:e1:73:c8:a4:be:7b: 74:a1:86:9d:64:85:74:42:05:fb:62:e7:88:27:03:7b:70:e3: e9:3a:97:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA3MjcxMTI0NDhaFw0yNjA4MDMxMTI0NDhaMBgxFjAUBgNV BAMTDTZhNjc0MDAxLTEwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxMyzDUCdh5zWoIQ+mqzT9uhU+x2rn89oHlQonn78w46ewscSXXha5W0gk1WKs y1rdBCWnjd3Xg2IHUYTmMxlWyBk/gCLjOm6xeHSGS1d7IQbAzGrp+DwYgeKdE0Ib PnM4XB0Fptk+gvw0CfLHGlKn8BnPglf6Gqa0UxvxIishFgR/Pg8aOtbG7YNPKBOe bBXbOKUFutMBacQeb5C8OoKRuWYPu7+jpJQs5RR/zZK8QQ54e997Ld6pj2iAwdEC WH4jL5pwPY871nQdeqM2wTwjZQYgEUQeuzsrYEffamngkIDZPhORwQIo965a63tG 8uYe76zuh5vVoh1w4ahAt73JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQs4E7ebd hfbX1YCmbtaqfEIyOu4wHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhWtpveKskjY4uvLwdWdDcvrfX0XBU0TdgcMITcHnn/szG5bBVapzgzBvKiT0e juxtDjdU1VVus8xdSTfPzuwdkSfcsBWMGFU2Aiy6wV8whTItFWnH8A5hkG08Z+AM ngmYuh0DMt2Pz5f9y9Lp9IboDT/rcsxgP1jGbQwx87A+EJNUwV97RM6kGdmXNRIo 73RDs0iKCnXhNmyqW7sx8/mvn7FrHY+ZAuqlrMQZc5NaepXEeumLr4C+vaWV7NrW AD+MkIRDUt+LfbbZqjDkHD9CHe83hBz/6DI4//iHHgeG8v65oj7hc8ikvnt0oYad ZIV0QgX7YueIJwN7cOPpOpev -----END CERTIFICATE-----Generated at Tue Jul 28 16:43:44 2026 by rpki-client