$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: 1z9VIkXRAm85k2ZRsJ/dbkr3hPu4EMPtLmXrTWU6FdA= Subject key identifier: 3A:EF:AF:34:2A:A8:8B:47:5E:9F:3C:FC:CC:E3:6E:79:FE:19:0F:2F Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 02B5 Signing time: Mon 27 Jul 2026 02:43:00 +0000 Manifest this update: Mon 27 Jul 2026 02:42:59 +0000 Manifest next update: Mon 03 Aug 2026 02:42:59 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: waN6Kh0RWnVwaJ6gIuV+t2/1zYyBM7fZJ+6CL7z6BYE=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: Jul 27 02:42:59 2026 GMT Not After : Aug 3 02:42:59 2026 GMT Subject: CN=6a66c5b4-dca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:ff:bd:26:48:49:c5:35:ae:2d:8e:df:3c: 34:5a:1b:91:36:b4:9d:dc:f0:70:a7:02:83:19:06: 72:83:7d:ef:71:bd:c9:be:d8:71:4c:a9:5b:07:e6: 93:7e:f8:9e:f4:bb:cc:85:7d:bc:b9:20:f2:a5:04: 6d:e0:26:c1:e2:ac:24:25:5c:ff:dd:15:a5:06:31: 8d:71:0f:40:5a:27:31:74:7b:dc:e5:46:eb:f0:9d: 32:da:46:e9:b1:cc:41:ca:85:e4:a8:fb:6b:c1:af: cf:b3:36:eb:77:3c:80:a6:b6:dd:9c:32:9a:ef:d3: b3:1b:87:f6:3d:95:63:14:50:56:94:84:a7:fa:49: a1:7c:7c:12:09:cd:1f:3c:4d:e2:30:97:5c:b0:8f: 71:04:1d:0f:fa:33:b0:48:3f:00:b6:cf:2c:66:fa: de:92:f3:4d:f0:30:01:04:7d:48:43:af:75:ae:66: f4:96:f8:73:71:2e:1c:e4:79:d3:4c:9e:67:fa:98: 60:f3:81:54:44:1a:1d:8b:43:20:75:02:c6:29:b5: 5d:33:56:ed:e1:a0:1d:cc:eb:93:50:b3:19:67:a4: 36:40:18:61:bf:20:30:da:97:8a:18:df:c3:39:4d: 0c:e4:88:a6:f7:23:b3:69:57:3c:c9:98:b1:46:fe: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:AF:34:2A:A8:8B:47:5E:9F:3C:FC:CC:E3:6E:79:FE:19:0F:2F X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4a:bb:43:73:13:84:4c:88:d5:b9:1e:04:f0:b7:57:3e:c4: 52:fe:8d:8d:77:c0:bd:09:d0:2a:ba:a3:3a:01:d5:00:f2:36: 40:69:27:5a:ca:b3:a4:cb:ac:72:8e:13:34:d6:94:16:57:ca: 85:37:11:d2:df:87:ec:00:dd:dd:e2:c5:53:b5:1c:77:e5:bc: a2:a2:c7:0d:16:6d:61:0d:81:7f:b6:fb:16:a5:7d:7e:28:0e: aa:04:dd:e1:59:da:cd:cc:d3:f5:1d:cb:f6:95:f4:09:2f:50: 9e:ea:fa:b3:4b:e2:80:ec:d9:80:61:97:b9:b8:46:48:f4:df: cf:61:ac:a5:34:77:c4:76:4f:9e:c7:9a:66:b7:03:32:e7:14: 14:f0:f1:1a:32:4c:b0:dc:e5:e3:a5:7f:0f:4e:98:1f:29:4d: e5:e8:98:26:c2:71:93:24:ea:a9:a4:60:5e:89:97:39:6d:33: bb:b8:2c:60:4f:eb:a4:4a:85:97:08:42:30:40:f0:ad:58:f4: c3:06:90:5b:4d:4c:f1:13:0e:c4:d1:d7:1f:65:e5:9e:50:3d: 2b:db:99:bd:a9:51:0f:eb:f7:c9:57:83:09:2d:d0:92:f7:6e: f1:b0:0f:92:78:f0:86:b9:e6:96:d7:c0:9b:1c:30:18:10:d6: f3:45:2e:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjYwNzI3MDI0MjU5WhcNMjYwODAzMDI0MjU5WjAYMRYwFAYD VQQDEw02YTY2YzViNC1kY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKH/vSZIScU1ri2O3zw0WhuRNrSd3PBwpwKDGQZyg33vcb3JvthxTKlbB+aT fvie9LvMhX28uSDypQRt4CbB4qwkJVz/3RWlBjGNcQ9AWicxdHvc5Ubr8J0y2kbp scxByoXkqPtrwa/PszbrdzyAprbdnDKa79OzG4f2PZVjFFBWlISn+kmhfHwSCc0f PE3iMJdcsI9xBB0P+jOwSD8Ats8sZvrekvNN8DABBH1IQ691rmb0lvhzcS4c5HnT TJ5n+phg84FURBodi0MgdQLGKbVdM1bt4aAdzOuTULMZZ6Q2QBhhvyAw2peKGN/D OU0M5Iim9yOzaVc8yZixRv6lMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrvrzQq qItHXp88/Mzjbnn+GQ8vMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATUq7Q3MThEyI1bkeBPC3Vz7EUv6NjXfAvQnQKrqjOgHVAPI2QGknWsqzpMus co4TNNaUFlfKhTcR0t+H7ADd3eLFU7Ucd+W8oqLHDRZtYQ2Bf7b7FqV9figOqgTd 4VnazczT9R3L9pX0CS9Qnur6s0vigOzZgGGXubhGSPTfz2GspTR3xHZPnseaZrcD MucUFPDxGjJMsNzl46V/D06YHylN5eiYJsJxkyTqqaRgXomXOW0zu7gsYE/rpEqF lwhCMEDwrVj0wwaQW01M8RMOxNHXH2XlnlA9K9uZvalRD+v3yVeDCS3Qkvdu8bAP knjwhrnmltfAmxwwGBDW80UuLg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:54 2026 by rpki-client