$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: Y/xK1JsMqhG5+EWKaWvQCqMRXYISPsONpInoMUkRnAQ= Subject key identifier: D4:BD:7A:0E:F3:89:6E:26:C0:74:B8:7F:6E:C0:9D:AC:D0:17:03:F8 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 029C Signing time: Mon 27 Jul 2026 02:58:35 +0000 Manifest this update: Mon 27 Jul 2026 02:58:34 +0000 Manifest next update: Mon 03 Aug 2026 02:58:34 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: gD5ywEpedndkksjsT8CRKlWrurhXtu8o3zLKs2Nb/9E=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Jul 27 02:58:34 2026 GMT Not After : Aug 3 02:58:34 2026 GMT Subject: CN=6a66c95b-24b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:64:8b:b9:26:c5:15:ad:63:53:ea:5a:a1: 01:85:5a:aa:97:71:e5:78:b4:98:ac:25:5e:7f:45: a5:bc:df:99:c4:1f:62:73:a5:ce:58:55:1d:b2:50: 4f:c3:ae:3d:8d:61:ac:94:8c:23:13:c2:f0:9a:5a: 0e:ec:f4:54:de:51:79:4f:c1:15:f4:c0:30:3d:53: a6:81:52:6f:e6:eb:28:7f:73:50:8b:46:4a:0c:0c: ac:e3:be:a8:eb:ae:65:0a:72:a4:74:7e:b8:78:bf: d8:8e:59:14:af:ff:8a:62:25:b1:7e:f8:43:fd:7e: 99:5b:6a:aa:ea:c0:db:39:22:3d:68:12:fb:a9:07: 5a:e7:4d:94:3e:ab:e2:a4:c3:a7:59:00:3f:97:aa: 59:19:4b:5a:7c:2f:ca:74:24:43:9d:ed:ce:fa:1c: 71:ef:21:72:8a:76:f6:72:81:bb:58:8c:d6:f3:f0: bd:fe:c3:90:1f:d5:aa:82:d9:9b:05:ca:b2:b7:3b: f3:dc:50:f2:19:27:26:bf:ab:35:d1:8a:42:8e:a8: da:6a:d4:36:b7:1a:e2:3d:21:3a:85:b8:13:97:c1: 4f:2e:09:35:6a:2d:fd:69:96:12:c5:3a:58:0d:df: fe:1e:f3:a6:58:0f:a5:91:6c:8c:ca:35:0e:04:97: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BD:7A:0E:F3:89:6E:26:C0:74:B8:7F:6E:C0:9D:AC:D0:17:03:F8 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4c:f5:c2:54:48:90:8c:46:a1:22:f3:cb:aa:17:ec:fe:be: f7:b5:bd:c3:3e:d2:1d:ee:11:0c:ff:12:16:11:d7:e9:b5:98: e7:04:0a:16:2e:5b:27:c1:52:e7:43:b0:eb:9b:79:1b:bf:ad: 13:f6:18:6f:5a:2c:e4:cf:53:0e:73:c7:0b:05:e0:27:e8:2d: cb:78:cb:c2:c5:65:7b:17:0c:a1:da:b2:e9:c8:ce:fa:d1:dc: 13:2b:1a:2b:51:61:03:68:57:b1:af:2f:1d:16:35:27:f4:de: 50:9e:2b:b0:66:44:1e:e9:42:22:bb:a6:35:da:63:6e:d2:22: 95:b1:1f:15:99:80:5a:6f:fd:59:f8:9e:29:b5:a9:f3:ad:a6: 1e:68:7b:8b:8e:0f:a0:0f:b0:4a:dc:8f:4c:4f:57:b3:c7:fc: 47:a8:b0:38:ae:cc:c0:91:73:14:9d:22:15:37:34:56:00:ae: 29:26:9e:e4:3f:a5:4d:dc:93:40:b1:99:cf:f4:6b:5f:d8:6a: be:d0:b5:13:aa:0a:03:9f:8d:08:8c:41:a3:e8:d9:9f:9b:cb: 0d:50:9b:ea:74:d5:64:a5:17:ca:4c:aa:d5:5e:f3:16:22:ec: c5:37:6b:e5:9e:f7:73:a8:74:60:04:6c:16:26:a0:d6:69:6b: d2:49:d5:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwNzI3MDI1ODM0WhcNMjYwODAzMDI1ODM0WjAYMRYwFAYD VQQDEw02YTY2Yzk1Yi0yNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H1ki7kmxRWtY1PqWqEBhVqql3HleLSYrCVef0WlvN+ZxB9ic6XOWFUdslBP w649jWGslIwjE8LwmloO7PRU3lF5T8EV9MAwPVOmgVJv5usof3NQi0ZKDAys476o 665lCnKkdH64eL/YjlkUr/+KYiWxfvhD/X6ZW2qq6sDbOSI9aBL7qQda502UPqvi pMOnWQA/l6pZGUtafC/KdCRDne3O+hxx7yFyinb2coG7WIzW8/C9/sOQH9Wqgtmb Bcqytzvz3FDyGScmv6s10YpCjqjaatQ2txriPSE6hbgTl8FPLgk1ai39aZYSxTpY Dd/+HvOmWA+lkWyMyjUOBJez6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS9eg7z iW4mwHS4f27AnazQFwP4MB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlkz1wlRIkIxGoSLzy6oX7P6+97W9wz7SHe4RDP8SFhHX6bWY5wQKFi5bJ8FS 50Ow65t5G7+tE/YYb1os5M9TDnPHCwXgJ+gty3jLwsVlexcModqy6cjO+tHcEysa K1FhA2hXsa8vHRY1J/TeUJ4rsGZEHulCIrumNdpjbtIilbEfFZmAWm/9WfieKbWp 862mHmh7i44PoA+wStyPTE9Xs8f8R6iwOK7MwJFzFJ0iFTc0VgCuKSae5D+lTdyT QLGZz/RrX9hqvtC1E6oKA5+NCIxBo+jZn5vLDVCb6nTVZKUXykyq1V7zFiLsxTdr 5Z73c6h0YARsFiag1mlr0knVBQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:14:22 2026 by rpki-client