$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: h/ylvsA21aQrrGisq8ICk44n4OYFK4+3GblUUs/m6Zs= Subject key identifier: 6C:64:2C:4B:AB:B7:31:D3:6E:AF:B8:9D:F0:40:F4:25:1B:15:55:8D Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 3560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 3560 Signing time: Tue 28 Jul 2026 14:58:49 +0000 Manifest this update: Tue 28 Jul 2026 14:58:49 +0000 Manifest next update: Tue 04 Aug 2026 14:58:49 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: h4Q3BmDVL90x37ZpDmwdBNVENLrBnOR7UuVbc1gn9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13664 (0x3560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Jul 28 14:58:49 2026 GMT Not After : Aug 4 14:58:49 2026 GMT Subject: CN=6a68c3a9-8a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:a3:f7:98:73:6f:c8:12:26:9b:85:ff:98: 72:17:be:dc:20:13:9e:cc:46:5d:c0:f6:6e:bf:fa: 76:00:3c:99:b0:a9:af:3f:da:fc:75:ad:0b:46:2e: 4c:89:86:66:2b:e3:6e:85:24:b7:77:28:5a:43:a0: 6a:8c:7c:03:59:ea:71:73:6e:ac:68:02:05:47:93: 67:0d:c7:ab:b1:f3:5c:a5:50:b5:f1:d1:de:07:8b: e3:fe:7c:4f:75:8c:67:34:80:95:17:2f:07:66:9d: b1:98:bb:7f:c7:90:48:f3:f8:dc:13:86:f2:e3:3d: d9:99:90:30:d2:a4:71:b6:6f:ce:89:dd:53:4f:0a: 56:b1:52:80:c1:fb:c3:44:40:9f:6d:5c:e6:53:0a: a2:e0:5d:45:c6:4a:41:d6:fe:15:6b:3f:d6:76:31: ca:c9:34:c1:46:26:53:3b:10:a7:24:83:7b:16:ea: 72:aa:88:8e:ed:f7:9f:b6:17:16:9d:12:67:b6:fa: a1:3b:ab:c1:2d:fd:3b:a2:19:24:b6:77:59:4a:0c: 65:06:13:37:52:b5:30:d0:75:46:f8:9c:8e:84:44: c7:c6:51:7b:9f:49:ec:a5:38:99:be:02:af:a0:6f: 64:18:f1:0d:e3:9e:54:f4:fc:de:6c:23:e5:29:72: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:2C:4B:AB:B7:31:D3:6E:AF:B8:9D:F0:40:F4:25:1B:15:55:8D X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5f:67:de:dd:f9:47:17:d0:ef:58:59:44:b3:f0:8f:49:21: 64:8e:6a:83:b2:03:ff:9d:c8:ff:28:af:ed:c6:23:88:f9:0e: 39:23:69:17:62:68:07:1c:9f:15:09:f8:fd:9a:67:32:34:f8: b5:fd:45:07:fa:4c:38:09:fc:fc:ff:ac:2e:87:54:7f:32:83: de:61:c4:de:23:12:ab:50:b4:01:92:bb:77:7a:2f:3c:a6:3a: 7e:04:39:f5:ab:39:30:ee:2d:21:c3:70:d1:cc:79:44:6d:95: 0e:55:4e:11:e9:a1:86:fc:20:c3:73:62:07:cd:0b:52:7e:30: 0b:c1:b3:45:89:a6:88:ef:02:5a:39:4f:f1:2f:26:ca:25:27: e8:8e:b8:f4:f2:56:83:47:f4:4e:d6:15:5f:3a:8d:23:92:8b: 3b:2b:81:e5:28:ae:cc:bc:22:65:d7:45:3c:4c:86:41:83:3f: 7b:1c:db:59:3e:6f:59:08:d9:5c:ff:69:7a:b1:c5:59:39:4e: ee:0d:64:21:8f:57:db:5c:a3:10:9c:ec:7c:ef:f9:0d:14:01: 5c:8b:ef:02:cf:70:5a:7f:96:d2:2e:2a:85:02:a5:43:42:e0: e2:fe:ea:ba:1a:d3:ec:f7:cb:19:bf:4b:47:6a:48:4b:e3:37: b2:8a:63:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjYwNzI4MTQ1ODQ5WhcNMjYwODA0MTQ1ODQ5WjAYMRYwFAYD VQQDEw02YTY4YzNhOS04YTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvqj95hzb8gSJpuF/5hyF77cIBOezEZdwPZuv/p2ADyZsKmvP9r8da0LRi5M iYZmK+NuhSS3dyhaQ6BqjHwDWepxc26saAIFR5NnDcersfNcpVC18dHeB4vj/nxP dYxnNICVFy8HZp2xmLt/x5BI8/jcE4by4z3ZmZAw0qRxtm/Oid1TTwpWsVKAwfvD RECfbVzmUwqi4F1FxkpB1v4Vaz/WdjHKyTTBRiZTOxCnJIN7FupyqoiO7fefthcW nRJntvqhO6vBLf07ohkktndZSgxlBhM3UrUw0HVG+JyOhETHxlF7n0nspTiZvgKv oG9kGPEN455U9PzebCPlKXK93QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxkLEur tzHTbq+4nfBA9CUbFVWNMB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr19n3t35RxfQ71hZRLPwj0khZI5qg7ID/53I/yiv7cYjiPkOOSNpF2JoBxyf FQn4/ZpnMjT4tf1FB/pMOAn8/P+sLodUfzKD3mHE3iMSq1C0AZK7d3ovPKY6fgQ5 9as5MO4tIcNw0cx5RG2VDlVOEemhhvwgw3NiB80LUn4wC8GzRYmmiO8CWjlP8S8m yiUn6I649PJWg0f0TtYVXzqNI5KLOyuB5SiuzLwiZddFPEyGQYM/exzbWT5vWQjZ XP9perHFWTlO7g1kIY9X21yjEJzsfO/5DRQBXIvvAs9wWn+W0i4qhQKlQ0Lg4v7q uhrT7PfLGb9LR2pIS+M3sopj7Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:00:44 2026 by rpki-client