$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: kdZKVzXbHzl0LuPCxX3ZwyMsbSDxi4Mn2vkjjXYxdCU= Subject key identifier: 9A:88:F0:31:46:F5:49:CF:B5:FE:BA:A6:3C:71:7B:AF:44:7A:92:BE Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 039A Signing time: Mon 27 Jul 2026 01:49:19 +0000 Manifest this update: Mon 27 Jul 2026 01:49:18 +0000 Manifest next update: Mon 03 Aug 2026 01:49:18 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: dR6thXrf+Oz6d3JpK6CK0SV0/+jR6eZ9hkg4wjKWAyo=) 2: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: jk9gt1b1frwaDPBZycwnL0X7VizZAM9Vxj6G20XBNHM=) 3: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: FOfdiHMNOd30v0oc6GtprNkh43RjvZ+FfeSOC8C9Y9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Jul 27 01:49:18 2026 GMT Not After : Aug 3 01:49:18 2026 GMT Subject: CN=6a66b91f-0d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:d0:fd:67:3c:79:f7:25:54:89:40:be:a2: 88:55:6a:8b:ed:f2:36:39:b2:e6:a6:51:d6:1e:88: 6b:37:21:82:91:a8:fc:c6:0a:9b:89:0b:f3:f9:a8: c5:fb:73:c7:4e:d2:5f:7b:29:36:8d:87:87:88:06: 85:38:f2:fa:c5:13:e7:6b:85:e3:48:b7:03:a9:a3: 8c:67:b7:eb:55:71:5a:fb:66:99:58:bb:be:df:26: 8a:0a:8e:72:86:86:25:e2:03:79:2e:6b:5b:65:ea: f6:be:9a:24:36:20:dc:9d:e0:77:95:79:be:02:3c: 2d:2b:40:85:5b:54:ab:2f:4e:7c:04:d2:9a:f9:e5: 80:9b:8c:38:fb:92:31:ad:ec:66:07:08:31:3d:64: 8a:a9:62:fb:90:b8:6e:b8:83:8b:cb:c6:c9:e3:29: 27:a9:ce:ff:5d:5f:53:f1:51:f6:ae:d6:bb:c1:f6: 93:6b:4a:73:bf:0e:78:c3:e1:1a:4b:ce:1a:a1:a9: 68:7e:ae:9e:05:59:69:c1:e8:e5:d1:60:04:0e:dc: 7a:02:30:fe:72:1c:f7:72:d7:22:32:b8:b8:7a:f2: 74:46:31:78:b7:43:0d:52:d2:07:96:d7:9c:f8:73: c1:d2:21:a9:f7:c2:e9:bc:5f:14:89:6b:4f:68:cf: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:F0:31:46:F5:49:CF:B5:FE:BA:A6:3C:71:7B:AF:44:7A:92:BE X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1c:f5:b0:94:a5:b4:b7:57:5e:5d:dc:db:1c:dc:f5:14:45: 12:82:61:4d:ea:fb:c0:fb:ab:69:24:aa:51:63:5a:78:da:4e: 74:69:2c:ff:7c:d7:8e:d6:ce:5d:7e:99:76:0d:ab:16:4b:5d: dc:8d:3f:2c:fc:00:cb:33:ee:a3:5f:f3:bd:d7:36:d9:33:fe: d1:4e:43:83:f1:ba:92:15:91:a3:d5:66:08:f5:e7:25:34:62: d0:07:48:61:ba:6e:4e:f5:2c:83:ef:11:86:60:f9:cd:3d:19: 14:56:5e:2a:db:16:53:28:be:d1:a8:06:2b:35:f3:8f:0f:82: 35:ab:0a:67:72:6d:f1:6a:f0:b6:bf:80:ed:b9:73:c6:ec:3f: fc:ac:77:ba:8a:54:ac:8c:96:ed:4b:53:bd:67:ed:19:2b:df: 59:e5:cf:f1:a3:a5:09:d5:77:8e:32:77:7b:d3:5c:a9:f5:cc: 2a:8d:ed:47:04:5d:53:9b:9f:b8:06:aa:28:d1:3d:c3:18:85: 43:63:a8:01:c3:87:c6:a2:85:26:ff:62:9d:65:3d:d3:e1:99: 2f:e3:36:8e:3e:14:1b:6b:c0:4f:82:1a:56:8e:66:e7:92:14: 2c:25:8b:c8:7b:4d:ed:6b:94:96:2e:7f:66:c3:bb:07:bb:65: ec:8a:dd:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjYwNzI3MDE0OTE4WhcNMjYwODAzMDE0OTE4WjAYMRYwFAYD VQQDEw02YTY2YjkxZi0wZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiWnQ/Wc8efclVIlAvqKIVWqL7fI2ObLmplHWHohrNyGCkaj8xgqbiQvz+ajF +3PHTtJfeyk2jYeHiAaFOPL6xRPna4XjSLcDqaOMZ7frVXFa+2aZWLu+3yaKCo5y hoYl4gN5LmtbZer2vpokNiDcneB3lXm+AjwtK0CFW1SrL058BNKa+eWAm4w4+5Ix rexmBwgxPWSKqWL7kLhuuIOLy8bJ4yknqc7/XV9T8VH2rta7wfaTa0pzvw54w+Ea S84aoalofq6eBVlpwejl0WAEDtx6AjD+chz3ctciMri4evJ0RjF4t0MNUtIHltec +HPB0iGp98LpvF8UiWtPaM8VeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqI8DFG 9UnPtf66pjxxe69EepK+MB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhz1sJSltLdXXl3c2xzc9RRFEoJhTer7wPuraSSqUWNaeNpOdGks/3zXjtbO XX6Zdg2rFktd3I0/LPwAyzPuo1/zvdc22TP+0U5Dg/G6khWRo9VmCPXnJTRi0AdI YbpuTvUsg+8RhmD5zT0ZFFZeKtsWUyi+0agGKzXzjw+CNasKZ3Jt8Wrwtr+A7blz xuw//Kx3uopUrIyW7UtTvWftGSvfWeXP8aOlCdV3jjJ3e9NcqfXMKo3tRwRdU5uf uAaqKNE9wxiFQ2OoAcOHxqKFJv9inWU90+GZL+M2jj4UG2vAT4IaVo5m55IULCWL yHtN7WuUli5/ZsO7B7tl7IrdQg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:02:43 2026 by rpki-client