$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: +xonrwXOky9AcQoH6jNh5JkAzdPecsSeGGsQuX5kY1k= Subject key identifier: 9A:5B:ED:2D:26:BB:9F:C5:CD:0E:E4:A8:13:11:17:C2:BE:78:8E:5C Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 014F Signing time: Mon 27 Jul 2026 07:07:09 +0000 Manifest this update: Mon 27 Jul 2026 07:07:09 +0000 Manifest next update: Mon 03 Aug 2026 07:07:09 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: ndFSdgrpV7vP+ptRDLA9XMdOyMmSYuvvJec6oIlC3X4=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Jul 27 07:07:09 2026 GMT Not After : Aug 3 07:07:09 2026 GMT Subject: CN=6a67039d-9ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:15:e9:bd:30:70:e3:01:01:a4:8c:f1:47: 50:97:40:74:a6:6b:c9:52:e8:c3:c6:06:57:1e:d6: 9b:5b:10:86:68:df:8b:8f:27:5a:cb:0d:78:67:33: d2:d0:3f:75:f7:98:ef:ba:13:84:ff:b6:29:2c:89: c1:7d:b6:99:c8:92:c4:c4:3c:2b:e5:42:74:cb:27: d0:40:a2:fe:95:ee:20:0a:e4:20:c3:e0:62:0d:fa: d4:1d:4a:3a:e2:bd:90:da:e7:9e:9b:50:db:db:36: 9d:0c:fd:d8:5a:3f:0a:38:c8:5f:99:5d:8a:5d:50: 83:fe:b1:7a:47:f5:0e:68:cc:2d:72:4f:97:b6:3c: e3:aa:7f:35:a8:2e:39:3f:d0:98:5a:ef:03:69:18: e0:ec:23:d1:e9:a2:2f:ea:3f:1d:f2:f4:dc:97:67: d1:01:31:90:97:08:a5:df:c8:f6:28:f0:f2:e3:c7: 8f:96:6c:9d:4b:0d:1b:a6:5d:7f:80:c2:5c:05:82: 4e:5e:17:b3:d8:32:8e:f5:8e:82:23:1f:f8:32:5f: 37:8d:05:d0:50:3d:ba:43:89:d4:33:65:06:2b:44: 53:04:b7:23:f9:d7:14:78:52:ae:a6:d2:a5:d1:b0: 1a:a0:bd:7d:cc:46:1d:0e:c9:87:2c:c4:5d:8c:56: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:ED:2D:26:BB:9F:C5:CD:0E:E4:A8:13:11:17:C2:BE:78:8E:5C X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:15:98:76:ae:1c:c0:39:b4:4e:cf:da:22:92:f5:a7:a1:e0: 97:90:92:70:ed:d2:24:de:ac:5c:ec:cd:99:64:a0:d9:3a:a2: 5b:ea:53:24:06:6a:7d:70:43:ac:25:19:88:e3:90:9f:34:a9: 7c:ee:87:d6:30:ce:34:f0:95:38:6d:ff:e7:cb:0a:3e:c4:2e: 98:2a:1d:cf:28:9b:e9:19:63:c9:a8:4f:64:81:a2:c6:9c:21: 68:1b:3e:9c:92:3a:ed:e4:55:b3:2e:c1:32:54:8e:4f:61:86: 10:e4:3b:51:03:3b:e1:21:83:50:85:84:30:c2:16:92:fa:91: 52:a5:b1:fe:83:c1:53:8c:d9:7c:0a:23:8b:56:f5:02:dd:ce: d0:fb:1b:e4:1e:59:23:aa:31:eb:96:a2:ea:9c:b8:8b:ac:25: e9:af:f4:73:6f:53:5f:2f:9a:94:f2:1e:b1:d0:dd:3c:f7:2f: 72:f5:66:d9:ce:fb:4d:44:7a:d1:81:66:45:48:dc:37:0d:5d: fe:94:52:51:f2:ee:72:37:f2:e2:cc:01:69:69:10:06:a6:63: 49:32:15:fe:f7:58:f9:2d:06:2e:80:59:e6:98:65:c4:1c:d3: 7a:f7:24:d8:8a:f6:c6:d3:05:3d:a7:5c:52:db:39:85:a9:9c: 12:ce:91:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjYwNzI3MDcwNzA5WhcNMjYwODAzMDcwNzA5WjAYMRYwFAYD VQQDEw02YTY3MDM5ZC05Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp8V6b0wcOMBAaSM8UdQl0B0pmvJUujDxgZXHtabWxCGaN+Ljydayw14ZzPS 0D9195jvuhOE/7YpLInBfbaZyJLExDwr5UJ0yyfQQKL+le4gCuQgw+BiDfrUHUo6 4r2Q2ueem1Db2zadDP3YWj8KOMhfmV2KXVCD/rF6R/UOaMwtck+Xtjzjqn81qC45 P9CYWu8DaRjg7CPR6aIv6j8d8vTcl2fRATGQlwil38j2KPDy48ePlmydSw0bpl1/ gMJcBYJOXhez2DKO9Y6CIx/4Ml83jQXQUD26Q4nUM2UGK0RTBLcj+dcUeFKuptKl 0bAaoL19zEYdDsmHLMRdjFaZSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpb7S0m u5/FzQ7kqBMRF8K+eI5cMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxWYdq4cwDm0Ts/aIpL1p6Hgl5CScO3SJN6sXOzNmWSg2TqiW+pTJAZqfXBD rCUZiOOQnzSpfO6H1jDONPCVOG3/58sKPsQumCodzyib6RljyahPZIGixpwhaBs+ nJI67eRVsy7BMlSOT2GGEOQ7UQM74SGDUIWEMMIWkvqRUqWx/oPBU4zZfAoji1b1 At3O0Psb5B5ZI6ox65ai6py4i6wl6a/0c29TXy+alPIesdDdPPcvcvVm2c77TUR6 0YFmRUjcNw1d/pRSUfLucjfy4swBaWkQBqZjSTIV/vdY+S0GLoBZ5phlxBzTevck 2Ir2xtMFPadcUts5hamcEs6RgA== -----END CERTIFICATE-----Generated at Tue Jul 28 17:12:18 2026 by rpki-client