$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft File: r_h3chh1NYXDiOm4HDkGa9ONtZI.mft (raw, json) Hash identifier: 8+4WRMB8b6cprkhtZfQ+A1BSFuYF7t/vs0MNrlB9tkA= Subject key identifier: EA:9E:5B:78:F9:E5:88:00:2F:60:7A:DB:1D:70:D6:20:9A:6E:5B:C5 Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 Certificate issuer: /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft Manifest number: E1 Signing time: Mon 27 Jul 2026 08:40:45 +0000 Manifest this update: Mon 27 Jul 2026 08:40:45 +0000 Manifest next update: Mon 03 Aug 2026 08:40:45 +0000 Files and hashes: 1: r_h3chh1NYXDiOm4HDkGa9ONtZI.crl (hash: xs88fzET1sMeyJyhXlvdxK14epnpbysf2g5WAyK3ElU=) 2: AFD61B9C36A311F08A82A258C4F9AE02.roa (hash: d6zMH6FslhCioO9BUQgF2N2RzyG3M8j7DpL3pPa6Rys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Validity Not Before: Jul 27 08:40:45 2026 GMT Not After : Aug 3 08:40:45 2026 GMT Subject: CN=6a67198d-4c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:3b:9b:93:24:e1:24:51:8b:46:d7:c2:bf: d4:b9:56:53:15:7b:fa:77:60:2e:fe:55:fc:09:9e: d8:8d:44:c5:23:3d:fd:c4:23:b8:60:e7:24:30:ca: ca:5d:30:85:ba:69:ea:ab:cc:be:ce:86:ca:66:23: 84:ba:c3:b2:1e:4b:81:49:1b:9f:94:ff:b2:cc:ee: a7:f4:2c:77:49:83:e3:5a:95:47:9d:f6:1b:45:f0: 18:e3:e8:74:a7:6a:92:a2:ae:29:33:c1:02:40:f4: 22:e4:95:b5:47:0f:de:58:e9:6d:92:13:c7:df:15: d1:9c:37:d4:d6:a3:76:54:c0:45:85:2d:49:dc:83: 02:74:dd:36:16:35:b7:1a:e7:a7:a3:3f:b8:f6:2a: 11:e1:7b:51:60:11:bf:54:bf:da:77:16:cc:80:40: ac:79:7a:90:41:ef:46:2e:42:e0:88:5e:54:72:22: b2:47:66:b5:a9:2c:32:d2:df:31:64:7a:76:1a:68: 01:88:31:d8:5f:f9:20:cb:27:d5:28:36:a2:f0:49: 40:9f:e9:78:5f:e1:64:ea:0b:a0:8f:fc:c1:2e:a8: 26:df:cc:79:e0:28:34:eb:50:88:9e:ef:8b:bf:cb: 14:87:9e:d2:0b:2e:9e:42:64:9a:60:7f:63:c8:74: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:5B:78:F9:E5:88:00:2F:60:7A:DB:1D:70:D6:20:9A:6E:5B:C5 X509v3 Authority Key Identifier: keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cb:8e:5e:db:e5:8b:b0:cf:a0:5a:2e:b7:22:ce:13:cd:fc: 10:e1:66:09:2f:a6:a3:1a:b9:d3:40:21:be:29:8a:a9:23:22: 68:76:a4:91:85:57:43:33:7b:72:34:a6:0a:4b:73:d8:44:76: 0b:56:98:9d:47:fd:3e:f1:45:66:0b:91:04:37:86:cb:b3:97: 32:15:62:26:9e:a6:77:8f:60:0c:ab:1f:e0:06:37:06:06:0b: 9f:97:93:f9:5f:09:95:5b:da:17:83:07:e4:5b:72:cd:cd:e9: b8:5b:d6:0a:1f:94:6c:9e:fe:5e:6d:a9:58:28:6b:9d:4b:da: 85:09:84:de:37:71:64:55:a5:da:e1:96:e4:c9:03:71:d7:43: 60:22:4b:bf:11:cf:f8:51:be:d2:23:4f:89:ff:ce:58:29:36: 3f:07:7e:28:1a:fc:1c:bb:a0:54:60:08:1f:70:63:08:5f:cf: 96:fe:65:28:1c:08:6e:aa:b2:73:63:bd:24:27:fa:40:97:47: 5b:34:19:e3:8f:9a:9b:23:d9:38:fe:2d:f3:d0:7e:b7:67:38: c9:63:09:68:7f:99:16:21:74:fb:ae:e5:6e:b9:18:92:51:e8: 83:a0:b4:34:d9:3c:3c:ce:81:6e:90:4b:04:81:55:63:96:d8: ed:f2:f7:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzRkUxMTAvBgNVBAUTKEFGRjg3NzcyMTg3NTM1ODVDMzg4RTlCODFDMzkwNjZC RDM4REI1OTIwHhcNMjYwNzI3MDg0MDQ1WhcNMjYwODAzMDg0MDQ1WjAYMRYwFAYD VQQDEw02YTY3MTk4ZC00Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LY7m5Mk4SRRi0bXwr/UuVZTFXv6d2Au/lX8CZ7YjUTFIz39xCO4YOckMMrK XTCFumnqq8y+zobKZiOEusOyHkuBSRuflP+yzO6n9Cx3SYPjWpVHnfYbRfAY4+h0 p2qSoq4pM8ECQPQi5JW1Rw/eWOltkhPH3xXRnDfU1qN2VMBFhS1J3IMCdN02FjW3 Guenoz+49ioR4XtRYBG/VL/adxbMgECseXqQQe9GLkLgiF5UciKyR2a1qSwy0t8x ZHp2GmgBiDHYX/kgyyfVKDai8ElAn+l4X+Fk6gugj/zBLqgm38x54Cg061CInu+L v8sUh57SCy6eQmSaYH9jyHQwMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqeW3j5 5YgAL2B62x1w1iCablvFMB8GA1UdIwQYMBaAFK/4d3IYdTWFw4jpuBw5BmvTjbWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNGRS8yQTU2ODc4MjM2 QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9yX2gzY2hoMU5ZWERpT200SERrR2E5T050 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaDNjaGgxTllYRGlPbTRIRGtHYTlPTnRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNGRS8yQTU2ODc4MjM2QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9yX2gzY2hoMU5Z WERpT200SERrR2E5T050WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8uOXtvli7DPoFoutyLOE838EOFmCS+moxq500AhvimKqSMiaHakkYVXQzN7 cjSmCktz2ER2C1aYnUf9PvFFZguRBDeGy7OXMhViJp6md49gDKsf4AY3BgYLn5eT +V8JlVvaF4MH5Ftyzc3puFvWCh+UbJ7+Xm2pWChrnUvahQmE3jdxZFWl2uGW5MkD cddDYCJLvxHP+FG+0iNPif/OWCk2Pwd+KBr8HLugVGAIH3BjCF/Plv5lKBwIbqqy c2O9JCf6QJdHWzQZ44+amyPZOP4t89B+t2c4yWMJaH+ZFiF0+67lbrkYklHog6C0 NNk8PM6BbpBLBIFVY5bY7fL3YQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:59 2026 by rpki-client