$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: pwfq2gOQxwhDZ7srJYYWKdj8id4wLEu9f5gF9OnG+OI= Subject key identifier: 4D:3F:13:65:A4:63:B0:9B:8B:2C:E7:CF:6B:97:CF:37:42:DB:05:95 Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0C8D Signing time: Tue 28 Jul 2026 18:50:31 +0000 Manifest this update: Tue 28 Jul 2026 18:50:31 +0000 Manifest next update: Tue 04 Aug 2026 18:50:31 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: bPPb5V0XViX17xBOrgPi6s/D/GHXEpWRLgdEIRQ3tPk=) 2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) 3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Jul 28 18:50:31 2026 GMT Not After : Aug 4 18:50:31 2026 GMT Subject: CN=6a68f9f7-c8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:30:13:54:60:51:b8:55:bd:cc:66:1b:82: cb:e6:22:10:95:5a:d9:d0:f3:03:02:27:6b:a4:4c: 4c:c4:14:a9:c8:3b:69:2b:3f:09:17:5a:ed:be:f1: d5:ae:8c:e5:b7:6e:2e:54:59:b9:2f:15:1d:92:1a: a9:84:fe:3b:14:e2:5b:a4:1c:e4:da:88:16:b0:6e: 71:00:1b:60:78:5c:eb:a7:12:4b:1b:ce:f2:5c:1b: d8:5f:91:a2:84:77:b1:01:8b:35:da:bc:41:8b:69: c9:12:82:c7:d2:93:d3:d8:9d:c6:0d:b3:8d:02:92: db:a3:c5:0e:a1:1c:1b:ab:13:eb:15:6e:c5:27:e9: d6:95:4c:6f:4f:86:60:0c:5b:3d:c6:6f:43:57:5a: 01:ce:c9:14:b2:9e:25:2a:83:01:a1:7f:08:fc:62: 52:64:08:f4:d6:b1:0a:f7:94:95:c9:9f:e4:62:fa: 9d:32:6e:26:54:7c:49:a5:ec:5c:1e:ee:bb:a1:fa: 4a:cf:85:f7:84:b2:ca:2e:a4:6c:5c:6f:2d:22:0b: b1:14:c7:f7:42:95:16:27:03:e3:e8:47:f8:8a:c9: 1d:3c:fb:00:01:ee:13:7f:ac:ef:98:d7:a8:90:52: e4:38:58:9d:54:2a:1c:2a:60:42:78:21:07:23:ce: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3F:13:65:A4:63:B0:9B:8B:2C:E7:CF:6B:97:CF:37:42:DB:05:95 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:29:d8:ea:cf:34:07:2c:a6:6b:11:03:c9:6a:8d:09:94:e4: e4:13:4b:d8:38:be:b4:ed:a0:ed:e8:2a:70:5b:eb:fd:92:ac: 06:af:10:d8:a4:52:0c:aa:1a:0b:53:72:56:34:d9:de:09:42: 4c:4a:7c:21:70:8b:49:bb:1f:44:89:fa:9d:a3:4b:6b:0e:c8: 82:ed:9c:8a:3c:a1:92:dd:8d:93:c9:45:df:67:56:f2:ed:21: 81:44:ad:c1:c9:78:69:60:67:84:53:ba:bc:b6:09:51:b1:6c: d5:d2:c5:47:9f:3d:43:8c:e3:03:53:d7:ef:84:2a:80:55:3c: 46:a0:ca:cd:a8:c6:1c:f8:17:47:85:29:07:3b:3f:66:5a:55: 96:ff:70:73:84:d0:0d:a0:ce:3f:6e:5e:cf:0d:ee:55:62:49: 0f:d2:1d:9e:d7:81:45:5e:da:45:07:84:10:e5:0a:8e:74:4d: 09:a2:f9:6c:a0:cb:64:7f:c9:02:68:51:22:16:f8:3e:a3:d3: ac:af:a4:3d:75:0d:e8:7b:d6:15:eb:62:1b:9c:f7:4c:ca:d0: 02:c7:1b:b3:c9:27:5c:e5:30:c4:e9:18:31:a3:be:3f:9a:fb: 78:3f:0c:48:32:5b:a6:92:6c:46:ef:e6:df:b2:5e:bf:20:d8: c7:2c:ca:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwNzI4MTg1MDMxWhcNMjYwODA0MTg1MDMxWjAYMRYwFAYD VQQDEw02YTY4ZjlmNy1jOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoL4wE1RgUbhVvcxmG4LL5iIQlVrZ0PMDAidrpExMxBSpyDtpKz8JF1rtvvHV rozlt24uVFm5LxUdkhqphP47FOJbpBzk2ogWsG5xABtgeFzrpxJLG87yXBvYX5Gi hHexAYs12rxBi2nJEoLH0pPT2J3GDbONApLbo8UOoRwbqxPrFW7FJ+nWlUxvT4Zg DFs9xm9DV1oBzskUsp4lKoMBoX8I/GJSZAj01rEK95SVyZ/kYvqdMm4mVHxJpexc Hu67ofpKz4X3hLLKLqRsXG8tIguxFMf3QpUWJwPj6Ef4iskdPPsAAe4Tf6zvmNeo kFLkOFidVCocKmBCeCEHI85powIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0/E2Wk Y7Cbiyznz2uXzzdC2wWVMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoSnY6s80ByymaxEDyWqNCZTk5BNL2Di+tO2g7egqcFvr/ZKsBq8Q2KRSDKoa C1NyVjTZ3glCTEp8IXCLSbsfRIn6naNLaw7Igu2cijyhkt2Nk8lF32dW8u0hgUSt wcl4aWBnhFO6vLYJUbFs1dLFR589Q4zjA1PX74QqgFU8RqDKzajGHPgXR4UpBzs/ ZlpVlv9wc4TQDaDOP25ezw3uVWJJD9IdnteBRV7aRQeEEOUKjnRNCaL5bKDLZH/J AmhRIhb4PqPTrK+kPXUN6HvWFetiG5z3TMrQAscbs8knXOUwxOkYMaO+P5r7eD8M SDJbppJsRu/m37JevyDYxyzK3Q== -----END CERTIFICATE-----Generated at Wed Jul 29 04:43:07 2026 by rpki-client