$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json) Hash identifier: xE6ST6AI7nulTeSHa1LY2ODO2perODkwNo5HUoMqUl0= Subject key identifier: 74:C4:3B:E4:CB:C2:9B:C4:DF:ED:92:CE:44:70:7C:56:61:E9:5C:9B Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft Manifest number: 09B8 Signing time: Tue 28 Jul 2026 20:16:49 +0000 Manifest this update: Tue 28 Jul 2026 20:16:49 +0000 Manifest next update: Tue 04 Aug 2026 20:16:49 +0000 Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: DYkIIER0Wof/xAs9c0y/+0rduFhDzlagR8HVxBtzx7k=) 2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: IPSlPyfz0+bJclfH4V522k6JGFoLnfNN2pg5rNIteNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Validity Not Before: Jul 28 20:16:49 2026 GMT Not After : Aug 4 20:16:49 2026 GMT Subject: CN=6a690e31-5341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:04:6a:94:43:72:a3:47:15:73:fb:56:73: 68:da:13:da:dd:b0:de:8c:a7:b4:22:e9:65:75:fd: d9:2c:ce:27:26:c6:52:54:55:8c:6e:e1:76:c4:cd: 0c:c4:56:8e:3e:6d:44:a4:5e:8b:c8:9d:65:2d:dc: cc:03:ba:45:3b:69:a1:4d:45:8b:14:8a:7e:28:2e: e2:b0:31:6d:fb:78:6d:47:c8:6b:2d:f7:da:97:af: eb:b5:b2:67:2a:eb:35:e0:7b:0b:97:bb:68:1d:64: 86:7a:2b:41:55:ce:99:54:e6:77:21:e7:c6:54:4b: a6:59:7e:e0:b2:a3:61:b1:87:10:43:09:c0:81:1a: a0:47:01:01:df:bd:c6:4a:ba:1d:2e:a1:7b:22:1b: b5:d3:4f:03:bb:56:0a:3d:fd:fd:7b:bc:6a:78:45: 76:6c:e6:82:07:59:70:d1:52:93:3e:dc:66:8f:3f: 53:01:33:d4:64:31:80:da:c9:97:d9:9c:4d:29:cf: 2e:0b:4a:7f:90:65:08:94:e4:b1:f4:b4:6c:03:82: 93:23:90:b3:62:9d:a1:00:2c:2b:b4:16:00:28:de: ab:19:c2:49:15:41:24:3a:e3:ec:ff:b4:3a:8a:3d: 11:d4:b9:03:85:fd:50:76:15:7c:27:3a:6f:71:a8: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:3B:E4:CB:C2:9B:C4:DF:ED:92:CE:44:70:7C:56:61:E9:5C:9B X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f3:1d:e8:d4:85:ea:cb:07:58:c2:89:d8:3d:37:0c:3c:d1: 06:63:d0:ae:60:fe:a2:f3:ee:2a:04:eb:8d:62:ef:d7:5d:60: 05:be:bd:11:41:12:96:9e:f5:30:2e:5d:ec:f1:6d:a5:76:da: f8:d4:e9:fb:59:f3:6e:aa:88:e2:47:30:e4:4b:fa:eb:74:09: aa:9a:3a:b9:3e:4e:10:05:9f:8f:dc:52:77:b3:cf:23:af:4b: 20:d1:90:b5:9d:73:75:9a:58:3e:8a:8b:df:51:a4:f4:14:19: 46:80:3e:ff:b6:89:ed:3c:e3:bf:7f:1f:e9:e3:02:97:c1:20: 61:95:6f:dc:10:01:c7:d8:af:e2:3c:c7:77:ff:76:47:a9:19: b5:85:d9:8c:99:e9:fd:65:6e:12:a4:46:fd:49:44:73:5f:d4: 30:11:4e:88:40:2e:40:ef:0e:3d:10:7f:6e:80:6e:7c:b3:15: 21:90:6c:9d:94:dd:10:ed:7a:3f:6a:08:78:47:a3:f1:a0:5c: 1f:e7:47:33:e0:80:bc:6b:bc:a5:95:7b:30:0c:2f:0f:8e:15: 9c:9d:19:f5:1f:1b:da:fa:84:53:92:81:b9:d9:66:5a:31:fc: 30:3a:5f:83:17:6b:66:9c:dd:39:56:eb:60:0d:5c:c9:50:9f: c6:bc:2b:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjYwNzI4MjAxNjQ5WhcNMjYwODA0MjAxNjQ5WjAYMRYwFAYD VQQDEw02YTY5MGUzMS01MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+AEapRDcqNHFXP7VnNo2hPa3bDejKe0Iulldf3ZLM4nJsZSVFWMbuF2xM0M xFaOPm1EpF6LyJ1lLdzMA7pFO2mhTUWLFIp+KC7isDFt+3htR8hrLffal6/rtbJn Kus14HsLl7toHWSGeitBVc6ZVOZ3IefGVEumWX7gsqNhsYcQQwnAgRqgRwEB373G SrodLqF7Ihu1008Du1YKPf39e7xqeEV2bOaCB1lw0VKTPtxmjz9TATPUZDGA2smX 2ZxNKc8uC0p/kGUIlOSx9LRsA4KTI5CzYp2hACwrtBYAKN6rGcJJFUEkOuPs/7Q6 ij0R1LkDhf1QdhV8Jzpvcaj1TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTEO+TL wpvE3+2SzkRwfFZh6VybMB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAofMd6NSF6ssHWMKJ2D03DDzRBmPQrmD+ovPuKgTrjWLv111gBb69EUESlp71 MC5d7PFtpXba+NTp+1nzbqqI4kcw5Ev663QJqpo6uT5OEAWfj9xSd7PPI69LINGQ tZ1zdZpYPoqL31Gk9BQZRoA+/7aJ7Tzjv38f6eMCl8EgYZVv3BABx9iv4jzHd/92 R6kZtYXZjJnp/WVuEqRG/UlEc1/UMBFOiEAuQO8OPRB/boBufLMVIZBsnZTdEO16 P2oIeEej8aBcH+dHM+CAvGu8pZV7MAwvD44VnJ0Z9R8b2vqEU5KBudlmWjH8MDpf gxdrZpzdOVbrYA1cyVCfxrwrmw== -----END CERTIFICATE-----Generated at Wed Jul 29 14:17:23 2026 by rpki-client