$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: ps/bEtPQU9W3PVtzcBh6K5/oEeQffv1s2bbWFk9NtH0= Subject key identifier: 1D:C7:27:33:B9:D3:F9:9C:09:A5:A1:92:AF:14:A5:4D:F1:FE:29:C2 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01AB Signing time: Mon 27 Jul 2026 05:51:21 +0000 Manifest this update: Mon 27 Jul 2026 05:51:21 +0000 Manifest next update: Mon 03 Aug 2026 05:51:21 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: nXkFYZf5fvXQ7BpomDhugtda6qRQzz+Pv1KRNtg0CF0=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Jul 27 05:51:21 2026 GMT Not After : Aug 3 05:51:21 2026 GMT Subject: CN=6a66f1d9-6e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:24:2c:c8:2f:32:79:45:51:2a:84:15:43: 3b:dc:65:4e:e5:00:69:15:c4:f3:33:63:5e:2b:60: 14:eb:55:70:89:c1:cf:4f:be:5f:59:f2:e3:ef:c1: 3d:34:53:c1:77:83:ae:dd:fc:aa:3d:83:c5:de:00: 43:a8:48:8d:21:5a:87:33:d9:75:8b:7e:00:de:a6: 16:d5:1e:4d:b7:7b:26:70:ae:9f:d7:7d:9f:59:f1: fd:ab:89:19:e5:80:bd:73:91:5f:85:45:50:74:13: 40:c7:9a:79:73:5e:28:73:0d:be:b8:ff:14:0f:61: 88:b9:eb:cc:bd:d0:1d:1f:6d:83:19:09:59:58:c2: 95:b0:84:72:07:13:f6:96:50:a5:92:63:73:d2:71: 39:e3:75:28:99:27:b3:97:80:9b:7c:18:1e:71:8f: b6:1a:98:9a:e8:2c:82:05:13:da:e7:2b:a3:30:3d: 1d:be:f8:63:d7:2b:23:92:a1:a5:28:e7:08:ef:a8: 38:6e:90:9f:a5:0c:6e:12:42:09:cc:81:68:67:f9: 79:69:a7:f0:26:6c:cf:95:38:95:17:5f:ff:33:ef: dd:3c:de:b8:d9:2e:7c:95:36:77:c4:91:59:b9:eb: 11:de:29:d1:3e:57:57:00:16:c9:44:76:02:ab:cc: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:27:33:B9:D3:F9:9C:09:A5:A1:92:AF:14:A5:4D:F1:FE:29:C2 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:9a:43:82:19:a6:87:f7:9f:1f:91:5a:31:64:35:3e:93: 6c:9a:38:0c:4b:32:f9:7e:dc:23:d0:d2:18:54:66:90:bd:44: b6:85:5f:2d:53:1e:c2:72:72:45:07:dd:1d:15:4f:08:66:9a: 24:13:74:90:b0:d5:96:51:2a:27:f8:a9:7a:28:62:ad:e4:d4: fb:e8:48:97:65:45:33:21:b6:3a:85:05:b0:81:86:40:6c:bf: 1d:3b:ed:91:9c:aa:76:51:19:8b:f4:df:48:4f:f0:e9:3c:8f: 41:68:06:95:ed:71:9f:26:36:2e:26:09:33:c9:74:ae:33:35: 3f:e8:9e:03:71:e7:27:e0:f8:a3:b2:fb:89:bf:f5:eb:18:8d: c6:4b:5f:15:f0:bd:8f:2c:db:20:b8:05:53:da:ca:e9:5b:52: e3:bb:c0:86:53:32:b7:00:ce:64:45:a8:87:52:3f:48:47:7d: 89:4c:27:67:f7:c2:36:01:7c:89:37:55:ac:e9:80:24:f4:5e: b7:11:15:4f:29:68:e8:3f:db:e8:63:55:bc:0d:f6:8a:e4:55: 71:16:2d:95:cb:b0:7b:79:15:2d:8f:bd:2f:46:40:90:cf:e8: 33:54:8c:d4:2d:f5:bb:3c:45:75:3d:a8:e1:f1:eb:12:2d:cc: 81:cd:6f:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwNzI3MDU1MTIxWhcNMjYwODAzMDU1MTIxWjAYMRYwFAYD VQQDEw02YTY2ZjFkOS02ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugYkLMgvMnlFUSqEFUM73GVO5QBpFcTzM2NeK2AU61VwicHPT75fWfLj78E9 NFPBd4Ou3fyqPYPF3gBDqEiNIVqHM9l1i34A3qYW1R5Nt3smcK6f132fWfH9q4kZ 5YC9c5FfhUVQdBNAx5p5c14ocw2+uP8UD2GIuevMvdAdH22DGQlZWMKVsIRyBxP2 llClkmNz0nE543UomSezl4CbfBgecY+2Gpia6CyCBRPa5yujMD0dvvhj1ysjkqGl KOcI76g4bpCfpQxuEkIJzIFoZ/l5aafwJmzPlTiVF1//M+/dPN642S58lTZ3xJFZ uesR3inRPldXABbJRHYCq8wP7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3HJzO5 0/mcCaWhkq8UpU3x/inCMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhoaaQ4IZpof3nx+RWjFkNT6TbJo4DEsy+X7cI9DSGFRmkL1EtoVfLVMewnJy RQfdHRVPCGaaJBN0kLDVllEqJ/ipeihireTU++hIl2VFMyG2OoUFsIGGQGy/HTvt kZyqdlEZi/TfSE/w6TyPQWgGle1xnyY2LiYJM8l0rjM1P+ieA3HnJ+D4o7L7ib/1 6xiNxktfFfC9jyzbILgFU9rK6VtS47vAhlMytwDOZEWoh1I/SEd9iUwnZ/fCNgF8 iTdVrOmAJPRetxEVTylo6D/b6GNVvA32iuRVcRYtlcuwe3kVLY+9L0ZAkM/oM1SM 1C31uzxFdT2o4fHrEi3Mgc1v/g== -----END CERTIFICATE-----Generated at Tue Jul 28 18:38:42 2026 by rpki-client