$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: nKCecW1bEIiRnUWAehU+rM8Y8QamCJV8zIhL9kAsGC4= Subject key identifier: F8:44:EC:28:D6:2A:91:01:75:8D:1A:42:E7:73:81:19:09:FC:78:04 Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 0589 Signing time: Tue 28 Jul 2026 23:54:23 +0000 Manifest this update: Tue 28 Jul 2026 23:54:23 +0000 Manifest next update: Tue 04 Aug 2026 23:54:23 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: 8kajA83cj63msIQau+tZkrm98rE9F8qPGkfoFHPFVbI=) 2: FE0D78046DE911F18A77D2D25CA30FBC.roa (hash: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=) 3: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Jul 28 23:54:23 2026 GMT Not After : Aug 4 23:54:23 2026 GMT Subject: CN=6a69412f-5980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:75:67:09:1e:fa:43:6f:97:a8:a1:0d:66: a3:0e:5a:0b:ec:98:cb:2b:62:3a:16:15:b3:84:ab: fd:32:5e:03:b8:a2:f0:15:0b:41:87:dd:80:0e:c4: 55:bb:20:b2:84:86:c5:b6:26:a4:3f:73:e8:61:bb: 79:7f:52:2a:7e:22:93:54:85:26:39:49:37:dd:77: d2:6d:69:5e:11:66:33:df:cb:ba:da:3f:69:a6:53: d0:ad:f0:96:28:a6:7a:f1:ef:af:73:e1:a0:85:d1: 5b:8b:cb:aa:e0:a6:47:bd:4e:fc:3c:3f:c1:9e:48: 5e:57:80:4f:de:2c:c2:10:62:40:ef:85:aa:14:b9: d4:86:4d:e7:b7:97:86:3f:df:e1:5a:ec:e6:71:bb: e2:9b:a8:fd:16:2a:e9:8c:9c:c1:7e:92:f7:44:d1: 04:cb:16:06:37:02:cc:23:24:3b:dd:cd:36:fc:06: f7:13:b7:12:a4:14:c9:06:96:b1:76:42:fa:aa:66: 6f:25:80:d3:dd:4b:8f:94:83:b0:60:52:a1:ce:bb: 51:6d:54:b0:da:8c:49:8c:4c:9c:db:c4:00:db:20: d2:6b:40:e2:de:5b:93:a3:10:7e:c7:6e:6b:cc:d0: b3:ea:34:85:cf:25:99:6f:62:03:d1:84:22:35:ad: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:44:EC:28:D6:2A:91:01:75:8D:1A:42:E7:73:81:19:09:FC:78:04 X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:76:16:e9:9f:18:99:cc:d6:98:70:ce:6c:88:a0:93:55:52: fd:a0:1f:a8:70:85:d7:0b:1d:58:ce:da:d2:eb:56:0b:86:cc: 8b:8e:b6:95:71:19:22:b6:fc:51:c8:9d:d6:64:66:e3:d0:a1: a5:4f:04:9c:93:ee:51:6f:19:85:c8:cb:ad:bc:c9:57:b6:84: 84:e2:8a:de:00:2c:e7:04:83:e6:ed:e6:fc:57:e7:c7:40:df: d6:a8:6a:17:36:a7:09:4b:8e:7b:1b:3d:8b:83:ba:da:42:c9: 3b:7d:b1:cc:0f:b5:7e:3d:db:ae:02:ed:83:3f:93:a2:69:e1: b1:ab:fe:d4:b1:fe:70:29:5f:fd:0e:5d:18:38:77:88:b9:35: 62:bb:9e:d1:31:1a:b9:a3:a1:23:b5:54:fc:0b:6a:3e:f5:97: 10:fc:48:c0:9e:29:71:bb:ba:05:96:e6:86:3d:5e:aa:d9:0d: 2d:d0:da:ca:77:a6:4f:80:99:d7:2d:3e:c6:fe:86:a6:ef:f4: 0f:7a:77:75:6a:c2:29:27:1c:b0:2b:15:72:ac:7c:63:a2:7a: bf:54:81:d5:9b:bf:3a:12:af:97:63:8f:68:74:9c:e5:0f:ef: df:76:d2:45:63:66:8a:a6:3b:f2:98:21:d5:38:4a:19:0f:e3: 89:31:17:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjYwNzI4MjM1NDIzWhcNMjYwODA0MjM1NDIzWjAYMRYwFAYD VQQDEw02YTY5NDEyZi01OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/p1Zwke+kNvl6ihDWajDloL7JjLK2I6FhWzhKv9Ml4DuKLwFQtBh92ADsRV uyCyhIbFtiakP3PoYbt5f1IqfiKTVIUmOUk33XfSbWleEWYz38u62j9pplPQrfCW KKZ68e+vc+GghdFbi8uq4KZHvU78PD/BnkheV4BP3izCEGJA74WqFLnUhk3nt5eG P9/hWuzmcbvim6j9FirpjJzBfpL3RNEEyxYGNwLMIyQ73c02/Ab3E7cSpBTJBpax dkL6qmZvJYDT3UuPlIOwYFKhzrtRbVSw2oxJjEyc28QA2yDSa0Di3luToxB+x25r zNCz6jSFzyWZb2ID0YQiNa0jgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhE7CjW KpEBdY0aQudzgRkJ/HgEMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbXYW6Z8YmczWmHDObIigk1VS/aAfqHCF1wsdWM7a0utWC4bMi462lXEZIrb8 Ucid1mRm49ChpU8EnJPuUW8ZhcjLrbzJV7aEhOKK3gAs5wSD5u3m/Ffnx0Df1qhq FzanCUuOexs9i4O62kLJO32xzA+1fj3brgLtgz+Tomnhsav+1LH+cClf/Q5dGDh3 iLk1Yrue0TEauaOhI7VU/AtqPvWXEPxIwJ4pcbu6BZbmhj1eqtkNLdDaynemT4CZ 1y0+xv6Gpu/0D3p3dWrCKSccsCsVcqx8Y6J6v1SB1Zu/OhKvl2OPaHSc5Q/v33bS RWNmiqY78pgh1ThKGQ/jiTEXmw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:49:47 2026 by rpki-client