$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: ZRSpysxasVq2o3d2LWUNzj5K4d6R9uGX8ccqZtmR8Lc= Subject key identifier: 90:B6:59:86:6A:7C:3F:40:74:90:DB:3C:D3:91:46:00:19:EA:EB:31 Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 09D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 09CA Signing time: Sun 26 Jul 2026 20:25:35 +0000 Manifest this update: Sun 26 Jul 2026 20:25:34 +0000 Manifest next update: Sun 02 Aug 2026 20:25:34 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: gx2xVUzsXgn+yDeCgOt57ckqpvuXZDU+Ic3LlQaLhWE=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Jul 26 20:25:34 2026 GMT Not After : Aug 2 20:25:34 2026 GMT Subject: CN=6a666d3f-923a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:52:2a:de:b7:04:e6:0d:f5:a7:0b:9d:be: 2f:57:d5:be:8f:5e:0a:5d:61:59:96:65:df:3c:bb: 4d:39:05:20:f8:a6:c5:65:f7:5d:ed:52:f4:09:78: 72:f1:6f:03:75:a0:cf:31:6b:b4:73:ce:0e:c7:cd: f9:27:bf:fe:0d:a6:96:41:a7:ac:5c:5e:1e:5e:26: e9:61:73:a1:c6:03:9e:3e:69:ae:f7:41:ec:2f:df: 6e:06:88:b3:ed:e7:18:e2:16:7f:ef:e9:34:94:57: 8d:5f:df:90:a5:a3:67:a1:fd:4a:dd:92:d3:77:ba: ec:78:9b:df:df:c1:3b:99:b3:4d:bd:d3:9e:3b:87: c4:a0:b1:c2:9c:39:83:63:ee:45:75:b0:1f:3e:30: 7a:9f:df:46:5a:f5:b3:e2:c8:6a:ed:44:93:b2:df: 0b:11:1f:70:7a:2a:e8:22:3a:36:25:6b:77:41:50: d2:2b:16:1f:d5:32:5a:79:d0:f8:e3:3f:fa:06:9f: 25:65:40:34:6f:da:82:c4:a0:c4:68:93:c3:a2:0c: a3:06:18:cb:8e:4c:82:bb:5b:60:c0:28:64:2d:13: 12:a3:b6:9d:81:54:a7:8e:5b:14:04:68:e9:29:78: a7:a6:2b:d0:3c:f6:d4:04:22:a1:e8:e1:d8:0f:22: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:59:86:6A:7C:3F:40:74:90:DB:3C:D3:91:46:00:19:EA:EB:31 X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:4b:9f:ca:6e:d3:9e:e6:84:2e:3b:b7:89:59:b5:56:e8:c2: 78:47:65:aa:1b:74:d1:b4:05:7c:26:92:5d:8b:ba:20:1a:ca: f4:89:9c:75:79:7e:07:96:3f:72:a0:66:0b:90:70:d2:59:13: cd:1e:a7:31:53:4e:c4:4e:ea:4c:57:08:ba:5f:7c:3b:9c:93: 60:8d:70:7a:e8:70:1e:53:70:dc:78:4e:07:2d:ec:cf:a4:05: 7f:86:6a:b1:35:8c:46:70:53:ad:c9:36:c4:34:06:72:96:18: 1f:ad:c0:4f:d1:6e:cc:27:fa:8f:7a:a4:36:f0:ff:be:7a:de: 5c:61:68:ee:1b:19:63:8e:b4:a3:de:f2:50:ea:40:47:3c:3c: 1d:20:c5:f9:f4:cf:af:96:2a:6a:38:6e:ba:15:7e:e9:7a:fd: 5b:c9:b3:e5:ea:58:1e:88:91:fe:5d:a4:1f:05:c5:7a:0a:d0: d6:d6:9b:9b:a1:5d:e0:83:ab:f5:e0:15:e0:87:0e:6b:05:6b: 0a:c5:a4:ab:84:77:23:75:97:e0:c9:1b:5c:32:23:a2:ef:73: 7a:8b:c5:90:5b:e8:5b:e6:3d:95:35:7e:ef:4c:c3:93:46:92: c3:ea:e9:15:3b:6b:9d:19:8a:85:c5:bc:41:29:a5:b5:50:2a: 24:d5:21:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjYwNzI2MjAyNTM0WhcNMjYwODAyMjAyNTM0WjAYMRYwFAYD VQQDEw02YTY2NmQzZi05MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZRSKt63BOYN9acLnb4vV9W+j14KXWFZlmXfPLtNOQUg+KbFZfdd7VL0CXhy 8W8DdaDPMWu0c84Ox835J7/+DaaWQaesXF4eXibpYXOhxgOePmmu90HsL99uBoiz 7ecY4hZ/7+k0lFeNX9+QpaNnof1K3ZLTd7rseJvf38E7mbNNvdOeO4fEoLHCnDmD Y+5FdbAfPjB6n99GWvWz4shq7USTst8LER9weiroIjo2JWt3QVDSKxYf1TJaedD4 4z/6Bp8lZUA0b9qCxKDEaJPDogyjBhjLjkyCu1tgwChkLRMSo7adgVSnjlsUBGjp KXinpivQPPbUBCKh6OHYDyI3JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJC2WYZq fD9AdJDbPNORRgAZ6usxMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVkufym7TnuaELju3iVm1VujCeEdlqht00bQFfCaSXYu6IBrK9ImcdXl+B5Y/ cqBmC5Bw0lkTzR6nMVNOxE7qTFcIul98O5yTYI1weuhwHlNw3HhOBy3sz6QFf4Zq sTWMRnBTrck2xDQGcpYYH63AT9FuzCf6j3qkNvD/vnreXGFo7hsZY460o97yUOpA Rzw8HSDF+fTPr5YqajhuuhV+6Xr9W8mz5epYHoiR/l2kHwXFegrQ1tabm6Fd4IOr 9eAV4IcOawVrCsWkq4R3I3WX4MkbXDIjou9zeovFkFvoW+Y9lTV+70zDk0aSw+rp FTtrnRmKhcW8QSmltVAqJNUhMA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:31:02 2026 by rpki-client