$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft File: hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json) Hash identifier: N7wKejUhmyAZDMbTV6h2dYBCpc6y1cElh/EilS1QU5o= Subject key identifier: 08:8E:4E:F4:F9:80:82:C0:DE:43:DA:9B:17:5A:89:11:C2:00:AB:A5 Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA Certificate issuer: /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft Manifest number: 0E Signing time: Mon 27 Jul 2026 11:29:58 +0000 Manifest this update: Mon 27 Jul 2026 11:29:58 +0000 Manifest next update: Mon 03 Aug 2026 11:29:58 +0000 Files and hashes: 1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: XPKMhZF+PsvrVn94S7lM5P434G/FHvGzks8E4rAmZfo=) 2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA Validity Not Before: Jul 27 11:29:58 2026 GMT Not After : Aug 3 11:29:58 2026 GMT Subject: CN=6a674136-c2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:9d:75:56:e9:e9:7f:e6:85:b4:50:86:bf: bc:79:6f:61:9e:b9:fb:d7:12:6a:11:3b:ee:60:33: 5d:df:9b:79:b4:77:c1:f5:e6:fd:1b:7b:58:9f:59: db:94:2f:41:a0:85:3c:63:7d:67:6d:75:e8:7c:36: 16:89:d1:8e:fb:2e:7c:61:ac:3f:1c:de:f4:6f:22: 5b:2e:79:67:ef:7e:43:d4:7e:9e:fc:cb:58:03:4a: e9:07:35:90:c3:4d:63:ad:67:9a:7e:bb:72:a1:56: f6:9f:92:71:59:c0:56:47:da:50:30:65:2c:a8:c0: 23:83:05:22:41:54:15:a1:69:cc:85:55:b4:49:f8: d6:cb:2c:e9:dc:1c:5b:e0:e7:9d:dd:0d:d5:c4:ef: ce:b2:b3:0b:8d:36:cf:83:35:11:aa:27:38:45:9c: 97:8f:d2:6f:ef:15:05:9d:14:eb:ca:32:50:e3:e2: 1a:4a:0d:a8:af:cc:e6:02:13:de:b4:08:e1:ea:fd: d4:31:a2:f7:cb:50:9c:cf:6f:45:af:62:a4:b5:87: bc:8f:db:5a:74:84:62:96:17:03:fd:ca:8c:b8:fa: 62:f8:f4:7b:2d:25:d9:b2:fd:8e:d9:a1:1e:83:23: 60:87:32:af:6e:82:7c:8a:9a:1a:10:11:af:90:a6: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8E:4E:F4:F9:80:82:C0:DE:43:DA:9B:17:5A:89:11:C2:00:AB:A5 X509v3 Authority Key Identifier: keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8a:69:11:bd:dc:88:9b:2a:b1:5b:63:df:fd:3f:c8:14:17: f2:d1:02:b1:1d:ca:d6:6d:49:97:f1:ae:8f:9b:35:06:31:ac: a9:22:4e:c7:d4:b7:f3:5a:29:0c:c9:de:d4:6d:ce:dc:bd:cb: a6:44:3b:80:f6:b5:d8:14:7b:38:c5:b1:6f:64:df:c6:f0:4e: d0:59:77:29:30:0e:a4:ae:90:2c:dd:a4:16:bd:12:b6:cf:09: cd:f4:18:f2:e2:a0:18:c3:06:76:99:b1:da:a4:23:f3:2a:81: 8d:5d:fe:78:51:6e:48:9b:99:1c:ca:a3:b0:13:e0:3d:e7:c8: f6:63:a6:63:d2:dd:43:9e:a0:b3:80:fe:7c:14:b9:9b:a3:91: d3:55:b9:62:c1:6e:65:91:e8:c1:9a:45:fc:60:ed:d3:10:61: b4:b9:ea:96:d4:f9:fb:2a:18:d3:da:bc:07:92:7f:ad:e5:d0: ad:51:87:34:cc:09:91:6f:cb:25:b7:e8:22:e2:42:b3:47:15: 39:77:e4:f0:9f:38:a2:af:e4:f7:9b:1e:1e:77:3c:24:0c:bc: 6e:0b:03:6f:9a:c4:0a:af:52:57:5c:d1:40:11:ae:60:91:c3: f0:08:e2:48:6e:d9:31:f9:5f:36:9e:80:ae:47:3c:c0:52:09: 01:56:a7:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVCOTExMC8GA1UEBRMoODVDMDc2RkQ5RUMwNjlBQTNCRUI4NzUzNEU5NDdBODlD NDNEOTZDQTAeFw0yNjA3MjcxMTI5NThaFw0yNjA4MDMxMTI5NThaMBgxFjAUBgNV BAMTDTZhNjc0MTM2LWMyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd9Z11Vunpf+aFtFCGv7x5b2GeufvXEmoRO+5gM13fm3m0d8H15v0be1ifWduU L0GghTxjfWdtdeh8NhaJ0Y77LnxhrD8c3vRvIlsueWfvfkPUfp78y1gDSukHNZDD TWOtZ5p+u3KhVvafknFZwFZH2lAwZSyowCODBSJBVBWhacyFVbRJ+NbLLOncHFvg 553dDdXE786yswuNNs+DNRGqJzhFnJeP0m/vFQWdFOvKMlDj4hpKDaivzOYCE960 COHq/dQxovfLUJzPb0WvYqS1h7yP21p0hGKWFwP9yoy4+mL49HstJdmy/Y7ZoR6D I2CHMq9ugnyKmhoQEa+QpikfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCI5O9PmA gsDeQ9qbF1qJEcIAq6UwHwYDVR0jBBgwFoAUhcB2/Z7Aaao764dTTpR6icQ9lsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzlGMjVBQzBBNzUx NzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFvNzY0ZFRUcFI2aWNROWxz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNCMl9aN0FhYW83NjRkVFRwUjZpY1E5bHNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUI5LzlGMjVBQzBBNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFv NzY0ZFRUcFI2aWNROWxzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjimkRvdyImyqxW2Pf/T/IFBfy0QKxHcrWbUmX8a6PmzUGMaypIk7H1LfzWikM yd7Ubc7cvcumRDuA9rXYFHs4xbFvZN/G8E7QWXcpMA6krpAs3aQWvRK2zwnN9Bjy 4qAYwwZ2mbHapCPzKoGNXf54UW5Im5kcyqOwE+A958j2Y6Zj0t1DnqCzgP58FLmb o5HTVbliwW5lkejBmkX8YO3TEGG0ueqW1Pn7KhjT2rwHkn+t5dCtUYc0zAmRb8sl t+gi4kKzRxU5d+Twnziir+T3mx4edzwkDLxuCwNvmsQKr1JXXNFAEa5gkcPwCOJI btkx+V82noCuRzzAUgkBVqfq -----END CERTIFICATE-----Generated at Tue Jul 28 18:04:01 2026 by rpki-client