$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json) Hash identifier: pe3NTLjKEkksMR7DnaSmXOojLDJdqdNxSSzPXfv4KjI= Subject key identifier: 62:1D:27:D4:4A:0A:AE:B7:1F:30:AF:EB:FE:01:56:87:91:D1:6D:FD Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft Manifest number: 0253 Signing time: Mon 27 Jul 2026 03:47:11 +0000 Manifest this update: Mon 27 Jul 2026 03:47:10 +0000 Manifest next update: Mon 03 Aug 2026 03:47:10 +0000 Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: zEfAal59QFVRBpS4lmsotZqiwtiiM8Bjlp/be8jpUdc=) 2: 8405155C69EB11EF933A993CC4F9AE02.roa (hash: 6/dXduBGzp0fOt3H0jel27vj2BC5gLfjT1zUeVEO9J0=) 3: 805A2E74660311EF90397033C4F9AE02.roa (hash: 5vtGlk0S0hYad6mDuGYTky+IHAV1KVmi2xi5vEoQKNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Jul 27 03:47:10 2026 GMT Not After : Aug 3 03:47:10 2026 GMT Subject: CN=6a66d4bf-d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:68:61:d1:25:0d:15:12:27:aa:91:13:72: c4:ee:b4:39:fc:94:aa:ac:ff:21:03:c1:b2:49:d7: 02:bb:3e:f0:e2:15:2a:02:e8:71:bd:53:23:d0:63: e0:04:7f:db:93:4d:62:43:44:f8:ba:76:a5:aa:51: a5:f5:66:2c:e9:24:ff:b8:af:40:4f:b6:d0:bf:05: b1:0a:10:11:91:17:b9:c3:41:20:f8:66:7d:05:fb: a8:10:ac:e6:19:c4:d4:04:74:fc:13:16:88:14:e5: 10:35:29:97:04:b2:ad:47:68:36:39:73:bf:49:63: e1:d3:5f:64:97:c9:20:6e:9a:6a:36:a4:70:00:29: 33:ad:6d:d8:ba:f9:0d:50:a7:02:25:c5:3e:41:17: 33:84:f5:9d:69:c7:19:52:40:b2:6f:6c:13:99:6e: e2:71:b2:1d:6e:f2:77:68:47:86:96:63:9b:a8:bc: 43:4d:6b:ec:54:75:58:c9:5c:bb:3c:0f:c6:bd:fe: 29:e1:68:7c:5a:43:bc:18:05:89:38:3e:d9:05:ec: 03:cb:c8:61:1a:3e:26:3a:07:64:02:a0:dd:d8:65: ba:88:fb:8c:1c:32:77:ab:f0:34:ac:92:5f:71:c8: bc:3e:86:ec:70:66:8e:05:af:12:d8:97:11:0c:5c: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:27:D4:4A:0A:AE:B7:1F:30:AF:EB:FE:01:56:87:91:D1:6D:FD X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:f9:9e:03:15:83:33:6a:e8:a2:8a:1b:b0:a8:d6:8f:ce: 66:de:66:71:f1:a3:62:3f:5c:ba:4e:b3:31:2d:25:cd:58:ef: cd:a7:fc:c9:c7:7c:cf:f7:f3:4f:68:79:26:a1:88:f0:13:58: 6f:d5:7d:53:dd:82:75:c0:ee:42:de:10:98:94:b7:db:43:67: 1b:29:8b:ff:95:a0:5c:84:ea:54:3a:50:91:ab:73:19:ce:e5: 06:80:5d:97:5e:c7:22:ec:d9:06:6c:49:dd:d1:90:be:1f:7f: 58:38:d2:df:ea:51:35:e3:d7:1d:2c:ae:f4:0c:52:43:85:13: 27:4c:ff:a9:84:9e:28:f2:96:14:9a:0a:36:94:b8:6e:56:79: c7:72:39:9c:05:9a:9f:f7:ef:b4:d5:88:65:1e:a9:ef:4c:b9: 6d:e8:7f:36:a6:a5:f8:1d:e2:12:7b:43:14:c1:17:16:ba:fe: 11:18:b8:ed:cd:19:2c:ec:07:4e:a5:f4:d8:56:3c:f6:c7:fa: a3:d9:99:1c:7c:5e:27:fb:76:41:23:bc:76:71:96:68:73:24: 05:9f:b5:c3:f0:48:42:ea:2e:52:65:7a:7b:c1:24:7b:ba:d4: 54:5a:f9:a3:5a:89:a6:54:d4:a0:c6:6e:58:52:fc:cd:ac:c0: df:95:07:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwNzI3MDM0NzEwWhcNMjYwODAzMDM0NzEwWjAYMRYwFAYD VQQDEw02YTY2ZDRiZi1kNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+BoYdElDRUSJ6qRE3LE7rQ5/JSqrP8hA8GySdcCuz7w4hUqAuhxvVMj0GPg BH/bk01iQ0T4unalqlGl9WYs6ST/uK9AT7bQvwWxChARkRe5w0Eg+GZ9BfuoEKzm GcTUBHT8ExaIFOUQNSmXBLKtR2g2OXO/SWPh019kl8kgbppqNqRwACkzrW3YuvkN UKcCJcU+QRczhPWdaccZUkCyb2wTmW7icbIdbvJ3aEeGlmObqLxDTWvsVHVYyVy7 PA/Gvf4p4Wh8WkO8GAWJOD7ZBewDy8hhGj4mOgdkAqDd2GW6iPuMHDJ3q/A0rJJf cci8PobscGaOBa8S2JcRDFwTuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIdJ9RK Cq63HzCv6/4BVoeR0W39MB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1 U0k3enR1SVNXNGVPWkFja2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARwv5ngMVgzNq6KKKG7Co1o/OZt5mcfGjYj9cuk6zMS0lzVjvzaf8ycd8z/fz T2h5JqGI8BNYb9V9U92CdcDuQt4QmJS320NnGymL/5WgXITqVDpQkatzGc7lBoBd l17HIuzZBmxJ3dGQvh9/WDjS3+pRNePXHSyu9AxSQ4UTJ0z/qYSeKPKWFJoKNpS4 blZ5x3I5nAWan/fvtNWIZR6p70y5beh/Nqal+B3iEntDFMEXFrr+ERi47c0ZLOwH TqX02FY89sf6o9mZHHxeJ/t2QSO8dnGWaHMkBZ+1w/BIQuouUmV6e8Eke7rUVFr5 o1qJplTUoMZuWFL8zazA35UH1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:52 2026 by rpki-client