$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json) Hash identifier: jOHWgIxnLS3Z3Y4k9zkh7RnqXhuP3uJ+qaHATv/sb6E= Subject key identifier: 35:74:D8:62:B8:26:4C:13:EE:AD:AF:51:B2:F3:B6:DC:26:EC:A0:42 Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft Manifest number: DD Signing time: Mon 27 Jul 2026 08:42:02 +0000 Manifest this update: Mon 27 Jul 2026 08:42:01 +0000 Manifest next update: Mon 03 Aug 2026 08:42:01 +0000 Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: wZZ+6ZhWL9vzxZAebAFzGCere1lgwllm5wATY7bEaWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Validity Not Before: Jul 27 08:42:01 2026 GMT Not After : Aug 3 08:42:01 2026 GMT Subject: CN=6a6719da-d0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:67:9e:24:be:8b:4d:a9:07:9a:44:b3:ab:bc: 24:1d:56:1f:e8:85:9f:5a:aa:a6:fa:98:9d:a0:b2: b9:6b:5e:7f:1f:a7:93:19:59:9d:b4:6b:12:0c:02: 43:9e:bd:7c:3a:18:23:d1:57:70:4a:6b:ec:c6:86: 3c:02:b3:27:a5:02:9c:c4:1c:e2:40:85:b2:bd:39: 63:37:3d:8c:16:0f:e4:19:56:5c:d1:e2:8b:c1:32: c7:b2:ed:e3:ab:f8:b5:6b:f6:23:0c:a4:07:14:e7: 5c:d0:b7:ff:f8:6d:a1:4e:ed:a3:ea:fb:90:5e:40: 12:ff:9f:c2:cd:0a:a6:87:50:56:da:04:f2:ca:1e: b3:7d:5b:92:43:15:13:94:74:1b:f7:aa:51:64:ae: 86:71:67:18:4c:58:d8:ed:dd:40:2e:3e:70:10:3a: b9:c5:06:43:e5:22:9a:2d:a1:a0:64:62:b6:69:b0: e9:37:91:c9:83:36:d4:c7:96:33:af:eb:49:f9:f3: 10:bd:72:5e:8f:a3:34:a3:34:0e:1a:db:a5:81:0e: c4:f8:4f:51:28:8b:20:98:88:dc:64:3d:a0:4d:dd: 3b:56:5a:d3:8e:29:24:cc:63:0c:9f:f9:1b:9c:d5: ce:00:77:28:e4:11:bf:06:d8:86:74:03:82:87:73: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:D8:62:B8:26:4C:13:EE:AD:AF:51:B2:F3:B6:DC:26:EC:A0:42 X509v3 Authority Key Identifier: keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:20:79:e8:10:98:4e:fe:e7:7a:9d:26:43:f2:7a:d2:f7:b4: 06:ee:0e:4d:89:67:3e:10:6b:06:44:fa:8f:fd:43:89:48:42: ba:28:1d:80:aa:f5:2b:ac:46:f3:64:91:da:e8:bc:62:d0:2f: 7f:4d:8a:5d:c7:c4:56:39:1e:8c:df:8e:9d:f8:92:02:2f:8c: 6c:cd:91:53:c3:af:69:0d:37:14:df:39:54:67:41:d7:1e:70: 61:cd:aa:47:0a:d5:d9:ea:d6:2e:46:d5:68:22:b2:6f:6e:c3: d0:91:9c:ae:03:4b:87:f3:15:2b:3b:ab:34:c6:4a:15:bb:c8: 9c:5b:4b:37:eb:c6:55:79:08:fd:d4:73:cb:dc:ce:e4:bb:ab: 47:7e:77:83:74:d5:38:bd:cd:c3:25:33:5d:d9:85:72:f2:d6: 83:c0:94:3c:4a:2f:dc:10:dc:55:cf:0d:45:82:e3:be:8a:8a: 41:f1:ba:76:e6:c6:4f:4b:a8:a3:e6:1c:fb:c4:0d:42:f3:3c: 3d:50:49:cf:d2:d5:c4:88:a2:55:55:b2:15:0e:bd:41:01:02: 24:e3:52:8e:45:3b:e8:8e:37:86:ef:fb:79:fd:5e:d3:5b:ff: 60:e3:6a:da:84:27:58:53:b6:9a:04:51:75:88:14:d8:26:2f: 2d:4f:7a:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QzAxMTAvBgNVBAUTKDFEMERBQzExRUQ4MkUzNUMyM0IwQ0JFRkZCRUUwMDYy NjNCMDk5NTcwHhcNMjYwNzI3MDg0MjAxWhcNMjYwODAzMDg0MjAxWjAYMRYwFAYD VQQDEw02YTY3MTlkYS1kMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiGeeJL6LTakHmkSzq7wkHVYf6IWfWqqm+pidoLK5a15/H6eTGVmdtGsSDAJD nr18Ohgj0VdwSmvsxoY8ArMnpQKcxBziQIWyvTljNz2MFg/kGVZc0eKLwTLHsu3j q/i1a/YjDKQHFOdc0Lf/+G2hTu2j6vuQXkAS/5/CzQqmh1BW2gTyyh6zfVuSQxUT lHQb96pRZK6GcWcYTFjY7d1ALj5wEDq5xQZD5SKaLaGgZGK2abDpN5HJgzbUx5Yz r+tJ+fMQvXJej6M0ozQOGtulgQ7E+E9RKIsgmIjcZD2gTd07VlrTjikkzGMMn/kb nNXOAHco5BG/BtiGdAOCh3MYAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDV02GK4 JkwT7q2vUbLzttwm7KBCMB8GA1UdIwQYMBaAFB0NrBHtguNcI7DL7/vuAGJjsJlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81QUZCMTQ4RTM4 ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQxd2pzTXZ2LS00QVltT3dt VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRMnNFZTJDNDF3anNNdnYtLTRBWW1Pd21WYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81QUZCMTQ4RTM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQx d2pzTXZ2LS00QVltT3dtVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHCB56BCYTv7nep0mQ/J60ve0Bu4OTYlnPhBrBkT6j/1DiUhCuigdgKr1K6xG 82SR2ui8YtAvf02KXcfEVjkejN+OnfiSAi+MbM2RU8OvaQ03FN85VGdB1x5wYc2q RwrV2erWLkbVaCKyb27D0JGcrgNLh/MVKzurNMZKFbvInFtLN+vGVXkI/dRzy9zO 5LurR353g3TVOL3NwyUzXdmFcvLWg8CUPEov3BDcVc8NRYLjvoqKQfG6dubGT0uo o+Yc+8QNQvM8PVBJz9LVxIiiVVWyFQ69QQECJONSjkU76I43hu/7ef1e01v/YONq 2oQnWFO2mgRRdYgU2CYvLU96cQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:46 2026 by rpki-client