$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: rvdz2RJGsHNyWWK0pOy+zRU7ku6I8Ay/fq+XuaprG9U= Subject key identifier: 80:0B:44:25:2B:A0:94:A9:AD:4E:22:88:7E:3A:27:FD:D7:F2:AA:A7 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 07A3 Signing time: Sun 26 Jul 2026 22:17:31 +0000 Manifest this update: Sun 26 Jul 2026 22:17:31 +0000 Manifest next update: Sun 02 Aug 2026 22:17:31 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: mL+IT5be9RJ5y3JcNXSnhYqvWOTKBV2pfmSiGMUsMsA=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Jul 26 22:17:31 2026 GMT Not After : Aug 2 22:17:31 2026 GMT Subject: CN=6a66877b-994a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:9c:68:2a:f9:e8:92:a2:25:2d:8b:17:65: 2d:56:81:8a:f2:c1:02:22:5e:e5:48:ed:54:5c:27: e4:0b:97:b9:09:2b:b1:b3:0d:55:56:3b:a1:a6:10: 7c:a6:c0:ec:60:86:b7:1f:6e:fa:04:7c:d2:bb:9b: a4:19:59:2b:4d:90:15:54:d3:83:33:28:0d:3f:fa: 05:c0:71:2c:50:50:2d:01:90:bf:7f:6f:11:f0:09: b4:55:be:b3:1d:fa:64:8e:97:cf:88:b0:cd:bb:16: 9f:4b:9b:13:53:48:7a:c2:90:3b:a4:06:4d:c7:b8: 36:5b:d2:f2:21:1b:b9:59:29:d3:57:e2:00:81:12: d5:7b:a8:56:dd:1c:84:a5:96:33:92:38:f1:4c:70: 3c:e9:13:a6:9a:a1:00:45:9e:7f:ae:fc:f2:c0:d2: 5a:bb:10:8d:2a:66:c5:07:39:d0:35:fd:32:72:7b: ea:56:7e:10:db:13:47:ce:fb:d6:9b:b3:d0:e0:f2: fd:5c:ca:fc:43:b7:63:59:f8:e7:5f:a3:d8:4f:d5: a5:95:d9:1d:17:38:4c:b6:2c:80:8a:0a:67:63:01: 70:0b:99:3e:e7:5e:3e:72:24:98:85:61:f3:b5:63: 03:c0:1b:2a:c2:ce:44:87:37:04:00:c4:2f:99:12: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0B:44:25:2B:A0:94:A9:AD:4E:22:88:7E:3A:27:FD:D7:F2:AA:A7 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:00:30:84:2f:9a:2e:92:07:9c:31:06:33:11:76:c9:2b: 4f:a3:b6:98:c4:ca:e1:ea:aa:96:6a:a3:22:f7:98:0d:d0:e8: bd:30:ff:fb:18:07:4c:0b:01:a9:9c:02:7d:94:de:6a:1e:3c: 02:44:59:ea:be:16:1e:cc:a9:42:f5:20:dd:9b:b7:9d:0c:49: 42:2a:ce:8f:5f:08:75:bc:33:2b:65:a3:ac:11:98:22:30:ff: 2b:9d:7b:5b:1d:f9:55:c8:b3:d8:94:70:ea:fc:2b:4f:20:3c: 49:cc:b2:c3:5e:6d:ea:ab:37:53:21:d8:9b:b9:94:54:f3:39: 16:fa:c0:9a:02:37:39:08:6b:ff:ef:0e:f3:0e:4c:fd:e5:8b: 21:72:8a:05:da:ef:9a:80:2f:84:0c:e4:66:f4:bb:9f:ac:99: 69:ab:10:63:bb:bd:dd:bb:f2:c0:b5:c2:74:7f:b8:fa:f7:9b: 63:01:3e:e7:f3:0e:13:12:86:39:fc:ec:fe:9f:87:87:38:a4: 63:0a:b0:ed:42:09:fa:82:9e:ea:31:b6:87:cd:55:6b:98:3b: 82:6c:e9:3b:f6:8c:1f:6b:b9:a0:9b:e3:30:6a:62:89:e0:de: ac:03:25:e7:ca:96:1b:f7:f9:0c:b0:e8:b7:45:e5:a2:e6:12: 6d:2b:b3:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwNzI2MjIxNzMxWhcNMjYwODAyMjIxNzMxWjAYMRYwFAYD VQQDEw02YTY2ODc3Yi05OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhmcaCr56JKiJS2LF2UtVoGK8sECIl7lSO1UXCfkC5e5CSuxsw1VVjuhphB8 psDsYIa3H276BHzSu5ukGVkrTZAVVNODMygNP/oFwHEsUFAtAZC/f28R8Am0Vb6z HfpkjpfPiLDNuxafS5sTU0h6wpA7pAZNx7g2W9LyIRu5WSnTV+IAgRLVe6hW3RyE pZYzkjjxTHA86ROmmqEARZ5/rvzywNJauxCNKmbFBznQNf0ycnvqVn4Q2xNHzvvW m7PQ4PL9XMr8Q7djWfjnX6PYT9WlldkdFzhMtiyAigpnYwFwC5k+514+ciSYhWHz tWMDwBsqws5EhzcEAMQvmRIxLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIALRCUr oJSprU4iiH46J/3X8qqnMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbsQAMIQvmi6SB5wxBjMRdskrT6O2mMTK4eqqlmqjIveYDdDovTD/+xgHTAsB qZwCfZTeah48AkRZ6r4WHsypQvUg3Zu3nQxJQirOj18IdbwzK2WjrBGYIjD/K517 Wx35Vciz2JRw6vwrTyA8Scyyw15t6qs3UyHYm7mUVPM5FvrAmgI3OQhr/+8O8w5M /eWLIXKKBdrvmoAvhAzkZvS7n6yZaasQY7u93bvywLXCdH+4+vebYwE+5/MOExKG Ofzs/p+HhzikYwqw7UIJ+oKe6jG2h81Va5g7gmzpO/aMH2u5oJvjMGpiieDerAMl 58qWG/f5DLDot0XlouYSbSuz9A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:49 2026 by rpki-client