$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: deMkUyI0/z0q3+qatI7ILpd7UTxf6Cnl+ZDdZj1u610= Subject key identifier: F7:D2:F3:B5:E1:16:17:CA:0C:B7:3C:7A:5C:F4:C0:6D:D2:4D:AF:D2 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08AC Signing time: Tue 28 Jul 2026 21:06:13 +0000 Manifest this update: Tue 28 Jul 2026 21:06:12 +0000 Manifest next update: Tue 04 Aug 2026 21:06:12 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: fRIDxcexLxnh+WdRRZA5UtHhgD8+PQCyZlZF60v5t6o=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: 08lz7b6szSEMQO1jrd2yTTyJym47lMNxqFGZhqAfyUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Jul 28 21:06:12 2026 GMT Not After : Aug 4 21:06:12 2026 GMT Subject: CN=6a6919c4-40a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:4b:e4:7c:be:30:4c:8a:d3:59:cf:a5:5b: 1d:ed:87:77:17:60:89:fd:52:eb:f4:33:18:53:87: f0:8f:6b:90:80:ea:71:e7:a7:22:3a:f2:23:2c:f6: 0b:fa:f8:08:74:d2:d8:75:e3:30:64:b4:69:d7:e5: 72:6e:34:f5:d0:a8:60:f9:83:54:94:cc:a1:3d:41: 56:e1:8f:48:81:4f:8b:1a:1d:8e:f8:07:e7:17:8a: e6:ad:04:88:c9:17:d7:db:48:89:06:b9:63:c8:54: 76:b5:60:f1:34:72:7e:e6:a5:51:9e:84:be:14:aa: b5:a9:63:41:78:2d:09:6c:1b:13:d0:8a:5c:95:e5: b8:ae:a9:f9:09:17:ba:9e:f9:c5:78:a4:3d:07:b9: d5:f7:ca:c3:75:a5:03:4c:a3:1d:39:11:98:aa:2c: b4:d3:75:2c:cf:9d:35:31:6b:04:b7:66:bd:f5:85: d1:22:45:f0:a3:0e:64:86:7f:a4:0e:6f:b4:7b:fb: 00:bc:e9:11:a7:84:18:3d:d5:27:71:33:99:0c:b9: 88:7f:d9:55:4d:37:8e:fe:6e:a7:aa:81:9e:f7:56: 41:b6:50:4c:10:d9:b5:32:c6:dc:26:d7:8a:d5:31: ca:e2:4c:fb:2f:72:03:12:70:0c:f9:b8:99:9d:0d: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D2:F3:B5:E1:16:17:CA:0C:B7:3C:7A:5C:F4:C0:6D:D2:4D:AF:D2 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e3:0e:05:98:df:07:df:96:97:b4:2a:3b:d5:02:45:b3:58: 01:0d:20:28:b1:d1:cd:e4:09:1e:b7:bb:b8:e0:41:0a:71:55: 13:36:24:35:1c:c6:fe:eb:d3:95:5f:89:5d:56:cd:83:57:60: 62:24:f4:f3:28:c1:e5:d4:8a:94:da:3b:4b:93:17:86:7e:1a: 5a:25:01:cf:42:15:52:b9:95:44:4b:40:a1:fd:e4:ad:4c:70: 47:4b:d6:5e:b6:b6:82:ca:ee:22:8a:01:c4:54:d5:e8:94:76: 15:11:90:19:d9:2e:84:7a:25:1b:1c:71:96:02:61:35:fe:61: 2e:ec:8b:06:73:6c:fa:ba:f3:89:e1:16:57:89:ce:b7:7e:2b: 8d:84:58:a8:d8:bb:24:02:7e:6d:32:60:96:33:22:90:8d:fb: ef:c8:ac:72:d5:7f:0d:86:c0:78:a7:b8:33:2d:3b:41:26:97: a9:29:09:f1:3f:43:9d:86:9b:03:3f:4b:fc:e5:c3:78:35:fd: 0c:5c:fc:18:8d:0c:83:c0:d0:2c:26:f5:6f:6b:64:0d:f8:7b: 7f:fc:5a:f8:b9:ed:4e:4d:07:61:71:83:3d:ac:9d:da:b4:9e: c1:c8:45:5d:21:76:2a:f3:39:03:13:a8:c5:bc:c1:1a:4a:d0: 26:32:16:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYwNzI4MjEwNjEyWhcNMjYwODA0MjEwNjEyWjAYMRYwFAYD VQQDEw02YTY5MTljNC00MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoshL5Hy+MEyK01nPpVsd7Yd3F2CJ/VLr9DMYU4fwj2uQgOpx56ciOvIjLPYL +vgIdNLYdeMwZLRp1+VybjT10Khg+YNUlMyhPUFW4Y9IgU+LGh2O+AfnF4rmrQSI yRfX20iJBrljyFR2tWDxNHJ+5qVRnoS+FKq1qWNBeC0JbBsT0IpcleW4rqn5CRe6 nvnFeKQ9B7nV98rDdaUDTKMdORGYqiy003Usz501MWsEt2a99YXRIkXwow5khn+k Dm+0e/sAvOkRp4QYPdUncTOZDLmIf9lVTTeO/m6nqoGe91ZBtlBMENm1MsbcJteK 1THK4kz7L3IDEnAM+biZnQ0KewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfS87Xh FhfKDLc8elz0wG3STa/SMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK+MOBZjfB9+Wl7QqO9UCRbNYAQ0gKLHRzeQJHre7uOBBCnFVEzYkNRzG/uvT lV+JXVbNg1dgYiT08yjB5dSKlNo7S5MXhn4aWiUBz0IVUrmVREtAof3krUxwR0vW Xra2gsruIooBxFTV6JR2FRGQGdkuhHolGxxxlgJhNf5hLuyLBnNs+rrzieEWV4nO t34rjYRYqNi7JAJ+bTJgljMikI3778isctV/DYbAeKe4My07QSaXqSkJ8T9DnYab Az9L/OXDeDX9DFz8GI0Mg8DQLCb1b2tkDfh7f/xa+LntTk0HYXGDPayd2rSewchF XSF2KvM5AxOoxbzBGkrQJjIWBw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:17:57 2026 by rpki-client