$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: ATxZVt8FymA+DktzKHjtgyeAcSDrTS+sI8E2o6/bVRk= Subject key identifier: 48:8E:51:98:4B:0E:B9:C2:21:53:39:8F:E3:6B:03:E9:CF:A4:7B:D7 Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 3580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 3572 Signing time: Tue 28 Jul 2026 14:58:43 +0000 Manifest this update: Tue 28 Jul 2026 14:58:43 +0000 Manifest next update: Tue 04 Aug 2026 14:58:43 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: CnQfJD6xIW1+3LYUmV1UpFkmbBPb09vZdUpsX+8be5E=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: Jul 28 14:58:43 2026 GMT Not After : Aug 4 14:58:43 2026 GMT Subject: CN=6a68c3a3-51f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:0a:95:56:75:48:97:37:88:e0:f8:0c:0c: 69:1d:f9:16:a6:56:ba:98:b2:dc:b0:22:d1:60:8b: 91:e6:52:8b:66:d2:a2:40:61:31:6d:a7:8c:bb:8e: a5:5b:c0:94:1b:ff:65:c6:92:b7:d2:26:b2:10:b1: bd:a5:8f:93:8a:0f:00:2c:3f:62:03:73:5a:be:1c: c7:09:34:d6:00:0f:41:18:0f:02:93:c9:b1:67:59: d8:15:fc:d7:e5:65:4c:6e:22:da:cf:a9:52:bb:33: 69:e4:a2:cf:1c:0b:50:5c:b2:6d:db:b9:f9:30:31: 37:97:9c:6d:19:39:9f:42:cd:02:28:88:4a:56:1f: a1:fa:4c:aa:30:21:ab:c3:15:7f:2b:62:ab:d5:55: 27:8f:0b:c9:94:46:91:71:14:5f:68:6c:bc:68:51: 0d:45:90:7d:6d:36:f2:b9:4f:8b:c8:f5:be:cc:a8: 98:d5:2c:e3:42:19:46:4c:4c:77:27:a7:53:b7:73: 30:c1:ab:6a:22:c1:4e:26:9a:e9:18:cb:57:70:cb: 9d:04:c4:1f:46:0f:d4:f4:56:ca:96:84:da:a9:b9: 51:8c:06:f7:d6:8f:2d:79:b2:9f:c8:b9:02:36:b2: d4:57:f8:c6:dd:2d:f2:80:a5:14:0c:04:18:52:bc: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8E:51:98:4B:0E:B9:C2:21:53:39:8F:E3:6B:03:E9:CF:A4:7B:D7 X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d6:dd:67:26:20:bf:63:cc:60:33:20:c1:e7:63:64:e9:0e: 85:0d:52:8a:af:8f:56:54:82:5d:6b:cf:fb:b3:aa:71:3b:9a: 1c:fb:e7:d9:ec:38:4e:93:be:79:99:54:e3:5d:2b:53:1b:44: d9:f9:d4:df:3d:9e:d2:e3:64:fe:8c:c2:94:ad:cc:b7:ac:aa: 60:8a:9d:74:11:73:f8:d3:c7:75:67:75:6d:29:70:6c:87:10: 3c:09:db:c0:c4:a6:24:a0:c8:98:dd:36:33:1f:fb:d4:53:63: 95:ec:d8:49:bd:2e:60:6c:d0:34:8b:e2:fe:4b:30:a4:f3:d2: fb:6d:f7:d7:93:41:88:c7:2e:e9:2e:e8:95:09:56:27:dd:44: b8:1a:73:59:32:a3:b2:a8:eb:12:e7:5c:8d:ba:40:27:ee:e4: 6e:e8:21:52:b9:30:7c:53:e4:69:5e:e5:d4:0e:bc:41:17:d8: 92:46:bf:14:da:28:1d:4b:9e:02:96:78:b7:97:80:03:dd:3c: a9:e1:cf:db:19:ad:09:a9:97:c1:a5:6e:bb:b2:0a:ca:e1:c4: 78:ba:6e:69:64:84:3a:2f:af:91:3d:f1:fa:2f:ca:c3:39:f9: fc:12:61:43:c9:7f:e6:e3:05:55:03:34:2e:7f:3d:b4:49:3d: b1:50:eb:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjYwNzI4MTQ1ODQzWhcNMjYwODA0MTQ1ODQzWjAYMRYwFAYD VQQDEw02YTY4YzNhMy01MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkIKlVZ1SJc3iOD4DAxpHfkWpla6mLLcsCLRYIuR5lKLZtKiQGExbaeMu46l W8CUG/9lxpK30iayELG9pY+Tig8ALD9iA3NavhzHCTTWAA9BGA8Ck8mxZ1nYFfzX 5WVMbiLaz6lSuzNp5KLPHAtQXLJt27n5MDE3l5xtGTmfQs0CKIhKVh+h+kyqMCGr wxV/K2Kr1VUnjwvJlEaRcRRfaGy8aFENRZB9bTbyuU+LyPW+zKiY1SzjQhlGTEx3 J6dTt3MwwatqIsFOJprpGMtXcMudBMQfRg/U9FbKloTaqblRjAb31o8tebKfyLkC NrLUV/jG3S3ygKUUDAQYUrximQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiOUZhL DrnCIVM5j+NrA+nPpHvXMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACNbdZyYgv2PMYDMgwedjZOkOhQ1Siq+PVlSCXWvP+7OqcTuaHPvn2ew4TpO+ eZlU410rUxtE2fnU3z2e0uNk/ozClK3Mt6yqYIqddBFz+NPHdWd1bSlwbIcQPAnb wMSmJKDImN02Mx/71FNjlezYSb0uYGzQNIvi/kswpPPS+23315NBiMcu6S7olQlW J91EuBpzWTKjsqjrEudcjbpAJ+7kbughUrkwfFPkaV7l1A68QRfYkka/FNooHUue ApZ4t5eAA908qeHP2xmtCamXwaVuu7IKyuHEeLpuaWSEOi+vkT3x+i/Kwzn5/BJh Q8l/5uMFVQM0Ln89tEk9sVDrkQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:52 2026 by rpki-client