$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: mraUVrfs4ak+NJxQwG6cIOrHrlWkjFlxARVEf+8jUJg= Subject key identifier: D6:4B:67:1F:C1:07:2C:EB:97:72:CD:90:49:43:28:EE:5C:C0:D8:F9 Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0653 Signing time: Sun 26 Jul 2026 23:32:49 +0000 Manifest this update: Sun 26 Jul 2026 23:32:49 +0000 Manifest next update: Sun 02 Aug 2026 23:32:49 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: DndXIl0JhWKCNCVoCbyRmm/lSIVpvb1LclekWsT40rk=) 2: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=) 3: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=) 4: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=) 5: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Jul 26 23:32:49 2026 GMT Not After : Aug 2 23:32:49 2026 GMT Subject: CN=6a669921-b05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:2b:16:77:57:19:a2:a9:3e:7e:70:77:02: ae:75:69:8d:16:58:5c:6e:f7:44:c5:9e:42:ff:67: ad:e6:1f:b2:e5:9e:e9:cd:80:2d:37:98:b0:81:b8: e9:9f:77:6d:ba:3c:aa:91:01:a4:65:81:9d:a6:49: ee:07:ee:8b:d0:65:d1:f0:c1:89:9c:74:8b:0e:c7: 16:87:a5:4d:2a:f7:be:64:80:5a:7b:89:7e:37:72: 65:bc:6a:67:60:e0:9d:1c:99:25:0b:37:6d:94:e9: 22:dd:cc:1d:98:76:67:be:22:29:5b:6d:51:04:3b: 25:be:2e:43:0f:10:24:8c:ce:3b:e8:a4:a0:a9:65: 4f:6c:c7:f8:73:45:02:df:7b:a8:e9:f2:84:02:b5: 6b:a5:85:25:4f:42:5e:ea:5d:3e:20:48:b5:36:b4: e6:77:ab:ae:bb:b4:42:5a:5e:38:6f:05:ae:17:ec: ea:80:40:a5:8e:52:17:a1:b2:ee:b0:f1:d9:ec:95: 09:10:cb:43:3e:22:ad:a9:41:c5:6f:f2:49:fd:03: 1c:fa:7a:ee:27:59:d4:5b:2a:ab:08:1e:59:ba:7e: 7f:1e:a1:6d:67:1b:f3:c9:6a:33:c8:10:5e:dd:d3: 76:9e:9d:b5:94:34:e4:48:25:df:8b:10:3f:11:fb: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:67:1F:C1:07:2C:EB:97:72:CD:90:49:43:28:EE:5C:C0:D8:F9 X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:a1:3a:6f:5c:59:a7:23:fa:18:5f:34:b6:f8:58:a4:92:37: 13:9e:bb:a6:09:db:0c:1e:43:13:14:40:4c:15:f1:4f:b5:7c: 93:26:9e:69:e1:54:f4:45:65:b3:21:8b:b8:de:49:9f:3b:a2: 20:e4:f5:ca:e8:77:c9:ae:e5:d1:62:4f:24:3e:5b:8b:89:85: 12:be:06:4b:ef:a0:cd:15:d8:06:f9:86:9c:b2:a4:24:b4:6d: 6f:0a:29:33:2c:91:b9:21:59:a6:bb:3a:2c:73:28:da:62:cc: d5:28:62:64:9b:56:a7:e6:c5:f9:a2:13:c8:5b:2e:03:17:98: 92:eb:aa:ae:9d:e2:61:40:5f:36:11:5a:52:e4:95:e5:36:c1: 1b:da:de:d2:0f:0f:22:27:16:75:a1:94:eb:77:2f:27:08:91: 99:ef:18:37:4a:db:03:dd:cb:76:4b:53:2b:7f:ba:17:23:b5: c2:e0:30:5e:2b:e5:07:6f:dc:53:5f:67:a6:6f:cd:2a:75:dd: 90:d8:d8:b5:69:4a:63:35:4e:46:99:8b:d8:7d:5a:26:e7:6c: 8c:ea:a0:2d:aa:f7:ca:b3:f5:36:9e:c9:9d:fa:84:32:8e:dc: f1:ab:72:28:30:24:d1:fa:32:82:80:93:5d:59:74:c8:62:39: 94:9d:b6:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjYwNzI2MjMzMjQ5WhcNMjYwODAyMjMzMjQ5WjAYMRYwFAYD VQQDEw02YTY2OTkyMS1iMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLorFndXGaKpPn5wdwKudWmNFlhcbvdExZ5C/2et5h+y5Z7pzYAtN5iwgbjp n3dtujyqkQGkZYGdpknuB+6L0GXR8MGJnHSLDscWh6VNKve+ZIBae4l+N3JlvGpn YOCdHJklCzdtlOki3cwdmHZnviIpW21RBDslvi5DDxAkjM476KSgqWVPbMf4c0UC 33uo6fKEArVrpYUlT0Je6l0+IEi1NrTmd6uuu7RCWl44bwWuF+zqgECljlIXobLu sPHZ7JUJEMtDPiKtqUHFb/JJ/QMc+nruJ1nUWyqrCB5Zun5/HqFtZxvzyWozyBBe 3dN2np21lDTkSCXfixA/Efuu8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZLZx/B Byzrl3LNkElDKO5cwNj5MB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6E6b1xZpyP6GF80tvhYpJI3E567pgnbDB5DExRATBXxT7V8kyaeaeFU9EVl syGLuN5JnzuiIOT1yuh3ya7l0WJPJD5bi4mFEr4GS++gzRXYBvmGnLKkJLRtbwop MyyRuSFZprs6LHMo2mLM1ShiZJtWp+bF+aITyFsuAxeYkuuqrp3iYUBfNhFaUuSV 5TbBG9re0g8PIicWdaGU63cvJwiRme8YN0rbA93LdktTK3+6FyO1wuAwXivlB2/c U19npm/NKnXdkNjYtWlKYzVORpmL2H1aJudsjOqgLar3yrP1Np7JnfqEMo7c8aty KDAk0foygoCTXVl0yGI5lJ226w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:16:30 2026 by rpki-client