$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: J4zpb0qKOMMTYcJcOAaTgobdg3RauHIMRdddo6YyXvc= Subject key identifier: 22:36:A3:77:F8:3A:4A:EF:7F:C6:D5:36:32:AD:45:3A:00:21:28:6D Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C9C Signing time: Sun 26 Jul 2026 18:55:22 +0000 Manifest this update: Sun 26 Jul 2026 18:55:22 +0000 Manifest next update: Sun 02 Aug 2026 18:55:22 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: CImxeqomORyfzZnLlRhSjyj45MyFLREnZvJlapxK9TA=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Jul 26 18:55:22 2026 GMT Not After : Aug 2 18:55:22 2026 GMT Subject: CN=6a66581a-7bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:41:19:a1:6d:56:05:08:b4:06:e5:31:e6: 79:f9:81:68:26:66:90:f4:35:4f:fc:93:29:f3:a0: e4:02:e2:f8:f5:a0:da:f9:e8:34:11:d2:f9:11:01: 24:24:a7:6f:a4:25:c2:b9:48:4f:26:0e:03:76:58: 52:f2:f6:a4:a5:75:3b:d7:7a:f7:57:3f:9e:78:28: 06:05:9d:1b:4b:67:67:f6:f4:90:06:ed:56:67:a4: 2f:83:a1:e6:3b:f1:b5:c3:d7:59:1e:2e:10:af:38: b7:43:2c:b2:e3:53:2f:cf:5b:86:ae:29:bb:6b:3c: c2:ae:60:00:f6:1f:32:df:34:05:1f:d9:dc:f6:3a: aa:33:63:4d:77:63:e0:5f:bb:6a:28:04:f1:0e:78: a2:e2:7d:cc:97:78:40:dc:d9:ce:84:f7:98:9f:85: 02:79:46:92:ee:9f:83:c0:8d:36:c1:69:79:b4:67: a9:e2:ff:67:50:94:49:4a:70:53:cd:7e:4a:3e:56: e2:7d:f9:4d:23:2b:0c:4e:12:63:5d:d7:b3:84:09: 5a:e6:80:90:0c:89:6e:ad:71:cb:2a:8e:1a:74:6c: 84:42:2c:d6:8f:61:97:1b:37:cd:c5:d5:74:83:c0: 85:f0:0e:0a:47:6c:86:3c:38:12:ea:2b:19:7d:1c: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:36:A3:77:F8:3A:4A:EF:7F:C6:D5:36:32:AD:45:3A:00:21:28:6D X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:55:8d:09:e7:73:73:b7:1a:ee:de:32:7d:e6:3c:9a:5e:b5: 07:76:2d:8a:db:cf:43:74:15:39:8b:d7:c2:4f:09:b3:42:44: cc:d6:92:df:fe:78:6d:d6:67:15:52:57:63:37:98:50:f3:29: 9f:ed:d2:68:8c:ed:d4:08:52:b5:25:4c:33:e7:36:fe:0b:bb: 31:05:18:05:34:39:84:b1:bc:a6:07:fa:80:8f:a3:2c:d1:61: b6:2c:3f:5b:0f:0c:fb:df:18:bf:ee:fb:45:60:dd:7e:bf:90: a8:dd:8a:1e:5c:07:94:f7:aa:3a:9e:68:26:eb:a9:d5:e0:3c: 2f:17:9d:0a:75:73:98:ea:4e:6b:74:bb:ed:7b:be:9a:ff:d9: 7b:81:cd:18:5d:15:0d:53:e3:78:30:39:46:14:26:3b:93:37: d2:e1:10:a6:56:7c:82:62:82:e6:13:74:13:3f:89:20:dc:92: ee:4f:d7:d4:8e:5d:a1:a9:96:9e:d6:ca:10:9d:12:58:35:ba: 53:e9:43:e9:e4:e2:2f:25:8a:02:b2:40:1c:0c:da:bc:8f:8b: 76:42:d0:3a:f4:18:ba:7c:a6:09:0e:f0:0e:0a:ac:9b:98:2e: b3:0d:e0:ca:65:3b:e8:99:ec:38:92:ff:1b:76:d2:44:b2:70: 6b:d5:8e:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwNzI2MTg1NTIyWhcNMjYwODAyMTg1NTIyWjAYMRYwFAYD VQQDEw02YTY2NTgxYS03YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvxBGaFtVgUItAblMeZ5+YFoJmaQ9DVP/JMp86DkAuL49aDa+eg0EdL5EQEk JKdvpCXCuUhPJg4DdlhS8vakpXU713r3Vz+eeCgGBZ0bS2dn9vSQBu1WZ6Qvg6Hm O/G1w9dZHi4Qrzi3Qyyy41Mvz1uGrim7azzCrmAA9h8y3zQFH9nc9jqqM2NNd2Pg X7tqKATxDnii4n3Ml3hA3NnOhPeYn4UCeUaS7p+DwI02wWl5tGep4v9nUJRJSnBT zX5KPlbifflNIysMThJjXdezhAla5oCQDIlurXHLKo4adGyEQizWj2GXGzfNxdV0 g8CF8A4KR2yGPDgS6isZfRwvXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCI2o3f4 Okrvf8bVNjKtRToAIShtMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlWNCedzc7ca7t4yfeY8ml61B3YtitvPQ3QVOYvXwk8Js0JEzNaS3/54bdZn FVJXYzeYUPMpn+3SaIzt1AhStSVMM+c2/gu7MQUYBTQ5hLG8pgf6gI+jLNFhtiw/ Ww8M+98Yv+77RWDdfr+QqN2KHlwHlPeqOp5oJuup1eA8LxedCnVzmOpOa3S77Xu+ mv/Ze4HNGF0VDVPjeDA5RhQmO5M30uEQplZ8gmKC5hN0Ez+JINyS7k/X1I5doamW ntbKEJ0SWDW6U+lD6eTiLyWKArJAHAzavI+LdkLQOvQYunymCQ7wDgqsm5gusw3g ymU76JnsOJL/G3bSRLJwa9WORA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:53 2026 by rpki-client