$ rpki-client -vvf rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft File: hNLiPvClu7C9V4ERjF7OZYdw0PM.mft (raw, json) Hash identifier: R1ld6SjzpOeiPaQfMow33+cLVvTZideyxstaIEmr/bs= Subject key identifier: 29:63:5B:AB:BB:FF:AA:36:D3:F0:BA:C3:D5:04:E9:7F:5D:1F:FA:AB Authority key identifier: 84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3 Certificate issuer: /CN=A9118572/serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft Manifest number: 21 Signing time: Thu 23 Jul 2026 10:56:22 +0000 Manifest this update: Thu 23 Jul 2026 10:56:21 +0000 Manifest next update: Thu 30 Jul 2026 10:56:21 +0000 Files and hashes: 1: hNLiPvClu7C9V4ERjF7OZYdw0PM.crl (hash: McnnMR2Ww+v0KNcLMbCS4IvIiY4R6DEpdf5rTZ0t7jo=) 2: 434B951C541911F1A205AA4996833773.roa (hash: M7rzen4ve19DhDEBu/8OkXFTRebAryZoqY9bg5GuIQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118572, serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3 Validity Not Before: Jul 23 10:56:21 2026 GMT Not After : Jul 30 10:56:21 2026 GMT Subject: CN=6a61f356-1ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:1b:be:55:3b:1b:81:e5:dc:8d:2e:b7:d2: 98:28:ea:ca:4b:2b:a5:84:2a:01:d1:cd:a9:77:31: 97:3b:dc:03:ca:a7:ec:94:65:a7:c8:3d:57:48:57: 46:c8:f0:34:30:0a:dd:e5:e7:22:33:de:84:ab:e0: 1c:70:90:b5:14:a7:53:2a:c2:76:04:77:ef:b9:3b: 73:16:d7:73:75:56:b7:97:2d:5d:82:a9:62:da:01: 84:cb:4d:c9:2c:e3:ec:6c:0c:6f:59:81:c0:0a:35: 7e:8b:a6:57:af:0c:8a:c6:2b:79:55:0f:3b:38:7e: 76:dd:b9:77:42:b6:76:8d:c5:c2:10:c0:eb:a6:ea: 70:67:66:4b:eb:37:5a:4a:99:1f:99:ed:dc:05:e3: 4c:c8:2f:03:ac:36:82:3c:0e:87:b7:47:7c:e1:eb: 48:96:a9:e0:3a:b7:05:e1:4d:8f:4d:ae:b4:52:01: 0a:94:01:c7:33:86:5c:99:1e:90:a3:b6:81:ab:91: 48:5c:46:64:51:7a:24:c5:35:f0:07:0c:43:14:85: 0e:cb:b9:11:77:1e:28:9e:61:6b:1f:42:11:44:6c: d2:b2:71:c5:db:0f:df:30:0d:3d:b1:e8:6a:3e:01: 9f:6f:91:03:c8:7d:d8:55:35:ed:02:d4:d5:23:28: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:63:5B:AB:BB:FF:AA:36:D3:F0:BA:C3:D5:04:E9:7F:5D:1F:FA:AB X509v3 Authority Key Identifier: keyid:84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:21:ec:de:15:01:e0:7e:12:d5:04:82:32:6d:cd:e4:38:af: 6c:ee:d3:98:d3:d1:80:43:b2:3f:f1:73:ac:5c:89:69:29:53: 72:ee:c1:6c:70:1e:fe:59:f7:4b:41:81:3d:bc:1c:49:e7:b7: 7a:eb:6e:50:27:12:4d:20:14:93:af:99:33:bc:39:51:61:18: 98:08:6d:ea:f4:94:a0:f6:0f:cf:1e:df:0c:71:b9:86:e1:ee: de:03:14:91:06:c7:68:3d:b6:00:92:9e:fc:3e:bb:cc:da:a1: b0:ed:ef:93:40:f4:ba:fe:86:8b:6a:ae:0e:14:d6:9e:79:50: 66:31:f9:d4:df:e8:cb:13:fd:3e:dc:13:19:4b:f3:46:84:0e: 17:89:f9:87:f3:3d:2d:b1:8c:69:c5:12:36:59:4d:f8:88:c5: 76:8e:50:e6:02:91:46:e2:b5:a2:c3:84:c1:50:30:51:3f:fb: 95:af:9e:9e:f9:0c:40:b2:fb:a1:83:9d:71:aa:eb:29:9e:13: 83:fd:08:11:74:df:80:c2:7f:d0:7f:17:ad:f6:86:3d:a2:18: 03:b6:27:69:ec:3e:12:14:0c:47:4d:8e:5b:26:eb:01:5e:20: 24:03:90:6f:f5:91:0d:54:d5:da:31:8d:3b:ae:e8:af:db:70: 8d:2a:03:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODU3MjExMC8GA1UEBRMoODREMkUyM0VGMEE1QkJCMEJENTc4MTExOEM1RUNFNjU4 NzcwRDBGMzAeFw0yNjA3MjMxMDU2MjFaFw0yNjA3MzAxMDU2MjFaMBgxFjAUBgNV BAMTDTZhNjFmMzU2LTFlY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxShu+VTsbgeXcjS630pgo6spLK6WEKgHRzal3MZc73APKp+yUZafIPVdIV0bI 8DQwCt3l5yIz3oSr4BxwkLUUp1MqwnYEd++5O3MW13N1VreXLV2CqWLaAYTLTcks 4+xsDG9ZgcAKNX6LplevDIrGK3lVDzs4fnbduXdCtnaNxcIQwOum6nBnZkvrN1pK mR+Z7dwF40zILwOsNoI8Doe3R3zh60iWqeA6twXhTY9NrrRSAQqUAcczhlyZHpCj toGrkUhcRmRReiTFNfAHDEMUhQ7LuRF3HiieYWsfQhFEbNKyccXbD98wDT2x6Go+ AZ9vkQPIfdhVNe0C1NUjKOsPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKWNbq7v/ qjbT8LrD1QTpf10f+qswHwYDVR0jBBgwFoAUhNLiPvClu7C9V4ERjF7OZYdw0PMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NTcyLzU4QUE2QTdFNTQx MzExRjE5NDQ1RjE3Nzk0ODMzNzczL2hOTGlQdkNsdTdDOVY0RVJqRjdPWllkdzBQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaE5MaVB2Q2x1N0M5VjRFUmpGN09aWWR3MFBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NTcyLzU4QUE2QTdFNTQxMzExRjE5NDQ1RjE3Nzk0ODMzNzczL2hOTGlQdkNsdTdD OVY0RVJqRjdPWllkdzBQTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7IezeFQHgfhLVBIIybc3kOK9s7tOY09GAQ7I/8XOsXIlpKVNy7sFscB7+WfdL QYE9vBxJ57d6625QJxJNIBSTr5kzvDlRYRiYCG3q9JSg9g/PHt8McbmG4e7eAxSR BsdoPbYAkp78PrvM2qGw7e+TQPS6/oaLaq4OFNaeeVBmMfnU3+jLE/0+3BMZS/NG hA4XifmH8z0tsYxpxRI2WU34iMV2jlDmApFG4rWiw4TBUDBRP/uVr56e+QxAsvuh g51xquspnhOD/QgRdN+Awn/Qfxet9oY9ohgDtidp7D4SFAxHTY5bJusBXiAkA5Bv 9ZENVNXaMY07ruiv23CNKgPs -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:19 2026 by rpki-client