$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: ORcmD4etE4wrV+DK6FtyP1JJs7IOER5IAy0EBeiivd0= Subject key identifier: 45:73:51:9B:03:E8:D9:E7:B6:18:3B:EE:87:B3:9A:97:0F:F0:04:C7 Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 0217 Signing time: Thu 23 Jul 2026 04:11:36 +0000 Manifest this update: Thu 23 Jul 2026 04:11:36 +0000 Manifest next update: Thu 30 Jul 2026 04:11:36 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: n2sr5fK7/rUB6L0CQUH9IScjr5DQjRKkhoMWAmGdNoA=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Jul 23 04:11:36 2026 GMT Not After : Jul 30 04:11:36 2026 GMT Subject: CN=6a619478-2db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:c9:5d:a4:db:bc:de:2f:24:46:31:a9:b0: 9c:b8:c5:02:39:98:97:f9:53:d6:47:4c:fc:f2:8a: d9:a7:23:a8:85:16:bb:23:81:5f:57:c4:06:3e:1c: b1:0b:99:cd:07:d3:4a:2a:13:53:34:54:5a:82:9b: 6f:df:bc:f3:6e:23:30:8c:57:75:bf:a4:dd:78:cb: 0c:0c:74:7d:25:f8:48:0a:39:25:98:da:f2:73:6e: 25:f0:2b:75:1e:36:6e:c4:af:37:2f:4d:b5:16:a0: a6:08:97:1a:dd:cb:9c:c8:0b:f1:10:64:19:ae:ce: 7f:f3:0b:25:af:b0:27:d5:df:ca:5c:f6:87:ce:22: 46:b0:36:b2:b1:07:ea:9f:a5:a3:ed:bc:29:a9:49: 88:20:ed:01:38:38:b0:e5:e5:0e:77:7f:8f:5a:61: d1:38:87:f5:0e:fc:4a:97:48:8a:8c:db:cd:5f:f2: ce:ef:2b:f9:28:af:47:ef:58:06:bb:a9:c9:60:52: a6:e8:23:97:4d:c7:65:ba:2b:45:ff:e4:30:04:d9: 8e:c2:ea:7a:1a:dd:77:dd:11:3e:0d:b5:31:d6:0d: 64:cd:a0:68:f5:1a:91:84:99:c3:dc:cc:70:3f:3b: b4:da:c5:c6:e7:bb:ab:af:9b:73:3a:e4:01:62:09: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:73:51:9B:03:E8:D9:E7:B6:18:3B:EE:87:B3:9A:97:0F:F0:04:C7 X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:18:20:d3:bf:56:c6:91:d4:ed:9c:09:7b:a9:be:10:5b:a0: 36:b1:4f:2f:d5:6d:dd:d8:45:8d:a0:99:a5:06:7a:4c:9a:fe: c8:c9:ad:f0:e8:ca:d8:cd:5f:39:73:14:ec:be:7b:c6:d6:05: c7:07:7f:04:ca:b3:4c:66:36:f5:5e:c1:76:e0:d6:19:e3:3f: 1d:71:57:6b:4e:f7:f4:dc:37:66:de:8e:20:c4:54:b2:40:10: 4c:db:30:c2:0f:ff:f5:45:87:ce:d0:d1:ed:88:e9:b9:4b:fa: 37:92:5f:2f:a4:04:91:3a:24:32:37:29:95:8d:38:53:de:ea: 21:ce:76:b2:6a:7f:0b:68:cb:27:6a:68:87:62:23:52:3c:e2: 84:92:da:12:ce:c1:c0:62:37:6a:b2:09:7c:f0:ce:7f:fd:d1: bc:68:bc:b8:f9:68:49:b6:e0:01:26:0b:95:f5:2d:b6:e2:38: e5:85:1e:fe:0c:3e:43:ea:0f:ba:42:19:12:c6:9f:b7:2b:c2: ca:ef:8e:11:dd:3f:b4:59:d6:df:27:3c:59:39:71:7b:76:f9: 32:dd:1d:64:bb:4c:3f:d1:6c:a3:2d:98:37:59:e9:9b:0e:b3: 9c:5a:04:8f:ba:c5:5e:0e:8e:0a:92:f0:42:74:ed:65:f2:3a: 1a:15:6b:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjYwNzIzMDQxMTM2WhcNMjYwNzMwMDQxMTM2WjAYMRYwFAYD VQQDEw02YTYxOTQ3OC0yZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh6rJXaTbvN4vJEYxqbCcuMUCOZiX+VPWR0z88orZpyOohRa7I4FfV8QGPhyx C5nNB9NKKhNTNFRagptv37zzbiMwjFd1v6TdeMsMDHR9JfhICjklmNryc24l8Ct1 HjZuxK83L021FqCmCJca3cucyAvxEGQZrs5/8wslr7An1d/KXPaHziJGsDaysQfq n6Wj7bwpqUmIIO0BODiw5eUOd3+PWmHROIf1DvxKl0iKjNvNX/LO7yv5KK9H71gG u6nJYFKm6COXTcdluitF/+QwBNmOwup6Gt133RE+DbUx1g1kzaBo9RqRhJnD3Mxw Pzu02sXG57urr5tzOuQBYgkSewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVzUZsD 6Nnnthg77oezmpcP8ATHMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3 cFQwa1J1X2JETUJad1ZKTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRgg079WxpHU7ZwJe6m+EFugNrFPL9Vt3dhFjaCZpQZ6TJr+yMmt8OjK2M1f OXMU7L57xtYFxwd/BMqzTGY29V7BduDWGeM/HXFXa0739Nw3Zt6OIMRUskAQTNsw wg//9UWHztDR7YjpuUv6N5JfL6QEkTokMjcplY04U97qIc52smp/C2jLJ2poh2Ij UjzihJLaEs7BwGI3arIJfPDOf/3RvGi8uPloSbbgASYLlfUttuI45YUe/gw+Q+oP ukIZEsaftyvCyu+OEd0/tFnW3yc8WTlxe3b5Mt0dZLtMP9Fsoy2YN1npmw6znFoE j7rFXg6OCpLwQnTtZfI6GhVrWw== -----END CERTIFICATE-----Generated at Fri Jul 24 02:30:15 2026 by rpki-client