$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: 53ZnEIJS8BtFb0t0EKW8aBAJn92zyYdTv+x1ZkANlmE= Subject key identifier: DC:ED:49:DE:7C:79:6F:3F:1B:24:7D:D6:8B:3D:CB:5E:78:35:70:5F Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0472 Signing time: Thu 23 Jul 2026 01:03:09 +0000 Manifest this update: Thu 23 Jul 2026 01:03:09 +0000 Manifest next update: Thu 30 Jul 2026 01:03:09 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: 1W5ZEZgf3gXvfMif6TCItP0pzIvVFV8+pLzX/UHdWiM=) 2: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) 3: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) 4: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Jul 23 01:03:09 2026 GMT Not After : Jul 30 01:03:09 2026 GMT Subject: CN=6a61684d-42ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:fd:f5:78:08:b6:7a:d1:9f:90:27:78:be: 11:fe:45:f4:80:fd:02:32:2c:9f:41:80:f7:b4:a6: 0c:39:af:33:78:50:8d:19:29:e9:93:1c:57:e2:61: c5:8a:eb:89:d9:8e:58:a9:5b:13:f4:30:45:9b:f9: 43:6d:7f:80:bb:94:78:ce:92:13:64:f8:40:44:f0: 94:c6:c0:f0:f1:a6:10:af:bd:13:22:4f:a0:9a:3e: e8:86:ff:73:d5:5b:28:d9:5d:ae:e7:8b:b0:20:2e: 8f:29:6b:7f:8e:d4:d0:4f:3a:0f:3e:ad:b8:d0:17: fe:f9:37:0f:e7:f4:70:cd:bd:21:bc:53:5c:bd:5a: 25:df:ff:ee:ca:ee:df:25:ac:4b:09:10:9c:02:ce: f7:bf:07:be:ff:df:18:1d:dc:8e:17:29:e6:62:43: 0d:0d:ba:39:b3:c5:d6:8f:5e:3b:63:5e:06:aa:85: 3f:0e:e0:6e:15:13:17:1c:f0:97:be:2e:b8:92:22: da:ba:a4:a0:91:c7:65:0e:17:e7:f6:71:24:7b:7f: a7:25:8e:ac:7d:04:38:78:f2:76:bf:3f:1f:05:24: 9b:27:50:c1:06:9f:f8:86:15:44:4e:11:c5:ae:d5: 63:17:3c:0e:e3:fb:eb:f6:a4:0d:15:a6:da:cf:1f: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:49:DE:7C:79:6F:3F:1B:24:7D:D6:8B:3D:CB:5E:78:35:70:5F X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:bb:df:ed:f0:32:4d:a3:4b:62:b4:ef:a3:7a:b8:70:2a:22: c3:0a:91:bc:47:1a:5d:90:28:7f:ce:56:57:8e:dc:94:fa:2e: 10:48:3d:c0:56:28:9d:e1:ee:51:54:25:94:2f:a7:36:e9:8f: 95:69:de:18:37:3a:a9:2d:a3:c3:3c:1d:c7:10:04:6e:81:6e: ba:f6:dd:62:b7:aa:b9:d3:4e:02:af:91:6e:4f:77:14:4d:5c: 59:11:93:af:c2:06:32:a1:2b:d4:11:16:8c:02:70:53:6d:07: 70:26:20:ae:fe:8e:d5:7b:4a:e8:23:2b:a3:44:dd:da:e7:20: da:6d:44:d9:a4:25:95:66:40:9a:c1:89:f8:d8:2e:d4:46:12: f0:ed:d7:4c:21:43:78:3f:79:17:f1:2c:32:46:df:92:88:47: d6:61:de:d3:c3:59:d6:5d:c1:a7:ac:29:58:e5:2a:db:10:65: 38:3c:be:cc:79:43:8a:36:4b:8d:13:b2:eb:7f:1f:fd:95:24: ea:73:68:5f:6b:72:a4:87:5d:e8:24:d3:13:78:b9:3a:ba:8a: 46:43:6b:a1:05:8a:da:f4:76:6d:7b:4c:c2:5d:1a:5a:4c:9a: 90:13:8c:44:2f:98:ca:fb:ea:4e:45:6b:7a:20:d1:6f:f2:31: c7:31:b0:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwNzIzMDEwMzA5WhcNMjYwNzMwMDEwMzA5WjAYMRYwFAYD VQQDEw02YTYxNjg0ZC00MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGP99XgItnrRn5AneL4R/kX0gP0CMiyfQYD3tKYMOa8zeFCNGSnpkxxX4mHF iuuJ2Y5YqVsT9DBFm/lDbX+Au5R4zpITZPhARPCUxsDw8aYQr70TIk+gmj7ohv9z 1Vso2V2u54uwIC6PKWt/jtTQTzoPPq240Bf++TcP5/Rwzb0hvFNcvVol3//uyu7f JaxLCRCcAs73vwe+/98YHdyOFynmYkMNDbo5s8XWj147Y14GqoU/DuBuFRMXHPCX vi64kiLauqSgkcdlDhfn9nEke3+nJY6sfQQ4ePJ2vz8fBSSbJ1DBBp/4hhVEThHF rtVjFzwO4/vr9qQNFabazx85mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNztSd58 eW8/GyR91os9y154NXBfMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7vf7fAyTaNLYrTvo3q4cCoiwwqRvEcaXZAof85WV47clPouEEg9wFYoneHu UVQllC+nNumPlWneGDc6qS2jwzwdxxAEboFuuvbdYrequdNOAq+Rbk93FE1cWRGT r8IGMqEr1BEWjAJwU20HcCYgrv6O1XtK6CMro0Td2ucg2m1E2aQllWZAmsGJ+Ngu 1EYS8O3XTCFDeD95F/EsMkbfkohH1mHe08NZ1l3Bp6wpWOUq2xBlODy+zHlDijZL jROy638f/ZUk6nNoX2typIdd6CTTE3i5OrqKRkNroQWK2vR2bXtMwl0aWkyakBOM RC+YyvvqTkVreiDRb/IxxzGwdA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:13 2026 by rpki-client