$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: NNXY9zv3CX629M4caGN4vKkoEftd6H53C0dObHve1QA= Subject key identifier: 5C:26:50:88:F2:33:59:BA:F0:95:0B:D3:8A:35:44:CA:82:50:3D:C1 Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0D1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0D04 Signing time: Wed 22 Jul 2026 18:36:32 +0000 Manifest this update: Wed 22 Jul 2026 18:36:32 +0000 Manifest next update: Wed 29 Jul 2026 18:36:32 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: iG7w9dExUn/65/kcy6osJxjSrHTIeOyw6nwJn51xxng=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Jul 22 18:36:32 2026 GMT Not After : Jul 29 18:36:32 2026 GMT Subject: CN=6a610db0-5c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:03:54:5c:4c:36:a9:3f:0f:56:86:1e:97: e6:3f:8b:43:9c:34:a5:4f:d6:b7:24:63:db:31:8d: 4d:1f:25:90:91:76:2c:a9:17:21:70:b5:9e:f4:e0: 9e:48:df:44:e0:28:b2:45:dd:d4:81:e9:41:b1:eb: 21:25:a9:ac:26:6f:1a:3f:51:b6:69:31:7e:bd:a8: 28:b7:e7:6f:c0:a3:70:d8:21:56:83:bb:53:a3:70: 18:c7:f9:5d:ad:9f:fb:f9:78:88:71:c7:e7:fc:d7: 7f:13:a6:75:f0:c3:d9:a5:37:70:59:ea:36:32:84: d4:89:8a:7e:15:8b:b1:0b:ff:0c:8f:b9:f6:69:41: 72:74:23:6b:6b:1e:fb:dc:7f:e2:0f:b5:1e:ee:a3: 30:76:7d:99:26:73:d9:1a:f4:f6:48:04:bb:48:08: 22:3a:01:c1:e1:f0:0c:4d:82:5b:ee:ec:34:e3:b3: 21:69:84:ca:ba:d2:f1:6c:85:fe:a7:13:26:3e:8a: 9e:ae:5a:6d:f0:1a:40:d0:4c:fc:d7:da:cb:d3:33: 2e:4f:e5:21:93:4b:2f:d1:74:25:1d:28:a0:75:7f: e4:7d:30:9d:8c:73:51:b4:64:c7:4a:47:10:0d:fc: 15:26:d9:b8:be:54:66:37:99:3d:0d:75:55:5f:bc: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:50:88:F2:33:59:BA:F0:95:0B:D3:8A:35:44:CA:82:50:3D:C1 X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e3:8d:da:42:96:2c:cf:e8:6a:52:63:5d:be:91:d4:6a:5f: c3:2d:4e:74:86:1e:5f:4d:99:e3:12:e5:2a:db:e8:cd:a5:db: 4c:a0:3f:20:9b:06:df:d2:35:31:60:9f:49:d7:3d:11:99:47: 65:df:d0:8e:e0:1f:f5:a6:88:b9:10:36:02:d6:62:05:40:61: a9:d1:3d:99:fb:31:0c:0c:75:31:96:91:5d:f0:cf:27:97:a4: 96:3b:ee:11:70:27:f5:5c:d7:5e:fa:dc:46:95:0e:b6:7a:f6: 71:21:23:e8:24:bc:65:14:c5:01:54:fb:c1:cc:ec:37:ff:e2: 09:62:80:e7:df:2f:19:1d:bc:4e:f3:cf:06:60:dc:dd:c3:51: 5a:1e:ac:3d:53:ff:da:70:ff:03:30:d4:b9:22:b0:7a:d0:83: c2:37:4a:3f:69:fd:57:87:19:a4:b5:28:1a:7a:83:e3:74:fd: d4:be:f8:eb:f5:c6:bb:6e:f0:e8:bf:cf:23:de:41:c3:3d:ac: 13:2d:ff:0d:0c:5d:87:e0:89:0f:bc:98:23:f2:66:33:53:5d: 00:68:7d:27:d1:e0:4f:fd:c6:59:47:97:0d:e3:bf:cd:36:57: 66:17:5a:ed:18:58:fc:e5:7b:a5:07:5f:81:82:0c:13:85:f3: de:6c:0f:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjYwNzIyMTgzNjMyWhcNMjYwNzI5MTgzNjMyWjAYMRYwFAYD VQQDEw02YTYxMGRiMC01Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXADVFxMNqk/D1aGHpfmP4tDnDSlT9a3JGPbMY1NHyWQkXYsqRchcLWe9OCe SN9E4CiyRd3UgelBseshJamsJm8aP1G2aTF+vagot+dvwKNw2CFWg7tTo3AYx/ld rZ/7+XiIccfn/Nd/E6Z18MPZpTdwWeo2MoTUiYp+FYuxC/8Mj7n2aUFydCNrax77 3H/iD7Ue7qMwdn2ZJnPZGvT2SAS7SAgiOgHB4fAMTYJb7uw047MhaYTKutLxbIX+ pxMmPoqerlpt8BpA0Ez819rL0zMuT+Uhk0sv0XQlHSigdX/kfTCdjHNRtGTHSkcQ DfwVJtm4vlRmN5k9DXVVX7xFkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwmUIjy M1m68JUL04o1RMqCUD3BMB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADuON2kKWLM/oalJjXb6R1Gpfwy1OdIYeX02Z4xLlKtvozaXbTKA/IJsG39I1 MWCfSdc9EZlHZd/QjuAf9aaIuRA2AtZiBUBhqdE9mfsxDAx1MZaRXfDPJ5ekljvu EXAn9VzXXvrcRpUOtnr2cSEj6CS8ZRTFAVT7wczsN//iCWKA598vGR28TvPPBmDc 3cNRWh6sPVP/2nD/AzDUuSKwetCDwjdKP2n9V4cZpLUoGnqD43T91L746/XGu27w 6L/PI95Bwz2sEy3/DQxdh+CJD7yYI/JmM1NdAGh9J9HgT/3GWUeXDeO/zTZXZhda 7RhY/OV7pQdfgYIME4Xz3mwP2g== -----END CERTIFICATE-----Generated at Fri Jul 24 08:29:56 2026 by rpki-client