$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: 2LdoMZ/2WeuGea6b839KGUONCLOqUz96f/oBeGELGPo= Subject key identifier: B3:DA:0A:AF:1B:8D:0D:34:54:DA:08:70:B0:18:51:16:90:07:E1:BA Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 3560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 3560 Signing time: Wed 22 Jul 2026 14:36:27 +0000 Manifest this update: Wed 22 Jul 2026 14:36:27 +0000 Manifest next update: Wed 29 Jul 2026 14:36:27 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: LKh0r0qRK4+j+B1SgwIE1Xv0nlDxTfno2Cnp1cQawtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13664 (0x3560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: Jul 22 14:36:27 2026 GMT Not After : Jul 29 14:36:27 2026 GMT Subject: CN=6a60d56b-c024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:a2:f0:92:fc:4a:14:5e:f9:a0:52:05:0a: 3f:da:03:4c:65:9c:a1:76:9d:05:e7:dc:78:9d:82: 07:57:82:8a:51:4c:15:45:ed:5b:5d:43:ac:f3:bf: 1c:22:59:4a:5d:22:3f:8e:eb:05:11:05:51:e7:b4: fe:6b:d6:11:c1:aa:b8:5d:66:b0:17:6a:10:51:f5: e2:c7:14:3e:8c:85:cc:ad:98:c8:e1:f7:3b:dd:6c: 8f:66:0b:44:f3:c8:db:68:f4:9e:40:7e:ad:1e:94: 57:3e:05:8a:30:08:ec:2c:fb:9d:f5:be:04:a3:e1: 8b:a0:e5:ea:38:74:bc:89:bd:e6:f0:f3:86:5c:86: 7d:a4:6a:6f:98:01:da:5e:09:22:1e:c4:f0:c9:c8: 17:29:31:bc:f5:82:90:62:38:72:87:5f:78:01:7a: 5e:72:7d:6d:b3:ef:7d:5c:56:77:f7:c0:9f:8d:73: 5d:9c:66:b7:aa:6c:07:97:4d:74:8b:1e:69:1b:d2: ac:15:9e:29:c3:b2:2e:95:7d:ce:2e:57:fa:cb:48: 2e:50:ac:69:2a:ef:a0:44:d1:77:6f:0f:45:ce:07: 5a:98:23:20:c9:85:53:ab:5a:70:4c:cc:0e:79:fd: 7d:24:d9:7d:21:e6:02:dc:99:f6:b8:eb:bf:f9:7f: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:0A:AF:1B:8D:0D:34:54:DA:08:70:B0:18:51:16:90:07:E1:BA X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:1d:58:5d:f9:99:a1:bd:1a:89:aa:2b:24:7a:74:da:d8: 23:d4:e6:e6:17:d0:ca:ef:b3:74:a7:a6:e4:3f:58:60:41:7d: bb:15:36:41:6b:1d:8e:86:08:e1:d2:f5:02:69:89:c9:72:9a: 7a:7c:ed:73:7b:9a:1a:b7:b5:b6:a6:f3:00:62:d7:05:04:0d: c4:09:9c:99:0f:6b:f0:96:cf:ac:f4:d3:0d:41:9d:e9:e5:95: 9b:ed:24:b3:73:cc:91:46:b8:a9:51:28:8a:dc:f4:2a:72:1c: 79:5f:7c:9f:bf:7b:8a:6a:94:39:28:79:fa:51:f4:68:28:50: 8e:b7:91:b5:28:72:94:40:b9:68:a0:76:85:53:ae:53:b9:d8: 87:58:99:34:bc:02:fa:3d:95:2e:85:25:e2:a7:17:ca:47:c9: 4a:d7:ed:27:0d:1b:bc:95:9f:9c:d1:b9:83:85:05:95:a0:49: da:db:da:55:f1:c0:95:13:4e:0d:b1:08:74:6b:6e:58:54:6a: 42:88:f3:1f:1a:44:d0:cc:3a:ee:78:79:b0:52:55:d6:04:21: 8f:7f:b8:db:d1:72:d1:ec:97:4d:cc:56:a0:bd:bf:ef:1d:cf: 9c:89:26:c5:cc:f4:01:51:89:b4:2f:3e:ba:d0:e7:73:31:65: 71:09:2f:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjYwNzIyMTQzNjI3WhcNMjYwNzI5MTQzNjI3WjAYMRYwFAYD VQQDEw02YTYwZDU2Yi1jMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KGi8JL8ShRe+aBSBQo/2gNMZZyhdp0F59x4nYIHV4KKUUwVRe1bXUOs878c IllKXSI/jusFEQVR57T+a9YRwaq4XWawF2oQUfXixxQ+jIXMrZjI4fc73WyPZgtE 88jbaPSeQH6tHpRXPgWKMAjsLPud9b4Eo+GLoOXqOHS8ib3m8POGXIZ9pGpvmAHa XgkiHsTwycgXKTG89YKQYjhyh194AXpecn1ts+99XFZ398CfjXNdnGa3qmwHl010 ix5pG9KsFZ4pw7IulX3OLlf6y0guUKxpKu+gRNF3bw9FzgdamCMgyYVTq1pwTMwO ef19JNl9IeYC3Jn2uOu/+X/+owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPaCq8b jQ00VNoIcLAYURaQB+G6MB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjZsdWF35maG9GomqKyR6dNrYI9Tm5hfQyu+zdKem5D9YYEF9uxU2QWsdjoYI 4dL1AmmJyXKaenztc3uaGre1tqbzAGLXBQQNxAmcmQ9r8JbPrPTTDUGd6eWVm+0k s3PMkUa4qVEoitz0KnIceV98n797imqUOSh5+lH0aChQjreRtShylEC5aKB2hVOu U7nYh1iZNLwC+j2VLoUl4qcXykfJStftJw0bvJWfnNG5g4UFlaBJ2tvaVfHAlRNO DbEIdGtuWFRqQojzHxpE0Mw67nh5sFJV1gQhj3+429Fy0eyXTcxWoL2/7x3PnIkm xcz0AVGJtC8+utDnczFlcQkv5Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:46:44 2026 by rpki-client