$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: QY+8DJmKC5FsjXGctpUfwBMz47hCP4qKEH5XUloHxyw= Subject key identifier: C9:CC:CD:72:A5:8E:3E:22:5C:3B:19:C5:1F:E3:4A:0B:5E:79:09:99 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E74 Signing time: Fri 24 Jul 2026 16:11:20 +0000 Manifest this update: Fri 24 Jul 2026 16:11:20 +0000 Manifest next update: Fri 31 Jul 2026 16:11:20 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: TKZTQkOZdNQqc4+38zYHboeAsjl4CLj1QFsjLfxndaY=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: ct9I/aMYPGYqo53jKTnyxK/j3JeT25nkuXtpX13/eJM=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7823 (0x1e8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Jul 24 16:11:20 2026 GMT Not After : Jul 31 16:11:20 2026 GMT Subject: CN=6a638ea8-49f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:0f:31:a4:0c:62:c3:e4:c8:e6:40:94:d1: 6a:0d:e7:e3:66:0c:94:70:c6:3f:98:01:a8:e5:10: 3c:68:01:4a:4e:51:04:bd:43:dc:25:d5:14:c4:7b: af:10:48:fa:94:19:9d:9c:22:86:7f:04:5f:fc:0c: b1:46:26:65:73:7a:91:05:f9:f1:57:c2:5b:a2:ff: 94:d5:21:35:75:73:6a:f6:32:c3:ad:a1:0a:f3:e8: fd:18:08:56:b5:ce:8e:0a:17:6f:3d:12:b8:a3:71: 84:ac:4a:da:06:b9:52:98:9d:7e:fe:4f:b5:a6:ff: 51:1e:e7:dd:e6:41:05:cf:a8:96:1d:7f:30:99:3f: 6f:73:06:39:e2:1d:1b:c8:11:fa:f1:dd:4b:85:94: f4:5b:40:db:69:70:c3:de:39:73:a3:ec:d8:c4:63: ec:f4:d1:e4:28:81:8c:c1:04:b9:79:ce:cc:c0:a0: 97:ed:d9:03:43:65:62:16:6c:1c:96:86:7f:d5:f9: 98:5c:b5:91:43:3d:e1:ad:b2:e9:ca:9b:1f:36:1c: 4d:e2:97:33:8e:0d:66:3b:12:0d:54:0e:dc:00:fb: 47:85:77:09:6c:aa:1c:31:03:7d:26:04:a8:ea:75: af:7b:4d:f2:79:56:a5:56:76:5d:ea:e0:85:03:83: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CC:CD:72:A5:8E:3E:22:5C:3B:19:C5:1F:E3:4A:0B:5E:79:09:99 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7f:0d:bb:88:2f:f0:21:24:1e:05:79:4e:0e:7f:56:7a:53: aa:7a:42:3c:1f:3c:3f:3b:07:13:37:38:f7:ee:09:4c:6d:c9: 4a:41:06:16:2c:57:70:aa:27:44:80:2d:ed:6c:16:5a:a4:ab: b8:38:36:83:3e:39:cf:cb:2c:ac:08:be:b4:bd:2b:68:74:8d: 6c:ee:98:9a:79:e1:9f:8b:31:3a:31:2d:af:94:4d:62:31:01: 7b:fa:1e:16:34:75:e9:20:06:0b:6a:9b:e9:9c:a9:f2:1e:51: 27:38:78:e6:61:5f:f4:55:90:9e:19:9c:f1:a1:a0:40:39:d0: f1:5d:32:e1:d7:63:98:9e:c5:c9:a4:29:67:fe:82:58:2d:e0: 44:ee:ce:df:2b:69:76:f5:05:99:77:36:3d:22:e9:44:75:fb: 67:c9:ad:80:0a:99:71:1d:42:a8:60:89:c8:f8:7f:97:c0:c1: ee:6b:14:dd:80:58:24:be:7f:9b:ee:7a:6a:6e:88:a9:86:36: 3b:a6:84:d7:41:ee:ac:75:f1:af:f0:67:7b:26:90:92:42:58: 34:91:69:9f:57:a7:91:51:bb:f0:d0:27:b1:ad:6f:2a:09:42: b0:cb:7b:f1:b9:76:43:c2:2c:54:25:36:b2:65:b4:a2:2d:e6: f5:f5:61:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjYwNzI0MTYxMTIwWhcNMjYwNzMxMTYxMTIwWjAYMRYwFAYD VQQDEw02YTYzOGVhOC00OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubQPMaQMYsPkyOZAlNFqDefjZgyUcMY/mAGo5RA8aAFKTlEEvUPcJdUUxHuv EEj6lBmdnCKGfwRf/AyxRiZlc3qRBfnxV8Jbov+U1SE1dXNq9jLDraEK8+j9GAhW tc6OChdvPRK4o3GErEraBrlSmJ1+/k+1pv9RHufd5kEFz6iWHX8wmT9vcwY54h0b yBH68d1LhZT0W0DbaXDD3jlzo+zYxGPs9NHkKIGMwQS5ec7MwKCX7dkDQ2ViFmwc loZ/1fmYXLWRQz3hrbLpypsfNhxN4pczjg1mOxINVA7cAPtHhXcJbKocMQN9JgSo 6nWve03yeValVnZd6uCFA4OhkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnMzXKl jj4iXDsZxR/jSgteeQmZMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHn8Nu4gv8CEkHgV5Tg5/VnpTqnpCPB88PzsHEzc49+4JTG3JSkEGFixXcKon RIAt7WwWWqSruDg2gz45z8ssrAi+tL0raHSNbO6Ymnnhn4sxOjEtr5RNYjEBe/oe FjR16SAGC2qb6Zyp8h5RJzh45mFf9FWQnhmc8aGgQDnQ8V0y4ddjmJ7FyaQpZ/6C WC3gRO7O3ytpdvUFmXc2PSLpRHX7Z8mtgAqZcR1CqGCJyPh/l8DB7msU3YBYJL5/ m+56am6IqYY2O6aE10HurHXxr/BneyaQkkJYNJFpn1enkVG78NAnsa1vKglCsMt7 8bl2Q8IsVCU2smW0oi3m9fVh3g== -----END CERTIFICATE-----Generated at Sat Jul 25 06:38:37 2026 by rpki-client