$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: wV4c74BenMoNhy9/P0/+EsWqRlUjxkpg765lisfq8KA= Subject key identifier: 7F:B2:85:BA:43:0D:5D:30:8D:AF:2D:B9:8E:11:1D:C8:0A:8A:15:9B Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 0138 Signing time: Thu 23 Jul 2026 07:14:12 +0000 Manifest this update: Thu 23 Jul 2026 07:14:12 +0000 Manifest next update: Thu 30 Jul 2026 07:14:12 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: 7gjl8b2lwTCWcAFCWZoVw6vaHmL7PXL3A9feTArE3Nc=) 2: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=) 3: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=) 4: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Jul 23 07:14:12 2026 GMT Not After : Jul 30 07:14:12 2026 GMT Subject: CN=6a61bf44-1be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:ab:40:5b:18:5e:98:c6:32:71:f7:ed:ac: b6:0e:19:84:9f:40:2f:2b:5a:8c:8d:4a:f3:1e:59: a1:e0:1e:21:9a:ed:15:1b:fe:e9:28:4a:8a:09:39: 75:bb:21:c6:43:61:d1:67:7c:9b:c3:c6:fa:b9:19: 35:1f:ba:6f:bc:85:f6:95:9e:d0:58:86:85:a8:0a: 93:a1:a4:ee:4b:fe:8d:a6:59:2a:ad:39:19:b6:bd: 58:f1:c9:c2:1a:a5:3a:77:29:05:5a:d8:84:ac:14: 67:72:13:c3:77:07:64:2b:03:7c:5e:07:97:9a:9f: 3d:4e:a5:06:c5:37:dd:af:aa:7f:cb:5c:e6:a7:0c: c8:f6:3c:df:c6:e8:c3:3a:d7:0d:d2:a9:b8:dc:38: ea:a9:1d:7f:9d:aa:df:a2:d8:58:62:be:8d:af:4c: 93:bd:97:5f:12:36:c8:46:42:ec:d3:fd:c0:23:dd: 62:70:dc:06:c3:dc:84:28:35:d7:42:e4:2a:4c:22: 16:a4:86:e1:0c:ee:d1:74:cc:5c:a9:93:26:bd:f2: c1:38:8b:32:50:39:21:dc:3a:6e:c1:01:5a:08:28: 97:f1:a3:9d:2e:08:31:f7:35:5d:0e:cd:ca:63:c9: 67:19:3c:df:da:24:d2:90:83:48:cf:74:fe:b0:ae: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:85:BA:43:0D:5D:30:8D:AF:2D:B9:8E:11:1D:C8:0A:8A:15:9B X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:b6:56:e8:fe:41:82:49:1d:24:00:ae:3f:a7:6f:18:d6: 10:f8:2d:47:90:0d:30:50:b1:53:e4:c8:9a:39:01:b0:f3:72: 70:bc:ce:33:88:76:f7:d0:79:89:e9:e3:1f:8d:c5:42:59:09: e1:1c:58:3d:54:51:c5:45:49:62:58:8b:43:83:9d:6f:6f:53: 5c:66:e4:cb:6f:75:cc:91:64:24:bf:37:ed:58:71:d0:10:5c: 42:70:64:1e:df:3b:df:7b:64:b0:a8:b7:be:68:3e:c7:3f:12: f0:84:db:b0:ac:06:3c:22:93:38:5a:d3:15:5d:18:83:93:ec: dd:0b:7b:4c:32:9b:bb:f6:a8:2c:36:bb:ff:f0:33:6f:6a:61: 0c:6a:34:ee:85:87:c3:14:00:74:e4:0d:87:c3:d6:8b:2b:19: 7d:70:c5:39:a2:53:cd:6f:39:62:88:93:47:19:cf:ea:5c:03: e2:67:a1:4a:c4:35:f9:3c:ad:a6:3f:7b:fc:35:4c:37:9f:23: c2:f6:bb:72:33:ee:01:1d:3a:5f:80:fd:78:68:57:d2:08:61: c8:c0:88:52:01:2f:b8:bb:2d:54:34:cf:b7:1d:04:4a:9c:ee: 08:43:bc:cf:13:28:2f:bd:b4:3e:c1:a5:3f:96:92:7d:79:ea: 37:e8:cf:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjYwNzIzMDcxNDEyWhcNMjYwNzMwMDcxNDEyWjAYMRYwFAYD VQQDEw02YTYxYmY0NC0xYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CyrQFsYXpjGMnH37ay2DhmEn0AvK1qMjUrzHlmh4B4hmu0VG/7pKEqKCTl1 uyHGQ2HRZ3ybw8b6uRk1H7pvvIX2lZ7QWIaFqAqToaTuS/6NplkqrTkZtr1Y8cnC GqU6dykFWtiErBRnchPDdwdkKwN8XgeXmp89TqUGxTfdr6p/y1zmpwzI9jzfxujD OtcN0qm43DjqqR1/narfothYYr6Nr0yTvZdfEjbIRkLs0/3AI91icNwGw9yEKDXX QuQqTCIWpIbhDO7RdMxcqZMmvfLBOIsyUDkh3DpuwQFaCCiX8aOdLggx9zVdDs3K Y8lnGTzf2iTSkINIz3T+sK5Z7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+yhbpD DV0wja8tuY4RHcgKihWbMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArg+2Vuj+QYJJHSQArj+nbxjWEPgtR5ANMFCxU+TImjkBsPNycLzOM4h299B5 ienjH43FQlkJ4RxYPVRRxUVJYliLQ4Odb29TXGbky291zJFkJL837Vhx0BBcQnBk Ht8733tksKi3vmg+xz8S8ITbsKwGPCKTOFrTFV0Yg5Ps3Qt7TDKbu/aoLDa7//Az b2phDGo07oWHwxQAdOQNh8PWiysZfXDFOaJTzW85YoiTRxnP6lwD4mehSsQ1+Tyt pj97/DVMN58jwva7cjPuAR06X4D9eGhX0ghhyMCIUgEvuLstVDTPtx0ESpzuCEO8 zxMoL720PsGlP5aSfXnqN+jPUg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:08:28 2026 by rpki-client