$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: OMWs/BHA9LbvK73s2iGhzD1Q7+YAXGfB6AAhI7mjj/I= Subject key identifier: 8B:B4:7E:60:A1:5B:93:E4:F5:56:4E:0B:AF:9C:AF:F7:48:DC:5F:88 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0297 Signing time: Thu 23 Jul 2026 02:48:04 +0000 Manifest this update: Thu 23 Jul 2026 02:48:04 +0000 Manifest next update: Thu 30 Jul 2026 02:48:04 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: gOW/EOyCJN9E2gvFfomhLawU3wiiTkZIioL+GZMu2Rg=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Jul 23 02:48:04 2026 GMT Not After : Jul 30 02:48:04 2026 GMT Subject: CN=6a6180e4-8b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:28:44:48:1d:9a:36:3b:92:3a:f7:c8:ea: 3c:32:ca:4d:1f:66:16:ea:7a:0a:82:c7:67:70:f1: b0:2f:10:b9:74:69:db:a3:62:76:5d:dd:6a:02:35: 4e:78:32:f7:5e:4e:ca:70:13:72:66:30:51:ac:ab: 20:38:c2:25:dd:6a:10:b4:71:8d:ca:5b:80:89:19: 8f:38:ce:08:82:f3:c7:71:87:18:fb:d7:78:ad:17: 9e:fd:21:0f:d1:2f:bb:34:ff:b4:2a:3d:14:2b:a0: 3f:76:c8:8a:66:aa:90:b9:d8:95:50:8e:b0:f2:10: c7:40:fa:4d:bb:9d:d8:a3:cc:26:43:b8:cd:54:76: d5:08:c5:fd:aa:b7:b1:3e:a0:14:2e:44:e6:97:0f: a3:7c:62:4c:22:48:1f:f5:80:7b:02:98:4b:e2:08: dc:f6:ef:c8:cf:d3:74:ef:27:fc:40:bb:2f:43:28: d6:ad:7e:c2:ee:9a:cd:4a:b0:99:4f:54:f4:19:f4: 22:d5:75:8a:3f:85:63:94:a0:ec:b0:ab:89:90:5c: 23:f8:5c:95:76:01:7f:dc:54:1d:7e:cf:e5:ed:f6: f1:ab:dd:4a:45:2b:eb:0f:e4:c2:ea:4d:1d:84:a0: 03:a5:cd:05:96:95:52:41:b1:45:bc:ba:e7:55:2e: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B4:7E:60:A1:5B:93:E4:F5:56:4E:0B:AF:9C:AF:F7:48:DC:5F:88 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c2:92:00:b7:f8:76:5b:60:f8:73:f1:b7:1a:32:72:26:36: f4:ea:db:8c:9c:66:ae:93:1f:f8:23:07:88:a1:19:7c:e7:a4: 3f:bc:6d:e6:3e:2b:14:ec:80:8e:5e:f8:91:2c:31:75:bc:08: 41:22:f1:5c:dd:08:f6:33:ce:ae:94:3d:59:6f:3d:7c:0b:7f: d5:4f:54:18:4e:5c:98:ee:01:09:c4:7c:bb:99:49:39:22:91: 8e:da:9e:1e:b2:9c:71:64:ae:70:2f:5b:84:19:43:0e:07:95: 88:43:a8:a7:c3:a4:4b:07:a9:89:b7:ae:5d:08:40:ee:61:d5: fa:68:a2:f4:cb:89:3b:ae:a5:41:78:d5:e2:dd:2d:84:39:5b: f1:af:42:b9:ec:e0:fa:49:2d:5a:79:94:d7:09:6f:85:d6:3f: ee:64:28:c2:aa:3e:27:5d:5e:d8:67:72:5e:13:dc:0e:47:d8: 4a:90:a5:c0:1f:0c:97:07:3b:91:b0:d2:49:3b:80:75:5a:02: 88:eb:3e:05:16:6e:dd:06:74:17:73:a1:6c:0a:17:39:31:ce: 8d:4b:a9:49:3f:b8:c9:91:bd:69:d5:79:81:98:50:0c:51:73: 75:55:e9:61:f8:c0:2f:fb:71:6f:bc:4c:88:6d:ac:57:58:59: 81:d2:1a:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjYwNzIzMDI0ODA0WhcNMjYwNzMwMDI0ODA0WjAYMRYwFAYD VQQDEw02YTYxODBlNC04YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi4oREgdmjY7kjr3yOo8MspNH2YW6noKgsdncPGwLxC5dGnbo2J2Xd1qAjVO eDL3Xk7KcBNyZjBRrKsgOMIl3WoQtHGNyluAiRmPOM4IgvPHcYcY+9d4rRee/SEP 0S+7NP+0Kj0UK6A/dsiKZqqQudiVUI6w8hDHQPpNu53Yo8wmQ7jNVHbVCMX9qrex PqAULkTmlw+jfGJMIkgf9YB7AphL4gjc9u/Iz9N07yf8QLsvQyjWrX7C7prNSrCZ T1T0GfQi1XWKP4VjlKDssKuJkFwj+FyVdgF/3FQdfs/l7fbxq91KRSvrD+TC6k0d hKADpc0FlpVSQbFFvLrnVS5L+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIu0fmCh W5Pk9VZOC6+cr/dI3F+IMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm8KSALf4dltg+HPxtxoyciY29OrbjJxmrpMf+CMHiKEZfOekP7xt5j4rFOyA jl74kSwxdbwIQSLxXN0I9jPOrpQ9WW89fAt/1U9UGE5cmO4BCcR8u5lJOSKRjtqe HrKccWSucC9bhBlDDgeViEOop8OkSwepibeuXQhA7mHV+mii9MuJO66lQXjV4t0t hDlb8a9Cuezg+kktWnmU1wlvhdY/7mQowqo+J11e2GdyXhPcDkfYSpClwB8Mlwc7 kbDSSTuAdVoCiOs+BRZu3QZ0F3OhbAoXOTHOjUupST+4yZG9adV5gZhQDFFzdVXp YfjAL/txb7xMiG2sV1hZgdIaFA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:56:39 2026 by rpki-client