$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: 1SruN0ABXKqW7zuJJ9ZiOX9lhgU3pvoihwmeBBFvLxQ= Subject key identifier: 4D:37:CA:A6:DA:55:73:A1:5D:07:DB:16:04:94:34:3D:1D:41:10:69 Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 29AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 2931 Signing time: Fri 24 Jul 2026 15:41:49 +0000 Manifest this update: Fri 24 Jul 2026 15:41:49 +0000 Manifest next update: Fri 31 Jul 2026 15:41:49 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: YoxZzOC2Jm1VJYS9RdlYGMCRuCP6b3HCDytqIZVj/7s=) 2: 57D5BBF870F211F086293675C4F9AE02.roa (hash: W6i0eqZoG4ysmbb+ZjnKI2TLFcVmIR9Zuorw/l9OH6g=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: 9cZ6L/GPvQKK4pJ4l7g4uN4OgEx5HSReU5gKVwtDiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10671 (0x29af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Jul 24 15:41:49 2026 GMT Not After : Jul 31 15:41:49 2026 GMT Subject: CN=6a6387bd-2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:de:79:f3:d9:46:7a:51:d4:95:a4:79:97: 74:8b:d3:a6:8a:dc:20:af:74:e1:11:37:ee:0a:12: a7:74:05:6e:f7:8b:9e:0f:de:28:ef:28:fa:a3:26: 62:9e:c8:74:33:c6:c8:23:41:2e:df:9d:d6:f5:11: 19:8b:18:b4:fc:aa:6a:f2:d6:57:05:e1:51:10:42: 09:0b:95:5a:9c:90:e8:7f:43:0a:be:f1:77:21:3f: 39:32:04:5d:79:22:0e:17:d3:22:75:a8:e2:39:4f: db:39:26:4c:6f:c1:5e:80:79:0b:44:77:79:c6:41: 21:7f:e6:e5:c4:8c:b8:62:a2:52:2a:a4:f5:80:06: 4c:eb:5e:31:6c:b8:19:b0:06:cf:0f:b0:bc:3e:82: 61:ee:1e:2c:5e:e8:c4:bf:48:09:3a:80:3c:45:7d: ad:80:a0:11:d6:dd:1d:05:7d:80:fb:c0:a0:17:9a: a3:99:1b:60:26:21:72:fd:86:9f:f0:a2:86:83:61: 33:d8:e6:0b:b4:1f:ef:d3:e7:01:65:dd:f9:15:e8: 0b:fc:08:89:43:7c:76:53:12:aa:ad:5b:be:96:c0: 6b:27:ae:d5:57:89:3e:fd:f5:eb:9b:4d:9b:d8:d1: e0:0b:f9:c0:45:8f:4d:b6:b0:86:19:fb:5b:5b:ad: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:CA:A6:DA:55:73:A1:5D:07:DB:16:04:94:34:3D:1D:41:10:69 X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b2:d5:a3:59:0f:c0:e3:23:a8:c6:34:cc:6d:35:71:25:e5: 35:cd:dd:c9:16:ad:2b:83:0c:9f:28:7b:0e:77:38:83:19:2a: c9:7e:8e:ce:cc:4f:34:ce:9e:e6:da:1e:3f:07:63:01:a2:2b: b1:4a:25:f1:27:6f:c7:71:3c:ee:bb:c1:6c:e8:db:b4:5d:5e: a6:53:c4:a4:6c:ec:38:76:44:c9:f5:1b:d6:27:5a:e9:d8:cb: 8a:32:70:f0:2b:8b:6d:ef:2b:a0:3a:5c:ec:2f:3d:2f:87:2d: e6:d0:3c:81:64:27:94:4e:a2:88:b5:02:51:d4:89:3d:08:52: 09:85:8f:6e:30:14:6e:12:78:d5:83:9b:94:89:0e:fc:6c:d9: f2:35:b2:19:65:a2:d7:1f:b4:6c:b9:98:7e:02:dd:57:7c:8d: c0:16:45:e4:4e:57:96:fb:c0:39:9f:22:bd:ca:ee:2c:f1:e6: 79:43:43:7f:76:a4:f3:35:24:bf:fa:79:ef:a0:fd:e2:f4:4f: ea:8e:a6:fb:f5:ce:1b:4f:7c:97:16:a1:c0:76:9c:f6:b0:31: dd:5e:f6:81:df:06:b8:81:78:37:bb:cb:03:16:e8:34:03:c5: c5:88:66:55:44:1e:b7:ba:45:f1:d1:ba:96:ad:a9:d2:83:a9: e1:da:41:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwNzI0MTU0MTQ5WhcNMjYwNzMxMTU0MTQ5WjAYMRYwFAYD VQQDEw02YTYzODdiZC0yNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EHeefPZRnpR1JWkeZd0i9Omitwgr3ThETfuChKndAVu94ueD94o7yj6oyZi nsh0M8bII0Eu353W9REZixi0/Kpq8tZXBeFREEIJC5VanJDof0MKvvF3IT85MgRd eSIOF9MidajiOU/bOSZMb8FegHkLRHd5xkEhf+blxIy4YqJSKqT1gAZM614xbLgZ sAbPD7C8PoJh7h4sXujEv0gJOoA8RX2tgKAR1t0dBX2A+8CgF5qjmRtgJiFy/Yaf 8KKGg2Ez2OYLtB/v0+cBZd35FegL/AiJQ3x2UxKqrVu+lsBrJ67VV4k+/fXrm02b 2NHgC/nARY9NtrCGGftbW63wAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE03yqba VXOhXQfbFgSUND0dQRBpMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATbLVo1kPwOMjqMY0zG01cSXlNc3dyRatK4MMnyh7Dnc4gxkqyX6OzsxPNM6e 5toePwdjAaIrsUol8Sdvx3E87rvBbOjbtF1eplPEpGzsOHZEyfUb1ida6djLijJw 8CuLbe8roDpc7C89L4ct5tA8gWQnlE6iiLUCUdSJPQhSCYWPbjAUbhJ41YOblIkO /GzZ8jWyGWWi1x+0bLmYfgLdV3yNwBZF5E5XlvvAOZ8ivcruLPHmeUNDf3ak8zUk v/p576D94vRP6o6m+/XOG098lxahwHac9rAx3V72gd8GuIF4N7vLAxboNAPFxYhm VUQet7pF8dG6lq2p0oOp4dpBdQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:49:18 2026 by rpki-client