$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: k6jsuP9PbHB2t6748GhvDin10IRw6Cwd8vzSO+4ItUs= Subject key identifier: 6E:4D:77:63:8D:E3:97:16:4A:C0:A3:91:D9:66:26:27:2B:7A:B2:5D Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 08A0 Signing time: Wed 22 Jul 2026 21:05:31 +0000 Manifest this update: Wed 22 Jul 2026 21:05:30 +0000 Manifest next update: Wed 29 Jul 2026 21:05:30 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: PjU51wAfd9fgOElfI8bmNOoLfvKe0d6wx8Go2PlfKrQ=) 2: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=) 3: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Jul 22 21:05:30 2026 GMT Not After : Jul 29 21:05:30 2026 GMT Subject: CN=6a61309b-d9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:53:1f:73:2a:48:2e:93:f0:b1:cd:8c:22: 84:58:90:0c:d4:f9:77:8b:1b:d6:1f:45:e6:a4:06: 60:74:e8:cc:71:00:e6:77:c8:0a:d7:43:11:63:4e: d8:b3:cc:59:ad:19:d4:12:b3:d1:a5:d6:27:df:a1: 25:8d:25:68:4d:18:c4:96:ae:7d:dc:61:3d:bd:c2: 3c:9c:40:12:f9:f4:72:f5:3f:0c:ce:65:5f:47:6a: 34:22:ed:9e:70:db:81:b4:a6:02:54:6c:69:22:88: 44:c9:cd:47:0b:21:90:fd:a3:92:91:1c:ce:31:06: dd:bc:de:c0:ce:19:11:19:81:d2:de:de:4a:c2:e6: 32:46:d9:09:7b:0f:a9:f7:b9:d2:a0:bd:f6:31:c9: 70:2c:a9:9f:8a:a8:0a:03:5b:c3:0b:fb:24:af:e9: 43:0e:60:7e:7b:fe:0d:fa:00:0c:dd:93:03:4b:e0: 01:cf:8c:e5:a8:ef:59:6b:3b:c7:5c:46:09:8a:06: df:46:4d:81:54:fa:cd:fa:a1:7a:de:5b:e3:be:34: 2a:a8:9d:2a:01:ad:fe:63:13:0a:94:cf:2d:7c:3d: af:d5:04:8f:cf:b6:a9:5d:9a:59:69:51:75:d6:1d: 2e:df:b9:06:6c:89:26:95:40:b1:04:09:7d:ec:f3: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:77:63:8D:E3:97:16:4A:C0:A3:91:D9:66:26:27:2B:7A:B2:5D X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5e:2a:58:90:96:b3:ed:27:0f:bd:54:ec:56:65:7e:ec:e1: c0:98:c6:02:69:33:f7:e9:6d:a9:ba:d3:b1:f8:af:87:f0:52: a7:ab:29:d0:37:6c:37:24:ab:4e:f6:6e:f6:20:9f:df:27:da: 9b:d8:f7:4b:30:b6:f7:fa:56:28:d7:d5:8a:88:b6:d6:93:e5: b3:7c:a7:93:d4:80:25:a7:26:e8:b7:64:08:7f:a6:00:9e:b1: 9a:c0:11:68:ff:f1:20:29:e7:0d:8f:3a:bb:4a:17:e8:9a:56: c3:17:35:0f:f9:ba:41:16:8f:b3:23:e4:0c:a4:9b:c6:fe:40: 59:d2:94:31:ad:f3:ef:04:00:45:39:64:34:de:dd:ad:15:0e: 29:0a:cb:1d:69:a1:bb:c7:69:d2:83:21:da:96:73:ed:b6:d7: 5a:a9:88:3d:c8:e9:e2:e7:82:d0:b2:9b:98:05:0e:53:9a:38: 71:4b:8f:0d:ff:40:7a:82:be:8b:c0:57:a7:af:03:bc:f3:25: 70:48:bd:cc:85:60:cf:dc:ab:56:b1:51:73:d3:e0:61:29:3c: ff:ad:0b:fa:65:c4:c0:9f:6b:76:73:55:ee:04:8d:54:0b:28: 60:e6:fd:63:7b:45:5f:37:5e:e5:b5:a2:3d:7a:53:07:2c:dd: d3:24:f0:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjYwNzIyMjEwNTMwWhcNMjYwNzI5MjEwNTMwWjAYMRYwFAYD VQQDEw02YTYxMzA5Yi1kOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0tTH3MqSC6T8LHNjCKEWJAM1Pl3ixvWH0XmpAZgdOjMcQDmd8gK10MRY07Y s8xZrRnUErPRpdYn36EljSVoTRjElq593GE9vcI8nEAS+fRy9T8MzmVfR2o0Iu2e cNuBtKYCVGxpIohEyc1HCyGQ/aOSkRzOMQbdvN7AzhkRGYHS3t5KwuYyRtkJew+p 97nSoL32MclwLKmfiqgKA1vDC/skr+lDDmB+e/4N+gAM3ZMDS+ABz4zlqO9ZazvH XEYJigbfRk2BVPrN+qF63lvjvjQqqJ0qAa3+YxMKlM8tfD2v1QSPz7apXZpZaVF1 1h0u37kGbIkmlUCxBAl97PPaNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5Nd2ON 45cWSsCjkdlmJicrerJdMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEF4qWJCWs+0nD71U7FZlfuzhwJjGAmkz9+ltqbrTsfivh/BSp6sp0DdsNySr TvZu9iCf3yfam9j3SzC29/pWKNfVioi21pPls3ynk9SAJacm6LdkCH+mAJ6xmsAR aP/xICnnDY86u0oX6JpWwxc1D/m6QRaPsyPkDKSbxv5AWdKUMa3z7wQARTlkNN7d rRUOKQrLHWmhu8dp0oMh2pZz7bbXWqmIPcjp4ueC0LKbmAUOU5o4cUuPDf9AeoK+ i8BXp68DvPMlcEi9zIVgz9yrVrFRc9PgYSk8/60L+mXEwJ9rdnNV7gSNVAsoYOb9 Y3tFXzde5bWiPXpTByzd0yTwUA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:32:44 2026 by rpki-client