$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: fB9iWMygp2XaJK68DiI8Pl1OXvGKegWPEZNPlMUcabg= Subject key identifier: C5:66:7C:C1:D9:50:53:27:E3:45:15:13:E2:16:1C:6D:C7:42:43:38 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 025A Signing time: Thu 23 Jul 2026 03:28:34 +0000 Manifest this update: Thu 23 Jul 2026 03:28:34 +0000 Manifest next update: Thu 30 Jul 2026 03:28:34 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: X/v6KoBIW9Wm0nXj6Yv6kbxLsZ8Zmln3H1h16hS0HlI=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 2qm8xc9Dh6l4WZzdxSvQg3OKbuj7hzzJ5qxge8M4c/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jul 23 03:28:34 2026 GMT Not After : Jul 30 03:28:34 2026 GMT Subject: CN=6a618a62-266f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:5b:9f:17:23:1b:68:12:73:06:88:87:b8: ff:c4:a1:2e:80:0a:bc:56:59:fc:00:23:4e:62:88: 72:f5:0c:4b:10:95:29:77:65:7a:1d:7a:e6:eb:13: f7:19:eb:6c:45:bb:5f:28:32:56:37:49:a4:e7:ea: 7a:50:8e:07:b8:c0:51:07:ee:19:c5:4c:b0:3c:54: c1:12:09:57:41:72:ee:93:6d:69:6a:49:d3:97:f2: f9:29:cd:3f:c1:af:c9:82:ce:f6:e4:d8:0e:a4:48: 8d:1a:96:40:52:ad:3e:9b:b9:8e:6e:68:ca:8b:4b: 04:eb:51:fa:50:63:36:76:66:8d:ec:2a:55:2b:6f: 08:de:ea:8b:da:2b:0d:4a:d8:94:ec:9a:9c:2e:b8: af:dc:11:f6:23:f6:c6:f1:47:7c:7b:da:60:ab:62: 13:c1:34:94:fa:a3:94:73:67:16:e1:79:7e:d0:87: 78:86:ab:f3:c3:65:98:50:96:ea:b0:5c:d9:00:1a: 51:93:32:25:9d:7e:80:2e:b8:a8:c1:c1:61:28:03: 76:83:b6:a2:ad:8e:29:cc:59:0c:8d:85:39:7a:56: a8:fe:f5:03:c8:56:5e:ad:53:f7:a8:f3:0d:3a:4a: db:91:bd:16:9c:4c:29:be:89:6d:41:a8:56:93:0f: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:66:7C:C1:D9:50:53:27:E3:45:15:13:E2:16:1C:6D:C7:42:43:38 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:16:e2:5a:71:0b:24:2f:b3:ce:39:2e:0f:9d:65:6e:7e: b2:c1:c2:49:3c:64:30:f3:bd:27:e8:f9:b1:d6:3c:d2:a6:7e: 6f:17:7b:81:60:05:f9:9b:90:12:b3:94:12:32:9f:ec:13:c0: 58:3b:d3:44:51:47:31:4e:7e:dc:79:52:33:b0:c8:15:39:08: 47:24:37:9a:cd:9f:ce:ec:7c:77:7d:33:83:a8:dc:03:a3:b1: 06:3a:d2:34:a2:b3:3f:7d:e9:dc:2f:ac:08:8f:dc:41:5b:4e: df:46:4b:c6:61:fe:f0:b5:51:ac:22:20:ee:6a:d1:46:16:1f: 54:77:79:1b:70:1b:76:08:9c:c9:3c:d2:9d:1b:e4:2d:6d:50: b7:3f:00:2d:eb:f3:42:35:a4:6e:48:1b:8d:29:20:18:0c:a4: e5:99:9e:b9:2f:c6:49:52:6f:cd:b7:3e:bb:7b:f7:bc:64:6a: dd:e0:c2:c2:f5:f2:d2:b6:68:07:a9:1a:43:26:c6:10:68:21: 86:68:38:3f:23:8e:64:13:bc:e9:6f:a4:3d:d3:a3:e4:dc:50: b7:b7:2e:85:d8:70:dd:e4:bb:09:eb:9a:21:ec:c8:b2:8e:1e: e0:d1:64:cf:23:3e:bb:02:2b:36:99:e2:b7:de:3c:f0:44:ac: 8d:a0:40:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwNzIzMDMyODM0WhcNMjYwNzMwMDMyODM0WjAYMRYwFAYD VQQDEw02YTYxOGE2Mi0yNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCtbnxcjG2gScwaIh7j/xKEugAq8Vln8ACNOYohy9QxLEJUpd2V6HXrm6xP3 GetsRbtfKDJWN0mk5+p6UI4HuMBRB+4ZxUywPFTBEglXQXLuk21paknTl/L5Kc0/ wa/Jgs725NgOpEiNGpZAUq0+m7mObmjKi0sE61H6UGM2dmaN7CpVK28I3uqL2isN StiU7JqcLriv3BH2I/bG8Ud8e9pgq2ITwTSU+qOUc2cW4Xl+0Id4hqvzw2WYUJbq sFzZABpRkzIlnX6ALriowcFhKAN2g7airY4pzFkMjYU5elao/vUDyFZerVP3qPMN Okrbkb0WnEwpvoltQahWkw8oyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVmfMHZ UFMn40UVE+IWHG3HQkM4MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR7kW4lpxCyQvs845Lg+dZW5+ssHCSTxkMPO9J+j5sdY80qZ+bxd7gWAF+ZuQ ErOUEjKf7BPAWDvTRFFHMU5+3HlSM7DIFTkIRyQ3ms2fzux8d30zg6jcA6OxBjrS NKKzP33p3C+sCI/cQVtO30ZLxmH+8LVRrCIg7mrRRhYfVHd5G3AbdgicyTzSnRvk LW1Qtz8ALevzQjWkbkgbjSkgGAyk5ZmeuS/GSVJvzbc+u3v3vGRq3eDCwvXy0rZo B6kaQybGEGghhmg4PyOOZBO86W+kPdOj5NxQt7cuhdhw3eS7CeuaIezIso4e4NFk zyM+uwIrNpnit9488ESsjaBAcA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:01:45 2026 by rpki-client