$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: ZbGCc5AbN58U0+R01BOCsHipzJFWu/JVGNws54dN0Tw= Subject key identifier: 2F:EA:4F:B9:72:D9:08:06:D8:68:61:03:44:43:57:EA:98:86:29:74 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 01E1 Signing time: Thu 23 Jul 2026 04:53:09 +0000 Manifest this update: Thu 23 Jul 2026 04:53:09 +0000 Manifest next update: Thu 30 Jul 2026 04:53:09 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: MkpRRuMuSol2c6w5V5AUNcbKI0dzjzyCKxJi/RskzFk=) 2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=) 3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=) 4: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: 2Q58E+BRBfRGVnNM+UkGg3+ulMIPYdxNak63FCPSz3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Jul 23 04:53:09 2026 GMT Not After : Jul 30 04:53:09 2026 GMT Subject: CN=6a619e35-22d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:fb:f0:2c:fe:f4:85:b7:f3:7e:ae:c4:d7: 4d:70:01:4b:6d:1c:10:93:01:99:c0:81:32:a1:a4: 3b:a0:89:45:e4:e0:e5:f7:13:13:de:58:2d:61:b2: 95:05:03:df:ce:d0:b0:d4:d3:e5:97:1c:ed:46:3e: 07:33:e2:35:7b:d1:ab:2f:d2:c9:fb:40:8d:21:f4: 17:be:f3:3c:9a:b2:e4:a5:29:7c:61:49:6f:49:7e: b8:85:a3:3e:07:c4:99:3a:85:d4:78:e0:fd:9f:64: cc:a0:3b:91:d0:65:4b:d0:18:a4:ba:f9:ac:f9:19: ca:c6:4f:3c:97:79:13:d8:aa:02:6d:eb:39:20:7e: 4b:d4:67:3d:52:93:a6:08:a4:e9:1c:ef:c1:9a:ac: f3:0c:52:22:68:cd:bf:5b:3c:de:31:16:3e:4e:e9: 9f:df:57:0f:4c:0f:b4:ee:0a:3d:6c:af:f6:fe:e4: f6:24:06:05:df:44:10:69:2a:ae:a3:38:ce:42:bd: 25:21:65:cb:31:da:58:e6:9d:78:2d:c6:63:ba:2c: 8d:4e:85:7f:22:78:64:5b:be:0d:53:5a:22:14:de: cd:dd:eb:ff:37:37:ac:0e:b8:72:fe:ca:19:56:4b: 12:27:bd:20:11:13:25:da:3f:e0:ef:5e:c1:c1:77: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EA:4F:B9:72:D9:08:06:D8:68:61:03:44:43:57:EA:98:86:29:74 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:01:dd:0b:7c:3d:d0:87:50:fe:d2:37:0f:08:5c:12:94:5d: fe:8e:ea:ed:27:a7:73:9f:6b:55:3a:b1:41:db:41:d3:d7:0c: 05:ea:27:f1:b9:1c:d6:72:70:3f:ff:e3:44:05:bd:20:48:55: f3:ca:1a:cf:e6:07:25:78:88:c7:70:1e:43:82:ed:ff:0c:d4: e1:13:ee:f5:61:25:b8:fc:e7:ec:3e:00:1a:d0:f4:63:49:1d: 92:12:66:ff:a0:95:0f:51:05:ea:50:11:51:d5:43:6f:cc:d7: da:86:55:ce:7a:4f:44:96:73:f3:88:67:e5:02:55:49:70:d4: bf:78:b2:6b:16:1e:58:d1:2b:b5:78:ab:78:74:c7:23:cb:3d: 52:4c:a6:fa:a5:79:08:05:67:e7:6f:df:0b:e2:37:8f:80:44: 0d:af:0d:ee:4d:e7:27:ce:a1:40:49:9c:27:8d:b1:a3:c4:fe: b1:98:0c:dc:d0:7b:44:eb:fd:69:d6:70:05:8a:d8:84:e6:78: 66:38:ac:36:f4:24:46:9e:20:54:44:c8:af:8a:85:49:23:95: 08:b3:4a:e2:98:2f:3d:80:20:0d:79:d6:62:18:da:ca:49:a7: 94:14:93:41:88:64:35:bf:56:5e:e3:7f:5e:29:92:41:5f:2e: e3:3b:dd:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwNzIzMDQ1MzA5WhcNMjYwNzMwMDQ1MzA5WjAYMRYwFAYD VQQDEw02YTYxOWUzNS0yMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjkT78Cz+9IW3836uxNdNcAFLbRwQkwGZwIEyoaQ7oIlF5ODl9xMT3lgtYbKV BQPfztCw1NPllxztRj4HM+I1e9GrL9LJ+0CNIfQXvvM8mrLkpSl8YUlvSX64haM+ B8SZOoXUeOD9n2TMoDuR0GVL0Bikuvms+RnKxk88l3kT2KoCbes5IH5L1Gc9UpOm CKTpHO/BmqzzDFIiaM2/WzzeMRY+Tumf31cPTA+07go9bK/2/uT2JAYF30QQaSqu ozjOQr0lIWXLMdpY5p14LcZjuiyNToV/InhkW74NU1oiFN7N3ev/NzesDrhy/soZ VksSJ70gERMl2j/g717BwXe/DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/qT7ly 2QgG2GhhA0RDV+qYhil0MB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGQHdC3w90IdQ/tI3DwhcEpRd/o7q7Senc59rVTqxQdtB09cMBeon8bkc1nJw P//jRAW9IEhV88oaz+YHJXiIx3AeQ4Lt/wzU4RPu9WEluPzn7D4AGtD0Y0kdkhJm /6CVD1EF6lARUdVDb8zX2oZVznpPRJZz84hn5QJVSXDUv3iyaxYeWNErtXireHTH I8s9Ukym+qV5CAVn52/fC+I3j4BEDa8N7k3nJ86hQEmcJ42xo8T+sZgM3NB7ROv9 adZwBYrYhOZ4ZjisNvQkRp4gVETIr4qFSSOVCLNK4pgvPYAgDXnWYhjaykmnlBST QYhkNb9WXuN/XimSQV8u4zvdDA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:33 2026 by rpki-client