$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft File: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft (raw, json) Hash identifier: 5Rze2rbwLReczx25fwdXgShZWgBXtJZ17RAeGB7cnJk= Subject key identifier: 56:F6:7E:5C:EA:96:0A:A1:D5:18:F9:D4:5C:14:AD:A8:8D:D6:BF:85 Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 0ADC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft Manifest number: 0AC7 Signing time: Wed 22 Jul 2026 19:49:47 +0000 Manifest this update: Wed 22 Jul 2026 19:49:47 +0000 Manifest next update: Wed 29 Jul 2026 19:49:47 +0000 Files and hashes: 1: hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl (hash: YMvIAdDMRHY325pWn6lc50QvUsZIg9C/N+fzO/IDmQ8=) 2: 92A9A67EB40211F09714C855C4F9AE02.roa (hash: MN08xTHQWyAMmrT/Pkdf4mSOvLZ+rB9gXlkcOfJJ9xI=) 3: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (hash: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=) 4: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (hash: AAIxMzs/gvYk9K/xu4n64rt4zSe4EjThnQNO0Ai3Jj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2780 (0xadc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Jul 22 19:49:47 2026 GMT Not After : Jul 29 19:49:47 2026 GMT Subject: CN=6a611edb-b547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:5e:1f:2a:b8:09:15:cd:e6:a4:2f:9d:e7: 16:88:4a:06:46:83:3e:bb:02:fa:f3:5f:ac:a2:c4: 83:43:a9:ce:bc:29:f7:6c:95:47:bf:9f:a6:85:70: 9f:bc:cc:9f:5e:c9:8f:ab:fc:57:c3:8f:d4:3e:7b: ea:1d:0f:4b:8f:a4:8e:59:53:82:7f:4f:2f:43:e8: 5f:7b:19:b7:b3:4a:6f:79:1d:22:70:ca:3b:aa:a8: 7a:35:22:fa:15:13:3d:c1:3a:5f:09:ba:90:8d:61: 19:05:93:69:07:b8:59:d7:23:a3:7b:ea:fe:5a:e5: 1d:19:75:63:bc:3e:b5:ab:81:17:9e:f0:d5:f1:b5: 01:fa:2e:78:86:ae:30:18:18:c9:66:eb:69:29:03: 08:75:98:ee:ef:89:80:1d:b4:4c:2b:04:a8:8c:ad: 2c:f6:a6:3a:d9:b8:17:70:4d:9d:9f:f6:f8:f1:39: 21:b3:46:7f:f3:fb:02:ee:19:7a:c6:db:9a:90:ea: 40:31:7e:2c:e8:10:bb:ae:d5:3c:c0:cf:5f:f0:06: 82:25:2a:47:b2:44:d5:e1:47:99:02:fe:23:48:93: d8:29:59:22:90:13:b7:71:5d:2e:f5:76:16:12:e6: e3:14:2c:25:40:1c:47:83:56:48:bc:45:07:ff:76: 11:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:7E:5C:EA:96:0A:A1:D5:18:F9:D4:5C:14:AD:A8:8D:D6:BF:85 X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:51:f2:8a:68:78:d2:a9:38:5d:d2:1c:0b:be:ee:9a:39:61: 8e:ad:81:4c:d4:a6:3b:1b:fd:2c:d0:4b:ff:74:f9:f0:96:d7: 8d:e4:80:b2:da:d4:05:38:3c:87:7f:e1:e3:9d:57:00:61:4a: 4c:9a:ea:e2:f8:33:05:3c:7e:c7:45:2c:ca:bf:8d:91:3c:1c: e4:65:cf:dd:50:a4:52:6a:70:f6:75:31:60:4e:00:ff:ce:6f: a7:13:26:52:4c:ea:f2:74:21:e5:c9:5a:a6:56:a5:66:27:6f: 57:6c:8c:52:26:f4:a2:f1:02:69:34:28:94:ea:e5:c1:ec:40: b6:76:82:66:c2:dc:82:0a:14:ac:41:a5:3f:62:ef:86:07:4a: 05:4c:26:3f:63:b1:af:81:d2:aa:10:e1:b1:22:06:11:8f:0f: 65:8a:99:23:ee:d7:d2:cb:3b:3a:95:67:2e:23:2e:38:59:89: cb:29:81:e0:5f:71:e0:74:66:76:16:d2:98:3a:08:0a:17:8a: 38:41:0b:26:c8:3e:9d:67:34:89:f5:f2:04:bc:4e:65:2b:0e: 72:1c:13:4e:a6:1e:3c:78:e8:ed:35:83:5b:15:9f:84:01:3f: 32:84:71:5b:f2:21:7e:82:d1:35:a0:83:4d:7d:ff:cb:50:57: 3d:f2:f6:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjYwNzIyMTk0OTQ3WhcNMjYwNzI5MTk0OTQ3WjAYMRYwFAYD VQQDEw02YTYxMWVkYi1iNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooFeHyq4CRXN5qQvnecWiEoGRoM+uwL681+sosSDQ6nOvCn3bJVHv5+mhXCf vMyfXsmPq/xXw4/UPnvqHQ9Lj6SOWVOCf08vQ+hfexm3s0pveR0icMo7qqh6NSL6 FRM9wTpfCbqQjWEZBZNpB7hZ1yOje+r+WuUdGXVjvD61q4EXnvDV8bUB+i54hq4w GBjJZutpKQMIdZju74mAHbRMKwSojK0s9qY62bgXcE2dn/b48Tkhs0Z/8/sC7hl6 xtuakOpAMX4s6BC7rtU8wM9f8AaCJSpHskTV4UeZAv4jSJPYKVkikBO3cV0u9XYW EubjFCwlQBxHg1ZIvEUH/3YR3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb2flzq lgqh1Rj51FwUraiN1r+FMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUJDRC82MUQwQzQ4NjdBM0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNK aTNLWXlaRUhYTXoxRm5tdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVHyimh40qk4XdIcC77umjlhjq2BTNSmOxv9LNBL/3T58JbXjeSAstrUBTg8 h3/h451XAGFKTJrq4vgzBTx+x0Usyr+NkTwc5GXP3VCkUmpw9nUxYE4A/85vpxMm Ukzq8nQh5claplalZidvV2yMUib0ovECaTQolOrlwexAtnaCZsLcggoUrEGlP2Lv hgdKBUwmP2Oxr4HSqhDhsSIGEY8PZYqZI+7X0ss7OpVnLiMuOFmJyymB4F9x4HRm dhbSmDoICheKOEELJsg+nWc0ifXyBLxOZSsOchwTTqYePHjo7TWDWxWfhAE/MoRx W/IhfoLRNaCDTX3/y1BXPfL27g== -----END CERTIFICATE-----Generated at Thu Jul 23 21:56:09 2026 by rpki-client