$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json) Hash identifier: r/CeQ9ooX3fKo+ggA389uhZCYMecB4m1ISQiYB4duNM= Subject key identifier: 07:3F:00:E6:A0:93:7A:36:67:F4:4C:87:28:A9:E7:8B:C2:A5:38:2F Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft Manifest number: 2B Signing time: Thu 23 Jul 2026 10:48:15 +0000 Manifest this update: Thu 23 Jul 2026 10:48:15 +0000 Manifest next update: Thu 30 Jul 2026 10:48:15 +0000 Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: cTCe3Zt7XbBK4EyqyGTk+ZtVl642rOfQZB7hFYQCKRw=) 2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: Jul 23 10:48:15 2026 GMT Not After : Jul 30 10:48:15 2026 GMT Subject: CN=6a61f16f-8d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:e9:47:38:88:11:47:b7:e6:60:9e:eb:4c: 91:c5:c6:b3:14:db:18:84:70:f6:04:a8:b3:5c:0d: b1:1f:8b:d3:64:30:f0:b0:26:cb:13:ac:ee:86:5a: eb:43:e8:09:bc:e4:d8:4f:e6:91:53:14:62:1f:67: 79:a7:1a:56:9d:0d:8a:7f:f1:c2:f2:16:a0:b5:6a: ee:d3:0e:a5:22:38:54:74:08:fd:b9:67:53:63:1a: b8:cc:ed:99:57:61:1d:26:14:a7:d4:77:df:2c:0f: 7b:4b:d0:4a:6d:9a:36:8c:be:7b:14:50:14:89:a3: a4:77:eb:c7:ea:d0:4f:01:f0:2a:61:d0:c3:f1:f6: 2c:44:9e:ff:54:b2:54:2d:11:00:92:41:c1:7f:bd: e7:76:f5:94:7c:a8:af:b7:d8:bc:e3:9c:20:d8:fb: e3:82:13:0c:52:26:e3:0f:2d:8d:ad:ca:37:fa:8b: 9d:51:62:28:ea:d2:55:7f:22:0d:f5:e6:30:ca:d9: f5:08:ab:ae:0d:8b:73:c3:7f:7e:a7:f8:a9:13:2f: 53:34:3d:44:6c:f6:8c:5d:ef:a5:f6:e7:8c:99:ef: ad:62:d0:a2:ce:66:49:41:60:ef:e0:c4:b8:42:a0: 0c:fc:3f:8b:eb:4c:1e:e2:0c:02:a6:13:0b:5e:77: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3F:00:E6:A0:93:7A:36:67:F4:4C:87:28:A9:E7:8B:C2:A5:38:2F X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:df:24:eb:bc:4b:39:0a:73:43:5a:d1:dc:9b:3c:99:4f: e2:9b:7b:6f:30:6b:b5:22:56:50:1a:31:ee:9c:c6:ee:c8:95: c1:b1:ad:9a:68:58:01:3e:29:f7:88:e2:ff:ab:22:2c:2a:e8: cd:b8:e7:a0:1e:b1:08:f6:e3:ac:33:9f:bb:58:8e:fb:7d:25: d0:7c:c0:c3:13:41:30:ac:ed:c7:c0:19:4b:1b:c6:a6:8a:eb: cb:48:be:07:d2:17:29:dd:2b:d1:eb:bf:f1:4a:67:2e:ae:43: e6:e1:3b:b9:8a:94:84:37:68:0e:40:a0:80:f4:82:10:11:de: 62:09:41:db:64:25:df:75:f9:94:cf:a4:00:ea:fb:c4:8e:3f: 89:e3:ee:c6:06:08:27:b7:b7:25:98:9e:6c:03:90:ca:46:96: b1:24:24:41:98:1e:81:c8:9c:80:bb:f7:c2:02:34:db:cb:b1: da:03:78:94:cb:05:0e:f2:a4:fa:e9:cd:40:5d:22:0f:7b:25: 36:55:27:ba:18:9a:0a:10:db:9b:76:86:24:7e:d0:fc:14:37: 11:22:2b:63:ea:1a:78:4d:e2:76:be:e7:64:d7:01:f9:47:c4: 88:ea:56:a7:a7:d5:87:2c:94:d8:73:86:5f:86:bf:d0:cd:22: 8e:7a:b8:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjA3MjMxMDQ4MTVaFw0yNjA3MzAxMDQ4MTVaMBgxFjAUBgNV BAMTDTZhNjFmMTZmLThkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVR+lHOIgRR7fmYJ7rTJHFxrMU2xiEcPYEqLNcDbEfi9NkMPCwJssTrO6GWutD 6Am85NhP5pFTFGIfZ3mnGladDYp/8cLyFqC1au7TDqUiOFR0CP25Z1NjGrjM7ZlX YR0mFKfUd98sD3tL0EptmjaMvnsUUBSJo6R368fq0E8B8Cph0MPx9ixEnv9UslQt EQCSQcF/ved29ZR8qK+32LzjnCDY++OCEwxSJuMPLY2tyjf6i51RYijq0lV/Ig31 5jDK2fUIq64Ni3PDf36n+KkTL1M0PURs9oxd76X254yZ761i0KLOZklBYO/gxLhC oAz8P4vrTB7iDAKmEwted+55AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBz8A5qCT ejZn9EyHKKnni8KlOC8wHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzs98k67xLOQpzQ1rR3Js8mU/im3tvMGu1IlZQGjHunMbuyJXBsa2aaFgBPin3 iOL/qyIsKujNuOegHrEI9uOsM5+7WI77fSXQfMDDE0EwrO3HwBlLG8amiuvLSL4H 0hcp3SvR67/xSmcurkPm4Tu5ipSEN2gOQKCA9IIQEd5iCUHbZCXfdfmUz6QA6vvE jj+J4+7GBggnt7clmJ5sA5DKRpaxJCRBmB6ByJyAu/fCAjTby7HaA3iUywUO8qT6 6c1AXSIPeyU2VSe6GJoKENubdoYkftD8FDcRIitj6hp4TeJ2vudk1wH5R8SI6lan p9WHLJTYc4Zfhr/QzSKOerg6 -----END CERTIFICATE-----Generated at Fri Jul 24 00:03:56 2026 by rpki-client