$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: 6eadCOa8UyAJh9vQxD0wrki7unaDVEQW1JU+544uH5M= Subject key identifier: 34:2A:8D:6F:8A:C5:F4:70:FE:2C:76:43:E9:E3:31:1E:42:96:14:FE Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D20 Signing time: Wed 22 Jul 2026 18:28:43 +0000 Manifest this update: Wed 22 Jul 2026 18:28:43 +0000 Manifest next update: Wed 29 Jul 2026 18:28:43 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: VSwU3+PWudw79ftGneqQ71BMJeCYviPFkWe/NpC84iI=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Jul 22 18:28:43 2026 GMT Not After : Jul 29 18:28:43 2026 GMT Subject: CN=6a610bdb-ea55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:3b:62:ab:2c:fc:86:a1:d8:fc:5c:21:80: 5c:fc:33:a9:a4:19:a4:19:cd:9c:0e:83:8e:2b:21: 26:52:e7:0c:a5:b5:17:8d:b6:26:c1:e7:63:a0:31: d5:72:bd:d7:95:ca:b9:d0:70:3e:ad:6e:ea:03:59: 40:d0:7a:26:f5:da:d9:c2:0d:07:1c:b7:9c:c2:de: 36:51:27:9d:f9:34:27:38:f8:cf:13:7a:be:8b:9d: d1:c9:f9:23:a0:85:0f:ea:2a:08:29:da:44:0f:74: f4:13:65:06:c9:73:e0:d5:db:b0:21:5d:53:44:b0: 70:72:6a:15:26:e6:17:d8:31:cc:72:98:37:98:b6: a9:f5:dc:bf:5d:da:a1:76:e7:11:40:cb:2a:49:01: 99:8d:06:7f:c4:61:34:af:33:2f:d0:b3:5e:75:9f: a7:dd:a5:78:a1:bb:71:16:82:47:ff:12:c8:90:93: 91:64:8e:c0:3c:78:cf:4b:4f:66:4f:54:e2:89:f8: 29:d2:e3:69:ff:81:9e:1d:85:4a:c3:3f:70:9b:16: e2:bd:a5:a9:9f:d4:c8:5d:4f:5d:6b:6c:bc:65:98: 32:96:3f:78:15:02:e1:40:d5:13:53:d0:ab:35:5f: 3e:da:8c:c0:22:dc:7c:36:d4:03:0d:3d:2e:c5:bd: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:8D:6F:8A:C5:F4:70:FE:2C:76:43:E9:E3:31:1E:42:96:14:FE X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:83:06:fc:ff:6e:f9:e1:7e:2c:be:92:74:42:33:90:9a:a2: ef:89:63:0d:fc:48:90:7a:8a:f2:9a:b2:fe:f9:38:39:0d:72: 15:9c:a0:92:6d:44:d6:a9:70:17:b4:6f:1e:9f:17:74:f1:1e: 06:b4:08:82:4a:bc:03:f7:86:5c:d8:af:c6:a1:92:56:3b:ae: 22:cf:e1:ea:3b:90:98:46:ca:bc:9f:eb:71:db:d5:9e:03:ed: 29:51:ea:f5:9a:42:eb:08:52:74:3b:07:fe:b3:eb:5e:99:91: c3:ea:e5:2d:41:9d:66:0b:21:f6:9e:d4:c3:0c:1c:19:b5:a5: 77:b2:62:93:75:71:20:94:73:e2:1a:92:d6:84:88:29:06:5f: b2:ae:d8:57:f6:8d:30:ef:e3:97:7d:19:49:2c:d7:93:e8:03: 2e:22:2a:0a:bb:ec:3e:e6:d6:5a:3b:09:be:ba:f9:16:52:e6: 06:3d:e5:bc:ba:c7:76:da:36:7d:0f:50:1b:3f:9f:dc:b7:b3: 12:22:98:33:5b:86:f6:61:b5:4e:7a:20:f6:75:20:5b:e0:20: 7b:06:d9:d7:11:1d:77:0e:fe:7b:dc:f2:9a:82:1e:8a:75:15: ee:ad:23:ee:f3:5b:48:c1:5e:24:85:e8:16:c0:c9:25:85:28: 9e:05:8a:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNzIyMTgyODQzWhcNMjYwNzI5MTgyODQzWjAYMRYwFAYD VQQDEw02YTYxMGJkYi1lYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0E7Yqss/Iah2PxcIYBc/DOppBmkGc2cDoOOKyEmUucMpbUXjbYmwedjoDHV cr3Xlcq50HA+rW7qA1lA0Hom9drZwg0HHLecwt42USed+TQnOPjPE3q+i53Ryfkj oIUP6ioIKdpED3T0E2UGyXPg1duwIV1TRLBwcmoVJuYX2DHMcpg3mLap9dy/Xdqh ducRQMsqSQGZjQZ/xGE0rzMv0LNedZ+n3aV4obtxFoJH/xLIkJORZI7APHjPS09m T1Tiifgp0uNp/4GeHYVKwz9wmxbivaWpn9TIXU9da2y8ZZgylj94FQLhQNUTU9Cr NV8+2ozAItx8NtQDDT0uxb1IVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQqjW+K xfRw/ix2Q+njMR5ClhT+MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPIMG/P9u+eF+LL6SdEIzkJqi74ljDfxIkHqK8pqy/vk4OQ1yFZygkm1E1qlw F7RvHp8XdPEeBrQIgkq8A/eGXNivxqGSVjuuIs/h6juQmEbKvJ/rcdvVngPtKVHq 9ZpC6whSdDsH/rPrXpmRw+rlLUGdZgsh9p7UwwwcGbWld7Jik3VxIJRz4hqS1oSI KQZfsq7YV/aNMO/jl30ZSSzXk+gDLiIqCrvsPubWWjsJvrr5FlLmBj3lvLrHdto2 fQ9QGz+f3LezEiKYM1uG9mG1Tnog9nUgW+AgewbZ1xEddw7+e9zymoIeinUV7q0j 7vNbSMFeJIXoFsDJJYUongWKFw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:12:20 2026 by rpki-client