$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: 9C0JriL6Ex4MGctOg/iXwqZE80150r0iRw3vOYhcCj4= Subject key identifier: 07:7A:DB:AB:80:8A:35:9E:E2:CB:FD:AE:25:8D:5B:BD:96:FB:97:DE Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: 0120 Signing time: Thu 23 Jul 2026 07:27:29 +0000 Manifest this update: Thu 23 Jul 2026 07:27:29 +0000 Manifest next update: Thu 30 Jul 2026 07:27:29 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: rVH4z2Kh3y4uBS4b6fTIW0ZA0iwhFNLAiGVs9WAZ1Bw=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: BF86bk5wE6Zr1m3LZ6kF7qlbs43Gmk6OeQj3ok60wVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Jul 23 07:27:29 2026 GMT Not After : Jul 30 07:27:29 2026 GMT Subject: CN=6a61c261-2a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:55:01:bc:12:7c:23:8d:a6:aa:59:45:d4: 8f:20:5b:fe:d5:11:25:63:14:3f:20:9a:62:cc:a9: c8:54:fb:04:da:a1:86:1b:0f:52:ff:94:13:67:0c: ac:2b:9f:5d:38:d9:f9:35:26:9e:35:18:fb:0b:99: d1:c1:d8:de:1f:df:53:f3:f2:f9:d7:20:20:e3:d2: 9a:a3:9b:34:c8:94:e6:e2:63:69:1c:97:76:82:68: a9:62:ce:b6:b9:bb:a2:75:fb:a3:7e:a1:40:6f:fc: d5:61:32:b9:c8:00:e5:d1:0a:51:43:6e:c3:67:c9: 95:42:e4:3e:2b:f3:63:2f:31:96:5f:fc:f7:0c:50: 7b:1c:5a:e9:a3:be:0c:33:11:30:3d:92:7d:6f:b9: e7:80:40:5e:76:2e:f2:c6:6f:b2:14:e3:29:dd:7a: 34:0c:60:ae:10:68:ed:d8:e9:0a:39:54:68:a6:89: 5e:84:b3:f9:1b:2c:cb:df:a3:a3:a3:64:60:37:d7: 9b:1e:72:18:07:1d:fe:d6:27:89:1a:d9:5b:f7:b5: 2f:54:57:4e:76:53:81:da:0e:05:3d:4b:7e:26:57: 06:25:34:55:b0:36:f7:0e:57:b5:cb:6f:bf:f4:4b: 34:c9:b1:61:a5:c6:cd:72:fe:c1:64:14:39:19:3b: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:DB:AB:80:8A:35:9E:E2:CB:FD:AE:25:8D:5B:BD:96:FB:97:DE X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:5d:21:39:2e:bd:74:46:ae:17:c9:9e:6e:96:c3:71:bd: d5:fb:ec:ac:9b:b5:60:81:b1:29:fa:a8:3b:be:0a:cc:3d:ce: 3c:d5:5b:71:db:38:c9:42:c5:f6:63:21:af:2d:5e:7e:58:00: cd:67:9d:cb:e6:ce:cc:27:30:df:d2:8d:cc:68:c0:62:be:32: 8c:28:60:7f:62:16:0c:86:52:5d:74:0d:9a:54:07:a1:97:c1: 19:b5:01:6e:86:8e:39:a9:f1:97:b8:35:56:8a:74:45:56:cd: 58:82:c1:57:0b:ca:b3:9d:10:f4:86:56:47:a4:9d:6d:05:07: d4:ee:a1:cf:84:bb:44:9f:ec:61:e2:13:d7:6d:15:8f:17:d5: b2:8a:95:7b:94:d7:4c:1d:c5:f6:38:56:4e:0c:3f:97:41:ff: 58:47:56:cd:23:25:64:ab:5e:f5:d2:01:ae:f2:7b:6f:3a:6b: 31:4a:67:3b:87:0f:15:62:5a:84:ad:ce:f9:67:0f:c1:03:f5: e6:4d:cb:ab:7f:7f:c3:67:11:f4:c5:a9:aa:30:96:31:04:6d: 48:0d:3f:2b:1d:d4:6c:0e:4f:55:2f:a6:d5:38:05:3a:57:c9: 3b:86:1d:c3:1b:7b:37:be:62:74:51:4f:66:56:ca:65:a3:b3: 9a:90:c5:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjYwNzIzMDcyNzI5WhcNMjYwNzMwMDcyNzI5WjAYMRYwFAYD VQQDEw02YTYxYzI2MS0yYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GtVAbwSfCONpqpZRdSPIFv+1RElYxQ/IJpizKnIVPsE2qGGGw9S/5QTZwys K59dONn5NSaeNRj7C5nRwdjeH99T8/L51yAg49Kao5s0yJTm4mNpHJd2gmipYs62 ubuidfujfqFAb/zVYTK5yADl0QpRQ27DZ8mVQuQ+K/NjLzGWX/z3DFB7HFrpo74M MxEwPZJ9b7nngEBedi7yxm+yFOMp3Xo0DGCuEGjt2OkKOVRopolehLP5GyzL36Oj o2RgN9ebHnIYBx3+1ieJGtlb97UvVFdOdlOB2g4FPUt+JlcGJTRVsDb3Dle1y2+/ 9Es0ybFhpcbNcv7BZBQ5GTu+QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAd626uA ijWe4sv9riWNW72W+5feMB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV25dITkuvXRGrhfJnm6Ww3G91fvsrJu1YIGxKfqoO74KzD3OPNVbcds4yULF 9mMhry1eflgAzWedy+bOzCcw39KNzGjAYr4yjChgf2IWDIZSXXQNmlQHoZfBGbUB boaOOanxl7g1Vop0RVbNWILBVwvKs50Q9IZWR6SdbQUH1O6hz4S7RJ/sYeIT120V jxfVsoqVe5TXTB3F9jhWTgw/l0H/WEdWzSMlZKte9dIBrvJ7bzprMUpnO4cPFWJa hK3O+WcPwQP15k3Lq39/w2cR9MWpqjCWMQRtSA0/Kx3UbA5PVS+m1TgFOlfJO4Yd wxt7N75idFFPZlbKZaOzmpDFww== -----END CERTIFICATE-----Generated at Fri Jul 24 15:11:17 2026 by rpki-client