$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: jhk9ZmhUsPUm+mLdSdcRPgcI45vYbl9Tk2OPfvjh7aI= Subject key identifier: 5E:21:AE:EB:A7:BE:66:15:78:A0:E9:31:03:0E:2F:48:3C:4C:56:03 Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: AA Signing time: Thu 23 Jul 2026 09:06:38 +0000 Manifest this update: Thu 23 Jul 2026 09:06:38 +0000 Manifest next update: Thu 30 Jul 2026 09:06:38 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: IG44zkFpPTG3d+/prEcPebavOMMhi8QKyqGOlW6/DiE=) 2: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=) 3: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=) 4: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Jul 23 09:06:38 2026 GMT Not After : Jul 30 09:06:38 2026 GMT Subject: CN=6a61d99e-a62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:ac:b5:fe:dd:ba:97:a2:82:ec:09:d3:d4: d0:f6:71:c4:01:d5:64:21:09:9d:e1:71:18:df:e7: e3:cf:5e:f4:3f:47:9f:3e:eb:aa:2f:24:42:6f:eb: 16:c3:9d:38:6b:71:00:41:a0:38:59:9a:fd:10:7b: 3b:f5:e9:21:eb:2e:39:0f:e9:14:3b:f6:d6:30:5f: 93:65:a5:94:28:6d:9c:53:26:f3:55:27:cf:2e:87: f2:5e:94:d4:37:b7:db:ec:fb:b7:fe:83:71:58:ed: 1c:81:7e:25:ab:ec:8f:e8:1d:08:a8:52:a8:b6:7a: 47:cc:ca:44:98:f5:e5:5e:69:bc:6e:cd:cb:57:da: 17:42:45:9a:9b:96:02:13:16:e3:35:33:c2:a5:4c: c4:a6:60:f2:20:67:47:18:e1:58:78:c3:4f:73:61: c6:ff:9d:fe:e7:0d:c9:4f:5b:40:6e:a4:a2:ad:4f: 9c:4e:ae:27:90:c8:17:7a:e6:c6:6e:98:bc:89:21: b2:ff:c3:90:fe:07:39:08:e4:60:92:f2:9f:91:ca: 1b:fc:a4:ad:aa:fa:87:cb:1d:97:e4:ed:1d:9c:3b: f9:84:a8:d2:7f:6d:74:ac:ae:7d:5d:9e:69:ea:78: c9:b0:3a:11:ce:fb:6e:b8:f9:ee:cf:1e:a2:36:84: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:21:AE:EB:A7:BE:66:15:78:A0:E9:31:03:0E:2F:48:3C:4C:56:03 X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:69:8a:3c:dc:a1:d4:f3:9a:a8:69:93:6a:41:b8:11:bf:e3: 45:40:68:da:d3:a7:6c:b1:20:43:ce:f3:53:95:66:f8:a8:4a: ee:61:c5:2c:80:19:26:12:0e:b4:de:76:cd:78:94:ba:4e:26: 2c:b7:e0:a8:d7:39:1c:7f:19:83:9e:bc:62:35:66:29:71:df: b6:c2:26:1f:5c:a5:bf:62:71:a8:a6:96:ec:ed:64:46:dc:b2: 99:ec:10:30:95:f1:76:50:c2:85:8c:b3:0f:09:88:4b:c9:a0: c4:f7:7b:f2:48:df:c1:96:7d:99:a2:7b:0d:34:5d:d8:38:a7: 89:2e:02:85:1d:b2:9d:55:7b:3d:4d:7c:fb:f2:73:ae:53:f4: a2:ee:f6:4d:af:eb:4c:80:31:1a:bd:74:ae:cd:bc:fc:7f:de: 4a:b0:4d:35:10:97:64:d6:75:5c:b2:31:77:3a:af:af:8f:6e: 5c:49:c6:75:4f:d9:d0:e4:a2:ce:4c:0a:a5:e3:c3:9c:f6:0c: 2b:35:88:eb:be:47:af:9a:08:0d:fb:46:a1:89:ba:f4:95:6a: c0:bb:b8:1c:5d:84:a3:8c:ec:e5:ba:b6:61:ff:6f:c0:08:95: 82:c6:29:5a:85:36:5e:77:af:f7:75:7e:03:75:35:c1:ee:fc: 08:6e:00:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYwNzIzMDkwNjM4WhcNMjYwNzMwMDkwNjM4WjAYMRYwFAYD VQQDEw02YTYxZDk5ZS1hNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp2stf7dupeiguwJ09TQ9nHEAdVkIQmd4XEY3+fjz170P0efPuuqLyRCb+sW w504a3EAQaA4WZr9EHs79ekh6y45D+kUO/bWMF+TZaWUKG2cUybzVSfPLofyXpTU N7fb7Pu3/oNxWO0cgX4lq+yP6B0IqFKotnpHzMpEmPXlXmm8bs3LV9oXQkWam5YC ExbjNTPCpUzEpmDyIGdHGOFYeMNPc2HG/53+5w3JT1tAbqSirU+cTq4nkMgXeubG bpi8iSGy/8OQ/gc5CORgkvKfkcob/KStqvqHyx2X5O0dnDv5hKjSf210rK59XZ5p 6njJsDoRzvtuuPnuzx6iNoTKSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4hruun vmYVeKDpMQMOL0g8TFYDMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgWmKPNyh1POaqGmTakG4Eb/jRUBo2tOnbLEgQ87zU5Vm+KhK7mHFLIAZJhIO tN52zXiUuk4mLLfgqNc5HH8Zg568YjVmKXHftsImH1ylv2JxqKaW7O1kRtyymewQ MJXxdlDChYyzDwmIS8mgxPd78kjfwZZ9maJ7DTRd2DiniS4ChR2ynVV7PU18+/Jz rlP0ou72Ta/rTIAxGr10rs28/H/eSrBNNRCXZNZ1XLIxdzqvr49uXEnGdU/Z0OSi zkwKpePDnPYMKzWI675Hr5oIDftGoYm69JVqwLu4HF2Eo4zs5bq2Yf9vwAiVgsYp WoU2Xnev93V+A3U1we78CG4A2w== -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:02 2026 by rpki-client