$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: e6ctxgGPZAvZl233QRsMpx1ZgZ68jTumL6CqSO9fxUg= Subject key identifier: 5B:E1:CF:56:87:1C:84:02:19:E0:FA:30:C5:CB:FB:CD:FD:FD:5A:31 Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 1B Signing time: Thu 23 Jul 2026 11:07:38 +0000 Manifest this update: Thu 23 Jul 2026 11:07:38 +0000 Manifest next update: Thu 30 Jul 2026 11:07:38 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: WoOJT4cP0Evr8Sk+g0ezNDudYCGhZIl9VRavWg8lPPc=) 2: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) 3: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Jul 23 11:07:38 2026 GMT Not After : Jul 30 11:07:38 2026 GMT Subject: CN=6a61f5fa-36e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:d4:8b:a7:54:f6:99:07:70:ff:00:a1:1b: 77:76:20:80:d5:e6:f7:a3:0a:b2:e5:23:0d:a1:b9: 1b:38:b9:f8:71:fe:21:c7:66:ba:14:64:a0:ce:f8: a7:7c:9e:7c:38:b2:7d:95:b2:67:9f:04:e3:4f:86: 7e:75:a6:b5:62:77:1b:b2:68:ca:09:c3:15:11:e4: 88:6b:5e:39:f3:bd:32:2a:b5:4a:64:0a:9c:9a:b7: 82:aa:c7:47:d3:19:d2:9a:32:73:86:7d:c5:ce:3d: f8:40:f9:bd:1f:34:8f:cd:f7:aa:f3:c6:e3:90:de: d3:03:ab:95:7e:b7:80:08:21:7c:47:fd:6a:9a:78: 6e:4f:c4:30:3d:88:be:74:74:7b:ec:74:2f:ba:3e: bc:b5:43:6a:a5:37:5f:f4:74:95:24:57:5a:a1:6f: 2f:1f:36:9e:34:32:84:e3:c7:c6:bf:56:25:3d:85: a2:f9:6b:57:58:d9:ef:d5:bb:23:f0:67:9b:dc:6a: c3:5b:e1:56:9b:da:83:af:ad:68:d8:50:32:5f:56: 90:5c:78:f2:cc:f3:a8:a1:44:50:6c:43:33:7f:0f: 7a:13:5e:42:29:c2:2e:03:f2:ac:b5:3e:1e:9e:e1: 77:79:ca:79:e2:05:99:30:78:1b:a8:7d:e9:54:0a: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E1:CF:56:87:1C:84:02:19:E0:FA:30:C5:CB:FB:CD:FD:FD:5A:31 X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:fb:19:ba:81:36:3a:0e:90:bd:42:54:d3:0a:cb:b4:5f:e0: 5c:85:47:95:f2:db:6c:06:44:7a:bc:94:96:1a:5e:02:3e:25: f4:ea:46:3b:83:60:ef:cf:a7:ee:ff:e6:39:b3:ee:c2:98:fc: c4:65:a8:2a:32:e7:5a:77:ba:22:7d:91:cf:02:b8:1b:60:61: 73:ad:7a:fd:11:7c:8e:fe:6c:b6:e2:73:4e:67:39:93:c6:46: 9f:dc:d2:fd:a3:8b:05:9f:d7:af:e1:6c:5e:23:f7:68:ea:21: c4:97:5f:82:e2:39:c1:66:bb:13:ba:c9:9c:63:82:d1:07:6f: bf:ca:b5:9d:cc:2d:16:c4:08:4e:15:37:07:5b:59:c8:2a:3d: 1e:73:48:7e:ec:b6:66:61:a6:b8:43:8d:10:ac:00:b0:0f:b3: e0:da:cf:89:6e:19:43:8b:dd:c4:36:5b:1d:95:1a:bc:a9:cd: 8c:02:10:62:b8:fd:72:0b:ab:74:4a:1c:e7:15:21:d9:8c:60: e5:91:c1:24:75:6a:f8:96:ea:9c:d4:22:ca:01:34:16:11:29: bd:e1:2a:da:54:fe:db:c5:50:f0:e7:ff:c2:82:8b:45:56:0a: d1:c8:21:e1:49:1f:80:5b:3d:8d:56:ff:e7:8a:a2:c0:a2:c6: 52:ab:9b:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA3MjMxMTA3MzhaFw0yNjA3MzAxMTA3MzhaMBgxFjAUBgNV BAMTDTZhNjFmNWZhLTM2ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrZ9SLp1T2mQdw/wChG3d2IIDV5vejCrLlIw2huRs4ufhx/iHHZroUZKDO+Kd8 nnw4sn2VsmefBONPhn51prVidxuyaMoJwxUR5IhrXjnzvTIqtUpkCpyat4Kqx0fT GdKaMnOGfcXOPfhA+b0fNI/N96rzxuOQ3tMDq5V+t4AIIXxH/WqaeG5PxDA9iL50 dHvsdC+6Pry1Q2qlN1/0dJUkV1qhby8fNp40MoTjx8a/ViU9haL5a1dY2e/VuyPw Z5vcasNb4Vab2oOvrWjYUDJfVpBcePLM86ihRFBsQzN/D3oTXkIpwi4D8qy1Ph6e 4Xd5ynniBZkweBuofelUCg01AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW+HPVocc hAIZ4Powxcv7zf39WjEwHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3+xm6gTY6DpC9QlTTCsu0X+BchUeV8ttsBkR6vJSWGl4CPiX06kY7g2Dvz6fu /+Y5s+7CmPzEZagqMudad7oifZHPArgbYGFzrXr9EXyO/my24nNOZzmTxkaf3NL9 o4sFn9ev4WxeI/do6iHEl1+C4jnBZrsTusmcY4LRB2+/yrWdzC0WxAhOFTcHW1nI Kj0ec0h+7LZmYaa4Q40QrACwD7Pg2s+JbhlDi93ENlsdlRq8qc2MAhBiuP1yC6t0 ShznFSHZjGDlkcEkdWr4luqc1CLKATQWESm94SraVP7bxVDw5//CgotFVgrRyCHh SR+AWz2NVv/niqLAosZSq5vP -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:30 2026 by rpki-client