$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft File: HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft (raw, json) Hash identifier: Hcvgqp+G3mI9F2W2tqs43ZW4RGr27sJHE3We+NXNors= Subject key identifier: BB:24:08:46:14:3A:BF:6C:59:FF:56:70:B8:17:47:94:BF:1A:E4:E6 Authority key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D Certificate issuer: /CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft Manifest number: 0145 Signing time: Thu 23 Jul 2026 06:56:04 +0000 Manifest this update: Thu 23 Jul 2026 06:56:04 +0000 Manifest next update: Thu 30 Jul 2026 06:56:04 +0000 Files and hashes: 1: HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl (hash: ifAuwU8R9Y235EIx7EpI0OiQ98xLUw6vX6Jqhhd1GP8=) 2: 4E7F3B4C955B11EFACD8F26CC4F9AE02.roa (hash: kw9fZbNGZZ3kdKJfF8SYCLZeUjioT1ZZ2tfUfZYgkvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Validity Not Before: Jul 23 06:56:04 2026 GMT Not After : Jul 30 06:56:04 2026 GMT Subject: CN=6a61bb04-3e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:bf:0a:25:58:84:b2:95:96:9c:aa:c8:83: 54:33:bc:c6:ae:b4:32:b2:72:5f:f3:ec:cc:bf:74: 74:b3:15:23:e2:0e:e2:20:5e:b4:41:f0:f1:4e:b0: 6a:da:bc:c0:b7:e2:c6:15:46:a2:f3:8f:ef:1e:06: 47:c2:1f:e7:91:98:88:be:0a:f9:20:f3:af:0b:00: 53:52:c1:02:97:51:64:2a:64:46:5d:c0:cb:cb:ed: a6:11:30:c9:1e:a6:e3:39:b2:46:d8:8e:5b:48:76: d4:5c:f3:31:03:1f:88:ee:c0:14:82:d1:c4:ff:45: 09:f4:58:f8:ca:32:5e:7d:79:09:e3:2e:7a:11:d9: 82:2c:7c:c6:0d:0d:cf:8a:f3:e8:af:65:5b:d0:c2: f5:98:35:18:ae:b2:db:1e:7d:72:fa:52:93:47:1d: ad:33:49:0a:41:53:bb:44:70:75:57:63:ef:c8:4e: 54:9a:d9:a2:84:6d:5a:05:b3:75:77:9e:6b:fd:94: f1:06:28:e2:b9:72:9a:8a:81:b2:85:0b:8c:3d:53: 1d:79:84:de:91:11:0d:d6:22:30:d9:20:23:1d:ec: b6:9c:73:01:83:fe:2c:bc:be:38:79:71:a4:5d:19: 28:f4:82:96:b7:09:51:86:ac:ff:75:66:42:9d:9e: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:08:46:14:3A:BF:6C:59:FF:56:70:B8:17:47:94:BF:1A:E4:E6 X509v3 Authority Key Identifier: keyid:1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:21:a2:00:30:11:3a:3e:4d:40:de:d1:22:40:58:d9:4d: d0:32:a1:40:ea:d3:88:ab:c2:2c:a7:02:01:6a:a3:57:57:b5: 60:8b:00:95:65:e7:74:b1:d5:e5:a9:dd:70:0a:05:fb:c1:dc: 00:80:39:bc:66:de:b6:ac:88:20:b6:8d:6a:a7:fe:0f:d3:62: 25:b3:86:7b:96:38:55:9d:94:7c:1a:1b:ee:83:47:a8:a0:db: 8f:de:56:87:b5:79:e5:c4:11:c7:fc:f9:4a:68:c1:75:9b:7f: ff:4b:75:ff:a6:ff:26:49:82:ce:59:ca:ca:dd:c7:fe:02:41: 13:7f:2d:fc:ef:0c:30:e9:b7:3e:e2:2f:dd:32:03:dd:f0:51: a1:a5:3b:7a:cd:36:4a:11:2f:65:f9:3d:18:be:53:23:b8:82: 08:d5:cd:64:28:2c:37:58:bf:7b:82:8d:e3:04:a3:cd:0b:d5: 82:98:dc:bd:18:68:42:be:3f:5e:b9:21:98:38:6f:43:de:90: d8:38:ad:37:76:fc:b7:ee:b8:be:b5:1a:9c:bd:cd:75:4f:bb: d1:eb:f1:50:60:8b:3e:47:4d:da:de:ad:28:50:ff:5e:95:df: 64:fe:65:21:4d:bc:1b:a9:63:d6:c2:d2:22:4a:dd:b0:29:a3: c6:19:9f:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDFFNjU2RERFQzdFOThEMjRBMTg2RkZEQjZGNTk3NzEw QUFGRjJBOEQwHhcNMjYwNzIzMDY1NjA0WhcNMjYwNzMwMDY1NjA0WjAYMRYwFAYD VQQDEw02YTYxYmIwNC0zZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgS/CiVYhLKVlpyqyINUM7zGrrQysnJf8+zMv3R0sxUj4g7iIF60QfDxTrBq 2rzAt+LGFUai84/vHgZHwh/nkZiIvgr5IPOvCwBTUsECl1FkKmRGXcDLy+2mETDJ HqbjObJG2I5bSHbUXPMxAx+I7sAUgtHE/0UJ9Fj4yjJefXkJ4y56EdmCLHzGDQ3P ivPor2Vb0ML1mDUYrrLbHn1y+lKTRx2tM0kKQVO7RHB1V2PvyE5UmtmihG1aBbN1 d55r/ZTxBijiuXKaioGyhQuMPVMdeYTekREN1iIw2SAjHey2nHMBg/4svL44eXGk XRko9IKWtwlRhqz/dWZCnZ7zMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLskCEYU Or9sWf9WcLgXR5S/GuTmMB8GA1UdIwQYMBaAFB5lbd7H6Y0koYb/229ZdxCq/yqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8zNUM3NkM3RTk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpTU2hodl9iYjFsM0VLcl9L bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htVnQzc2ZwalNTaGh2X2JiMWwzRUtyX0tvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8zNUM3NkM3RTk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpT U2hodl9iYjFsM0VLcl9LbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbBghogAwETo+TUDe0SJAWNlN0DKhQOrTiKvCLKcCAWqjV1e1YIsAlWXndLHV 5andcAoF+8HcAIA5vGbetqyIILaNaqf+D9NiJbOGe5Y4VZ2UfBob7oNHqKDbj95W h7V55cQRx/z5SmjBdZt//0t1/6b/JkmCzlnKyt3H/gJBE38t/O8MMOm3PuIv3TID 3fBRoaU7es02ShEvZfk9GL5TI7iCCNXNZCgsN1i/e4KN4wSjzQvVgpjcvRhoQr4/ XrkhmDhvQ96Q2DitN3b8t+64vrUanL3NdU+70evxUGCLPkdN2t6tKFD/XpXfZP5l IU28G6lj1sLSIkrdsCmjxhmfMg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:09:15 2026 by rpki-client