$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: wgGhGsHxCkSJM8Reb9XqaVyYXEmmqaJOqr71QGzMgps= Subject key identifier: CE:AA:7A:EF:B0:F1:2B:F6:40:CD:2A:50:9E:A0:E6:FA:89:25:65:F7 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 029A Signing time: Thu 23 Jul 2026 02:45:08 +0000 Manifest this update: Thu 23 Jul 2026 02:45:08 +0000 Manifest next update: Thu 30 Jul 2026 02:45:08 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: FVYwgcPwfWMG8i6kYumY/ISAM947JmFQq3mpX6fscRs=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Jul 23 02:45:08 2026 GMT Not After : Jul 30 02:45:08 2026 GMT Subject: CN=6a618034-3b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:fc:17:91:8e:f8:8e:0b:e4:92:5c:36:c7: 14:70:72:42:4c:d7:ed:d8:b5:03:66:7d:53:23:40: 22:4a:86:20:a5:de:06:40:a7:45:ec:04:de:3c:64: ba:81:5d:d6:cc:8c:df:98:f1:29:5f:5b:2a:ea:f1: ce:64:46:3b:ee:e3:96:93:53:2e:7c:a0:50:4b:60: 02:48:48:fd:a4:a7:cb:e2:d5:6c:9a:8f:bb:8d:f2: ed:6f:66:64:90:a7:d4:e7:3b:bd:84:0b:26:64:45: 01:c1:07:61:e0:38:0c:bc:f5:70:f0:6a:57:af:00: f9:29:e0:91:a7:9e:3f:4f:2d:ee:5c:01:14:83:f4: fe:80:a1:3e:d4:32:0c:b5:4c:f1:47:2d:af:e0:53: e3:61:2a:1d:59:63:3e:17:b9:65:70:10:b0:c2:6f: f6:1c:37:3f:45:8a:16:96:8f:f7:3e:90:93:4e:e2: a9:28:21:01:bc:7b:00:7e:f2:5f:9c:db:dc:74:0e: cf:81:b5:ab:d8:54:f1:c1:46:47:73:ef:fd:73:90: e5:5c:a2:76:dd:2e:57:29:4d:05:d7:62:83:8c:c5: 70:0c:3c:2f:2b:66:f0:57:c1:2c:4d:8b:d1:fb:7e: ee:36:cf:c4:98:a4:48:a0:ee:33:4d:53:2d:a1:c0: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:7A:EF:B0:F1:2B:F6:40:CD:2A:50:9E:A0:E6:FA:89:25:65:F7 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:44:80:de:2f:48:b9:70:c8:f5:d7:c0:0e:8e:05:96:e8: 80:71:4d:d2:43:ec:2a:27:25:ef:73:40:d5:40:76:37:d7:eb: a0:e2:bc:13:24:ca:c9:20:22:c7:4a:46:2c:60:66:04:da:d9: ee:a3:c5:30:8f:cb:6e:c2:8d:b0:59:2d:19:33:70:89:e6:8b: a7:31:02:b1:a0:5a:4a:e1:08:e8:2b:ef:27:55:2d:3b:3a:c3: c2:5f:93:fd:23:65:1e:c5:f4:b4:cf:79:17:42:1a:37:34:be: ef:83:fa:2f:7b:10:e0:3c:1a:8f:e9:b2:6a:d0:3b:b9:f2:82: e4:84:9a:dc:48:66:35:ad:26:9d:79:11:ee:ba:11:91:be:41: e1:4c:3e:9e:7f:c6:3f:3b:47:8c:c0:e0:8d:c6:03:8e:bf:b8: ad:64:b0:1d:b3:bb:3e:db:4e:dc:f7:2c:42:59:80:f4:8f:32: 10:2d:a0:45:39:b6:5e:ba:4e:f9:0d:50:40:90:bd:f2:09:e4: 85:b6:66:77:b8:3f:6b:a5:ca:ea:61:04:ee:76:d3:54:19:cb: 1b:6f:84:fe:1f:35:05:52:81:fb:92:6a:78:df:00:91:17:11: a7:3d:1a:59:36:f1:3a:52:6e:46:fe:61:a7:73:e3:18:be:0d: f5:df:e3:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwNzIzMDI0NTA4WhcNMjYwNzMwMDI0NTA4WjAYMRYwFAYD VQQDEw02YTYxODAzNC0zYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qf8F5GO+I4L5JJcNscUcHJCTNft2LUDZn1TI0AiSoYgpd4GQKdF7ATePGS6 gV3WzIzfmPEpX1sq6vHOZEY77uOWk1MufKBQS2ACSEj9pKfL4tVsmo+7jfLtb2Zk kKfU5zu9hAsmZEUBwQdh4DgMvPVw8GpXrwD5KeCRp54/Ty3uXAEUg/T+gKE+1DIM tUzxRy2v4FPjYSodWWM+F7llcBCwwm/2HDc/RYoWlo/3PpCTTuKpKCEBvHsAfvJf nNvcdA7PgbWr2FTxwUZHc+/9c5DlXKJ23S5XKU0F12KDjMVwDDwvK2bwV8EsTYvR +37uNs/EmKRIoO4zTVMtocAk6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6qeu+w 8Sv2QM0qUJ6g5vqJJWX3MB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXrREgN4vSLlwyPXXwA6OBZbogHFN0kPsKicl73NA1UB2N9froOK8EyTKySAi x0pGLGBmBNrZ7qPFMI/LbsKNsFktGTNwieaLpzECsaBaSuEI6CvvJ1UtOzrDwl+T /SNlHsX0tM95F0IaNzS+74P6L3sQ4Dwaj+myatA7ufKC5ISa3EhmNa0mnXkR7roR kb5B4Uw+nn/GPztHjMDgjcYDjr+4rWSwHbO7PttO3PcsQlmA9I8yEC2gRTm2XrpO +Q1QQJC98gnkhbZmd7g/a6XK6mEE7nbTVBnLG2+E/h81BVKB+5JqeN8AkRcRpz0a WTbxOlJuRv5hp3PjGL4N9d/jiA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:52:33 2026 by rpki-client