$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: SFTHFL/Bx7UrY59ireIjOqS+sygE+Wcye7LBNaTxKSU= Subject key identifier: 60:DC:69:7E:07:C9:6E:30:DC:1C:EE:9B:7E:A4:AE:5F:73:75:F2:E4 Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 355D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 355D Signing time: Wed 22 Jul 2026 14:57:56 +0000 Manifest this update: Wed 22 Jul 2026 14:57:56 +0000 Manifest next update: Wed 29 Jul 2026 14:57:56 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: SM+DTIsNMZXhSNRPGljgAz/4iYjMWBm9aVevjix0Upk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13661 (0x355d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Jul 22 14:57:56 2026 GMT Not After : Jul 29 14:57:56 2026 GMT Subject: CN=6a60da74-d741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:c5:2f:c2:a9:0f:24:5b:76:29:c2:2d:4a: c8:92:dc:57:ca:58:fe:0b:da:7d:97:8a:45:51:8b: 12:82:3f:4f:f1:e9:7b:66:dc:b9:a1:14:7d:ab:14: 76:c2:f4:31:44:6b:12:8b:e1:f5:48:01:f7:8f:40: 44:b4:41:6e:e9:56:2c:b3:7c:86:fe:cc:a3:df:60: a6:4d:6c:97:34:de:be:f8:d1:6e:2f:33:a2:d5:29: 43:6a:5b:34:f0:40:92:99:52:a7:cb:f1:2f:cd:d0: 0d:19:e0:3f:a5:9e:86:92:c2:14:9a:e1:23:af:86: 40:52:f7:a3:df:00:f8:e9:42:78:1e:f1:28:12:bd: 2a:d7:cd:cc:5b:b7:8c:d2:01:52:62:29:c4:60:8f: 83:e1:35:f0:61:6c:85:73:24:55:96:a5:1f:a2:46: 61:e8:8b:4f:a1:f7:c9:65:62:d8:02:2e:c3:17:29: 23:ba:1c:63:8a:2a:c9:38:40:19:25:87:15:ea:01: 77:01:00:e0:d4:f7:97:2b:6e:83:bd:fd:9c:b5:6b: 86:07:ff:2c:0c:17:90:b1:03:8b:fd:f2:e0:30:6b: 6b:ab:12:e7:ba:8d:40:64:3c:cc:cf:9d:77:15:31: ae:14:41:12:65:ac:05:5d:be:16:32:b4:67:2e:eb: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DC:69:7E:07:C9:6E:30:DC:1C:EE:9B:7E:A4:AE:5F:73:75:F2:E4 X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1e:1a:b6:c4:82:dd:51:71:65:ab:5c:d0:f3:a8:0a:cc:1f: f8:b6:5a:bc:27:07:d6:47:b2:d9:d4:a0:76:4d:14:25:fd:78: 01:9e:37:60:66:b0:44:2a:9f:92:de:5a:5f:11:b6:17:1b:5f: 1a:16:9d:a7:4c:a4:12:88:b2:78:e3:82:4f:b0:03:53:d6:80: 93:24:9d:f1:8d:72:16:70:cc:92:7b:95:af:40:f0:a9:3b:4b: 86:9a:8b:6b:cb:c1:40:9e:97:8c:ba:92:2a:9f:df:9f:d7:37: 29:47:a8:ee:1e:31:1c:8e:6e:bb:06:14:63:d2:b4:0e:33:79: 5b:cf:44:a1:39:82:1c:06:b7:29:52:ef:95:f4:bc:e8:5c:62: 71:16:99:1d:b1:58:ca:3e:18:cf:83:6e:1c:9f:d2:ab:53:41: ab:dc:26:a1:e0:8c:3d:dd:b1:dc:f2:1c:5c:30:7e:78:60:af: bd:2e:12:c5:68:6e:5f:4f:bd:54:3c:b7:fc:cd:e3:df:90:52: 92:7b:76:01:35:23:de:d8:b5:57:b9:43:1f:5a:80:da:bc:c6: d0:06:75:df:31:05:b6:89:51:d3:b4:40:0d:76:4e:93:55:7d: 3d:94:28:1b:72:28:7c:20:72:45:8e:0a:61:fa:82:bf:2d:2d: 05:03:39:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjYwNzIyMTQ1NzU2WhcNMjYwNzI5MTQ1NzU2WjAYMRYwFAYD VQQDEw02YTYwZGE3NC1kNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzvFL8KpDyRbdinCLUrIktxXylj+C9p9l4pFUYsSgj9P8el7Zty5oRR9qxR2 wvQxRGsSi+H1SAH3j0BEtEFu6VYss3yG/syj32CmTWyXNN6++NFuLzOi1SlDals0 8ECSmVKny/EvzdANGeA/pZ6GksIUmuEjr4ZAUvej3wD46UJ4HvEoEr0q183MW7eM 0gFSYinEYI+D4TXwYWyFcyRVlqUfokZh6ItPoffJZWLYAi7DFykjuhxjiirJOEAZ JYcV6gF3AQDg1PeXK26Dvf2ctWuGB/8sDBeQsQOL/fLgMGtrqxLnuo1AZDzMz513 FTGuFEESZawFXb4WMrRnLuthKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDcaX4H yW4w3Bzum36krl9zdfLkMB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgh4atsSC3VFxZatc0POoCswf+LZavCcH1key2dSgdk0UJf14AZ43YGawRCqf kt5aXxG2FxtfGhadp0ykEoiyeOOCT7ADU9aAkySd8Y1yFnDMknuVr0DwqTtLhpqL a8vBQJ6XjLqSKp/fn9c3KUeo7h4xHI5uuwYUY9K0DjN5W89EoTmCHAa3KVLvlfS8 6FxicRaZHbFYyj4Yz4NuHJ/Sq1NBq9wmoeCMPd2x3PIcXDB+eGCvvS4SxWhuX0+9 VDy3/M3j35BSknt2ATUj3ti1V7lDH1qA2rzG0AZ13zEFtolR07RADXZOk1V9PZQo G3IofCByRY4KYfqCvy0tBQM52g== -----END CERTIFICATE-----Generated at Fri Jul 24 07:14:36 2026 by rpki-client