$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: +GQ+Z5G/bYtRJZl8ZfX4XLRZIsBVPm+sccuI9rPM6e4= Subject key identifier: 65:D5:96:C2:F2:B9:27:CE:4E:6D:A0:DE:B9:91:20:12:58:CA:35:EC Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 02E7 Signing time: Thu 23 Jul 2026 02:23:49 +0000 Manifest this update: Thu 23 Jul 2026 02:23:49 +0000 Manifest next update: Thu 30 Jul 2026 02:23:49 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: oppJsDcd1Ljm1Z5g/7qJcQR81IlsaRM3f+3LhavVGAY=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Jul 23 02:23:49 2026 GMT Not After : Jul 30 02:23:49 2026 GMT Subject: CN=6a617b35-3faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:ab:51:e1:e8:2a:9c:65:50:0f:0c:be:55: 66:24:68:55:2e:df:5d:05:31:52:15:15:af:29:c1: b5:46:d2:8f:d5:77:5e:77:d4:c9:69:7d:93:11:3f: c3:50:23:03:12:93:00:7e:9c:17:e4:c2:4e:1e:17: b4:ac:d8:9e:33:32:66:59:d3:21:90:ee:a7:5c:52: 8c:d9:7e:33:ba:e1:36:c2:90:12:8d:1b:f3:ee:e5: 26:9a:c7:11:f3:fa:43:d0:33:26:47:1a:26:19:ff: 0e:7e:de:79:52:f4:6c:be:99:ec:52:7a:80:0f:72: b1:5c:d1:1c:f0:8a:aa:3f:c7:f9:ab:cf:83:95:ba: b6:22:a2:0f:e2:1a:4b:74:92:b5:02:81:f4:c4:61: 46:76:f0:ad:48:a3:7e:6e:87:2e:72:31:2d:b0:3c: b5:8f:46:a2:32:ab:25:b2:df:d0:be:55:83:49:e6: 12:50:07:30:58:20:73:5a:62:2f:78:82:c3:01:bc: 9c:34:50:1a:71:f2:13:ac:52:6f:c9:67:29:cb:c1: 87:81:09:5f:32:f2:53:72:06:b2:b4:e2:69:bd:79: 45:87:bb:79:db:63:9b:65:93:0e:6d:6a:e4:75:57: 36:33:a2:4b:5b:32:5b:0f:ef:60:a1:7b:9b:d5:cf: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:96:C2:F2:B9:27:CE:4E:6D:A0:DE:B9:91:20:12:58:CA:35:EC X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:20:0a:42:7c:5e:d2:ec:f6:30:e3:cc:93:72:e1:67:8a:71: 5f:b2:38:22:6d:4a:73:d7:3f:d5:9f:2f:23:23:49:0c:56:25: 9f:09:e2:1e:be:9a:62:4e:13:58:0b:2b:35:86:28:84:29:55: 12:8f:e8:4d:4f:63:ef:84:57:18:08:01:2d:77:5c:9c:6a:b1: aa:d3:7b:a5:61:51:65:f6:74:e3:99:49:90:1e:00:9d:a8:8c: 27:d9:16:c5:3e:79:e0:df:16:44:35:54:6c:7f:99:5e:40:0e: c8:bb:ee:86:11:e8:6c:29:f8:ca:88:d5:cc:74:f8:72:bd:88: 70:03:8e:fa:8d:7f:7d:26:c3:1a:0f:0a:f5:47:a5:53:ec:47: 3e:4b:a9:ab:28:36:e7:16:df:31:b5:29:45:90:a7:22:99:d4: d5:e7:75:c3:b7:99:82:3a:e8:19:02:aa:91:dc:aa:95:11:86: a6:a6:32:3f:2e:ba:57:73:9b:dc:52:1c:cc:28:dc:72:82:9e: e8:24:84:fa:7a:fc:46:c7:20:cf:b8:73:9b:1f:40:1e:5d:29: 2b:c8:72:b1:36:c4:19:09:d0:d2:49:39:8f:0f:20:5a:30:99: 8a:97:df:34:e6:06:dd:3d:91:7f:b3:9e:bf:f3:c1:b2:31:ed: f3:f6:05:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjYwNzIzMDIyMzQ5WhcNMjYwNzMwMDIyMzQ5WjAYMRYwFAYD VQQDEw02YTYxN2IzNS0zZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5erUeHoKpxlUA8MvlVmJGhVLt9dBTFSFRWvKcG1RtKP1Xded9TJaX2TET/D UCMDEpMAfpwX5MJOHhe0rNieMzJmWdMhkO6nXFKM2X4zuuE2wpASjRvz7uUmmscR 8/pD0DMmRxomGf8Oft55UvRsvpnsUnqAD3KxXNEc8IqqP8f5q8+Dlbq2IqIP4hpL dJK1AoH0xGFGdvCtSKN+bocucjEtsDy1j0aiMqslst/QvlWDSeYSUAcwWCBzWmIv eILDAbycNFAacfITrFJvyWcpy8GHgQlfMvJTcgaytOJpvXlFh7t522ObZZMObWrk dVc2M6JLWzJbD+9goXub1c8YIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXVlsLy uSfOTm2g3rmRIBJYyjXsMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWCAKQnxe0uz2MOPMk3LhZ4pxX7I4Im1Kc9c/1Z8vIyNJDFYlnwniHr6aYk4T WAsrNYYohClVEo/oTU9j74RXGAgBLXdcnGqxqtN7pWFRZfZ045lJkB4AnaiMJ9kW xT554N8WRDVUbH+ZXkAOyLvuhhHobCn4yojVzHT4cr2IcAOO+o1/fSbDGg8K9Uel U+xHPkupqyg25xbfMbUpRZCnIpnU1ed1w7eZgjroGQKqkdyqlRGGpqYyPy66V3Ob 3FIczCjccoKe6CSE+nr8Rscgz7hzmx9AHl0pK8hysTbEGQnQ0kk5jw8gWjCZipff NOYG3T2Rf7Oev/PBsjHt8/YFKw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:59 2026 by rpki-client