$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: dhn3qrz+xqQcfgurc7dmJVkM3xtGg/ABxzs2MBZf8fI= Subject key identifier: F0:2E:4E:2D:68:BF:3C:C2:2F:56:7C:4B:9B:B7:F3:80:1F:FE:15:9B Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 0289 Signing time: Thu 23 Jul 2026 02:59:32 +0000 Manifest this update: Thu 23 Jul 2026 02:59:32 +0000 Manifest next update: Thu 30 Jul 2026 02:59:32 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: XE+CRI60Xv1ELGbzmb3cviamDnn50nfy0DJRM7XzUOI=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) 3: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Jul 23 02:59:32 2026 GMT Not After : Jul 30 02:59:32 2026 GMT Subject: CN=6a618394-53e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:12:25:57:c6:f6:2c:64:94:c1:a3:df:49: 23:0b:16:28:de:db:ea:1b:1e:66:bf:44:8c:d8:ee: b6:53:37:eb:c4:9c:7c:fb:c3:1a:4b:e4:90:cb:25: 6f:40:95:c4:6e:25:30:35:f3:52:d1:69:21:cd:4b: 62:3b:9c:2c:f6:e0:80:8a:a2:71:90:ee:c9:fe:18: f0:c1:88:c4:43:8d:4c:24:af:c2:10:4f:bd:cf:ba: 04:88:d1:c8:bf:06:eb:1c:ab:7b:07:1c:54:87:67: 3e:ef:96:f3:e0:41:5d:26:6c:10:af:8b:85:f7:24: a6:6a:c8:b8:6b:30:a6:25:4a:aa:b6:96:cb:58:0f: f0:28:0b:11:3b:f5:3e:c8:fa:dc:aa:e6:71:2a:62: a2:28:10:d7:39:66:f4:74:da:f6:97:22:01:f7:f8: 87:23:4f:45:b3:e4:f6:10:86:7c:6a:76:33:91:84: 94:6e:ea:db:00:08:7a:16:4b:4d:8f:5b:ee:5a:0e: b9:65:39:8d:44:cc:c7:2f:a3:88:bd:1e:65:c2:f3: 0a:89:4e:1f:f8:09:d1:e9:4e:ca:c9:b7:01:e3:14: d5:0d:c0:d4:92:05:41:4a:11:a1:8c:3c:0d:8f:e2: 1e:50:c2:2f:c5:3a:3b:08:cb:de:37:27:80:18:03: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:4E:2D:68:BF:3C:C2:2F:56:7C:4B:9B:B7:F3:80:1F:FE:15:9B X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a1:ef:fa:3f:fb:9c:09:76:d8:5d:19:12:9c:48:7b:9e:e5: aa:1d:87:4d:de:2b:d6:69:7e:0e:3c:e1:56:e5:66:f9:ac:c7: 40:24:8f:17:98:54:ea:3d:51:82:5e:4b:e9:5d:bc:62:57:23: 91:d7:14:0c:09:22:af:f5:fb:ea:fb:55:83:74:97:60:6b:a7: 4f:42:a9:79:59:12:db:cb:dd:2b:bd:6a:c4:53:bd:02:24:64: 16:ac:7c:04:ec:5a:84:3d:9b:62:fd:e1:9a:38:34:a1:73:3e: 70:ca:bf:fd:25:f0:bf:07:e9:77:c2:9f:06:ae:3e:ad:13:84: 19:de:32:5f:07:51:b4:9d:05:bc:0d:4a:9e:23:fe:53:24:e2: 9c:12:60:44:15:ef:f4:7e:fb:61:6d:15:49:fc:59:6b:ce:fe: 58:ad:1f:a8:b3:ff:ae:e6:4a:8a:b5:93:d9:c5:ae:a6:3b:2c: e3:46:fe:b9:80:08:37:49:92:37:87:5d:e9:5a:53:0d:68:54: 0d:9b:2d:e1:4c:b0:98:78:b4:8f:07:bc:4f:e8:da:0d:f0:c3: ff:70:67:46:4b:7f:12:aa:35:71:21:16:7a:af:c8:c9:56:7e: c7:71:b9:92:e1:8a:03:9c:43:da:bd:b1:34:08:56:41:3a:92: 23:ee:6a:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwNzIzMDI1OTMyWhcNMjYwNzMwMDI1OTMyWjAYMRYwFAYD VQQDEw02YTYxODM5NC01M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysASJVfG9ixklMGj30kjCxYo3tvqGx5mv0SM2O62UzfrxJx8+8MaS+SQyyVv QJXEbiUwNfNS0WkhzUtiO5ws9uCAiqJxkO7J/hjwwYjEQ41MJK/CEE+9z7oEiNHI vwbrHKt7BxxUh2c+75bz4EFdJmwQr4uF9ySmasi4azCmJUqqtpbLWA/wKAsRO/U+ yPrcquZxKmKiKBDXOWb0dNr2lyIB9/iHI09Fs+T2EIZ8anYzkYSUburbAAh6FktN j1vuWg65ZTmNRMzHL6OIvR5lwvMKiU4f+AnR6U7KybcB4xTVDcDUkgVBShGhjDwN j+IeUMIvxTo7CMveNyeAGANG0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPAuTi1o vzzCL1Z8S5u384Af/hWbMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqHv+j/7nAl22F0ZEpxIe57lqh2HTd4r1ml+DjzhVuVm+azHQCSPF5hU6j1R gl5L6V28YlcjkdcUDAkir/X76vtVg3SXYGunT0KpeVkS28vdK71qxFO9AiRkFqx8 BOxahD2bYv3hmjg0oXM+cMq//SXwvwfpd8KfBq4+rROEGd4yXwdRtJ0FvA1KniP+ UyTinBJgRBXv9H77YW0VSfxZa87+WK0fqLP/ruZKirWT2cWupjss40b+uYAIN0mS N4dd6VpTDWhUDZst4UywmHi0jwe8T+jaDfDD/3BnRkt/Eqo1cSEWeq/IyVZ+x3G5 kuGKA5xD2r2xNAhWQTqSI+5qJw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:06 2026 by rpki-client