$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: iYwjQeUxrvaeRf7QW57VKz4IlhGCLkudbC78YFgh5jA= Subject key identifier: 2C:A2:98:D3:29:78:8D:FE:C7:58:46:87:A8:5E:79:4E:D2:D7:47:6A Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 90 Signing time: Thu 23 Jul 2026 09:25:30 +0000 Manifest this update: Thu 23 Jul 2026 09:25:30 +0000 Manifest next update: Thu 30 Jul 2026 09:25:30 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: O2KW/RlEnmPmK3fGs/tbGYkHC7ccHJ/n5BAmE+qPgxg=) 2: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) 3: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Jul 23 09:25:30 2026 GMT Not After : Jul 30 09:25:30 2026 GMT Subject: CN=6a61de0a-3d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b1:da:f4:8a:2c:cb:9f:ff:b8:44:cf:7e:b7: 25:fc:3d:8b:d6:cf:9d:a0:74:09:30:c3:f7:9f:06: 7a:14:5a:16:e7:a3:2a:8b:09:64:a9:ec:7a:97:62: 21:01:ce:77:eb:0e:7e:bc:30:bc:5d:19:1a:a5:dd: cf:0b:b8:39:33:a5:a1:5d:10:10:94:be:3a:3e:56: 53:61:1c:d2:f6:17:d1:8e:2e:78:2a:b4:5a:fc:a5: 34:b2:3a:02:1c:f2:51:d9:92:59:42:d9:18:55:04: 83:a9:9e:58:05:2d:dd:40:1f:e1:16:68:0b:e1:f5: 2b:05:d5:0c:a7:a7:c7:5c:95:ab:59:56:e1:0e:17: b5:88:aa:12:63:91:f5:ef:bf:3e:76:d5:3d:38:5e: 51:3d:5d:54:39:b2:b6:b3:31:a0:53:b6:45:b1:37: 29:d0:d8:23:a9:9e:ef:02:12:65:ba:e1:0c:7d:e3: e5:bb:00:df:a2:05:9a:52:6e:ec:46:17:a7:a6:89: f1:ec:e9:e2:f1:63:d3:01:ce:eb:50:33:dd:08:03: e4:fa:d0:15:7c:7d:97:77:eb:f4:f0:f2:8c:1a:65: 91:af:ae:6e:06:88:98:7d:9c:31:90:38:d6:11:af: 19:e2:f3:1f:0c:32:e9:f0:a3:d6:8a:e6:c1:22:ca: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A2:98:D3:29:78:8D:FE:C7:58:46:87:A8:5E:79:4E:D2:D7:47:6A X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:54:00:b7:f8:14:e3:65:b4:87:a3:3c:0c:46:ec:26:36:bf: ed:9a:a7:f5:fe:22:6b:16:20:3e:1c:1f:0f:01:4c:f9:0b:4c: ac:70:9d:36:b5:75:e8:35:0f:6d:6e:c3:3c:37:99:f3:88:8d: 1b:0d:9c:83:6a:66:19:43:b0:71:d5:9f:32:82:d0:ef:da:cc: 90:a4:b1:4d:78:4a:c4:a5:5b:af:2f:0a:30:f0:ee:92:9e:45: 65:2e:17:68:d0:a9:06:be:a3:2d:39:d9:dc:7e:1c:9b:3e:de: 4d:c3:89:0f:e9:62:76:18:8f:75:fd:e6:b2:db:60:c0:39:a2: 44:21:5c:99:6e:42:f5:92:90:0a:b0:37:93:5b:f0:51:57:70: 01:0f:0f:96:52:04:44:eb:5a:b5:59:ae:d3:1f:e5:d8:32:b0: 1b:cf:b1:c6:05:cf:c9:77:74:5e:20:c5:09:df:26:45:c0:00: 94:45:a0:ee:35:d5:86:79:7a:eb:dc:2d:3c:87:0a:3e:98:c5: 44:99:a8:ea:53:06:eb:05:2b:b2:33:12:5e:d6:60:34:1d:f2: c1:76:e7:b0:c6:1e:38:be:86:5e:b7:29:e9:34:68:27:c2:e7: 01:a8:28:05:b1:6f:b9:e3:44:6b:56:fb:18:f9:88:88:f2:6d: e3:87:26:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc4QTcxMTAvBgNVBAUTKDFDNTk2ODU4NkNCNEM3RTI4M0YxNDE5RjU4NTA0NjhF REE1NTk2ODIwHhcNMjYwNzIzMDkyNTMwWhcNMjYwNzMwMDkyNTMwWjAYMRYwFAYD VQQDEw02YTYxZGUwYS0zZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rHa9Iosy5//uETPfrcl/D2L1s+doHQJMMP3nwZ6FFoW56Mqiwlkqex6l2Ih Ac536w5+vDC8XRkapd3PC7g5M6WhXRAQlL46PlZTYRzS9hfRji54KrRa/KU0sjoC HPJR2ZJZQtkYVQSDqZ5YBS3dQB/hFmgL4fUrBdUMp6fHXJWrWVbhDhe1iKoSY5H1 778+dtU9OF5RPV1UObK2szGgU7ZFsTcp0NgjqZ7vAhJluuEMfePluwDfogWaUm7s Rhenponx7Oni8WPTAc7rUDPdCAPk+tAVfH2Xd+v08PKMGmWRr65uBoiYfZwxkDjW Ea8Z4vMfDDLp8KPWiubBIspJhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyimNMp eI3+x1hGh6heeU7S10dqMB8GA1UdIwQYMBaAFBxZaFhstMfig/FBn1hQRo7aVZaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzhBNy9GQUU5NkM0QUI2 MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgtS0Q4VUdmV0ZCR2p0cFZs b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgt S0Q4VUdmV0ZCR2p0cFZsb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1QAt/gU42W0h6M8DEbsJja/7Zqn9f4iaxYgPhwfDwFM+QtMrHCdNrV16DUP bW7DPDeZ84iNGw2cg2pmGUOwcdWfMoLQ79rMkKSxTXhKxKVbry8KMPDukp5FZS4X aNCpBr6jLTnZ3H4cmz7eTcOJD+lidhiPdf3msttgwDmiRCFcmW5C9ZKQCrA3k1vw UVdwAQ8PllIEROtatVmu0x/l2DKwG8+xxgXPyXd0XiDFCd8mRcAAlEWg7jXVhnl6 69wtPIcKPpjFRJmo6lMG6wUrsjMSXtZgNB3ywXbnsMYeOL6GXrcp6TRoJ8LnAago BbFvueNEa1b7GPmIiPJt44cmAg== -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:21 2026 by rpki-client