$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: 2VGWgcw4lgyuZQWkl8UDtFG1Lqo9aAF3zfnrbF4m3aI= Subject key identifier: 21:7E:B2:2F:64:C1:47:F5:98:3D:34:E6:F3:B4:48:38:FD:FD:D2:09 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0B22 Signing time: Wed 22 Jul 2026 19:40:23 +0000 Manifest this update: Wed 22 Jul 2026 19:40:22 +0000 Manifest next update: Wed 29 Jul 2026 19:40:22 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: NaE7bz83kWV0scJTlwVmaJEarvlYn/a758q1c9Hk/dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Jul 22 19:40:22 2026 GMT Not After : Jul 29 19:40:22 2026 GMT Subject: CN=6a611ca7-09bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:af:4a:ec:2d:1a:bb:bd:b8:e1:c3:34:56: 0a:a6:e0:c0:05:f0:12:41:92:f1:44:e2:fa:26:7b: f8:9d:dc:29:dd:12:9a:c9:64:95:e2:3a:7d:a1:33: d3:9e:70:de:87:e6:25:d5:f6:2e:ba:78:4a:a5:47: da:5a:6d:fe:6f:c0:73:06:48:e4:2c:e1:bd:24:d7: d9:84:dc:79:4e:ae:63:e5:42:48:d3:bb:60:1b:71: 76:4c:3d:3d:dd:61:13:bb:85:ed:76:ca:00:ea:87: 45:21:6c:db:a4:00:81:56:ac:79:cb:38:a4:1b:6e: 4c:26:94:f4:e5:ed:33:55:50:e5:76:d2:7d:63:9f: e6:4f:6e:a7:23:9f:c0:8b:9c:24:8b:30:0b:e5:c2: 00:60:db:6c:56:88:f2:e1:a4:d0:85:c1:a9:80:5c: 0a:89:3f:02:34:0d:fa:bd:a9:8f:bf:d3:01:01:18: 60:c1:28:bc:8b:f3:2a:f9:2c:8d:f9:0b:0b:97:ef: 5e:93:37:07:3e:9e:cc:1e:6f:6c:19:a1:7a:41:e2: 61:e0:25:a4:13:23:59:21:ef:b8:a1:28:b4:e6:84: 68:4a:f3:2f:29:bd:c0:68:f6:af:4c:bc:96:35:d4: 2d:3f:2c:ca:52:5f:14:0b:4d:4a:e9:05:84:29:21: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:B2:2F:64:C1:47:F5:98:3D:34:E6:F3:B4:48:38:FD:FD:D2:09 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:bb:7b:af:a7:c4:16:e3:ab:80:5d:8e:80:79:dd:5f:c4:e9: 9a:90:f5:1e:ca:09:ba:6d:45:64:d9:25:59:de:79:b2:fc:6d: 7f:6e:69:84:3d:a3:1c:aa:18:6d:57:7f:35:44:b8:60:b9:73: 83:0b:e2:fc:12:48:01:2f:3e:b7:ce:d4:bc:e5:2a:46:e8:72: 44:b1:9d:3b:ab:f9:09:9a:32:b9:42:2e:3b:3b:7c:a0:3e:4c: cb:8a:3d:58:81:f8:48:eb:5f:85:a6:8c:7c:3b:f3:5b:b2:d6: eb:c9:e1:32:7c:df:5e:65:99:77:3d:7a:8e:13:ef:3d:8a:24: 47:0c:e7:3b:a7:e4:2b:57:6c:67:15:74:2e:c3:57:93:54:9e: 47:35:5c:8f:22:41:7c:60:34:a1:7d:10:14:f7:25:72:24:5b: 76:e8:ad:3d:c7:eb:87:e9:a2:a1:42:71:3e:b3:ad:98:30:03: f7:72:30:be:57:0c:5c:4a:3b:8e:83:74:50:d0:b3:70:dd:a0: 09:b1:de:4a:2a:de:e8:92:7f:9b:e9:fe:67:9c:4d:60:c7:bc: 23:83:38:c9:87:d0:ba:18:7b:38:0e:d9:f7:7e:85:be:52:01: 62:4b:70:ce:90:29:dd:fa:49:9c:02:19:89:3d:e5:3b:b7:1d: 9f:8c:b3:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjYwNzIyMTk0MDIyWhcNMjYwNzI5MTk0MDIyWjAYMRYwFAYD VQQDEw02YTYxMWNhNy0wOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgw6vSuwtGru9uOHDNFYKpuDABfASQZLxROL6Jnv4ndwp3RKayWSV4jp9oTPT nnDeh+Yl1fYuunhKpUfaWm3+b8BzBkjkLOG9JNfZhNx5Tq5j5UJI07tgG3F2TD09 3WETu4XtdsoA6odFIWzbpACBVqx5yzikG25MJpT05e0zVVDldtJ9Y5/mT26nI5/A i5wkizAL5cIAYNtsVojy4aTQhcGpgFwKiT8CNA36vamPv9MBARhgwSi8i/Mq+SyN +QsLl+9ekzcHPp7MHm9sGaF6QeJh4CWkEyNZIe+4oSi05oRoSvMvKb3AaPavTLyW NdQtPyzKUl8UC01K6QWEKSGKcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCF+si9k wUf1mD005vO0SDj9/dIJMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAErt7r6fEFuOrgF2OgHndX8TpmpD1HsoJum1FZNklWd55svxtf25phD2jHKoY bVd/NUS4YLlzgwvi/BJIAS8+t87UvOUqRuhyRLGdO6v5CZoyuUIuOzt8oD5My4o9 WIH4SOtfhaaMfDvzW7LW68nhMnzfXmWZdz16jhPvPYokRwznO6fkK1dsZxV0LsNX k1SeRzVcjyJBfGA0oX0QFPclciRbduitPcfrh+mioUJxPrOtmDAD93IwvlcMXEo7 joN0UNCzcN2gCbHeSire6JJ/m+n+Z5xNYMe8I4M4yYfQuhh7OA7Z936FvlIBYktw zpAp3fpJnAIZiT3lO7cdn4yzNA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:19:31 2026 by rpki-client