$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json) Hash identifier: OLYaPu3yhzvbx0YrxfnMKUM5C4s69j8UX+We7MzNvgU= Subject key identifier: 84:E2:42:F3:FE:D2:24:36:3D:03:59:E1:D7:AC:24:79:22:0C:44:4A Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 Certificate issuer: /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft Manifest number: 51 Signing time: Thu 23 Jul 2026 10:18:57 +0000 Manifest this update: Thu 23 Jul 2026 10:18:57 +0000 Manifest next update: Thu 30 Jul 2026 10:18:57 +0000 Files and hashes: 1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: UJ5P/ekS/V7k4u62oqeeePV1wrb07xOvpP3ONgdJALE=) 2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Validity Not Before: Jul 23 10:18:57 2026 GMT Not After : Jul 30 10:18:57 2026 GMT Subject: CN=6a61ea91-7024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:97:0f:9f:f0:bb:a4:b0:a4:2d:b2:95:9e: 28:1a:c0:4f:71:60:4c:a2:d5:ec:c7:f3:13:c5:b7: 34:28:9e:d5:ac:fe:e7:ea:cc:cf:f2:3b:a6:a1:71: 16:fc:95:6c:a9:12:72:be:d6:21:ba:7f:83:4e:0f: c4:01:f5:ea:d1:a2:63:59:bc:7b:59:20:36:a8:9e: 92:97:73:ce:9e:fb:a2:2b:06:ed:59:4a:10:97:9a: 8d:78:ae:fb:ce:18:04:49:c5:32:54:19:ca:1e:ea: de:80:ee:55:39:2c:cc:01:20:6b:14:b8:df:f2:f2: 7c:eb:a0:f2:de:f6:cb:d5:81:36:09:51:1c:75:94: 53:f1:94:0c:c8:00:ab:43:af:ca:3f:90:03:f4:54: 4d:8b:0a:ae:8b:a3:45:14:28:48:dc:38:2e:b6:0c: ec:bc:bb:49:b4:e9:94:28:5c:49:3b:c1:c1:6c:e4: 9d:ec:3f:fc:9b:a4:f7:9e:ad:92:c1:58:d2:cf:ce: 34:28:97:67:ce:c0:47:d6:78:2f:6c:4f:8d:c0:65: 28:01:39:f6:45:89:ec:7a:b1:c7:ad:7a:23:dd:fb: 36:dc:2d:6a:6c:c7:c6:d4:cb:53:e8:1f:fe:39:43: 63:8a:f2:8a:fa:c5:31:a3:7b:69:dd:30:ae:09:1f: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:42:F3:FE:D2:24:36:3D:03:59:E1:D7:AC:24:79:22:0C:44:4A X509v3 Authority Key Identifier: keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:30:44:66:84:f1:40:79:af:0e:68:42:f7:5d:db:70:6b:9a: 57:c8:be:0c:4f:b0:5e:4d:c2:bf:79:63:03:3d:90:73:de:45: 7b:b7:1e:1a:0e:34:b9:51:bb:aa:79:ca:dd:af:5d:53:c8:03: 60:cc:62:db:7e:a0:c1:22:e1:1f:09:3a:52:18:10:db:2a:21: 95:87:19:a4:3e:43:e5:30:b7:ee:f2:1e:32:2c:eb:a6:13:5f: c5:ea:75:d5:90:e8:e7:31:cb:14:a8:46:a6:5f:f8:e2:e4:97: eb:a2:5b:79:68:ad:77:9e:4b:2d:0f:df:59:50:dd:44:7f:b0: c0:67:c0:78:90:dd:a7:73:64:20:9a:6f:33:02:bd:eb:53:0c: bb:58:28:5c:59:26:75:c9:3b:89:35:74:e4:53:5f:ee:92:76: b6:b1:ee:31:90:50:6d:be:8e:49:a8:a7:69:b2:67:c0:9a:85: fc:8b:05:7c:0e:ba:79:fc:aa:cd:63:da:31:db:96:cf:c9:58: c7:26:79:22:ec:e9:86:df:97:2d:27:ad:3b:1a:dd:86:c6:07: d7:05:76:5d:4f:2c:b3:9c:11:fe:71:50:1d:76:45:53:67:7f: f3:8f:52:bd:b9:03:73:da:2e:69:9c:e7:e7:6c:e9:e4:87:1e: d6:73:23:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoODVGMjJEOTIxNTNGMjAxRDU5MjNBOUYyN0Y5NjFGQzc2 RDcxMTlCODAeFw0yNjA3MjMxMDE4NTdaFw0yNjA3MzAxMDE4NTdaMBgxFjAUBgNV BAMTDTZhNjFlYTkxLTcwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzMZcPn/C7pLCkLbKVnigawE9xYEyi1ezH8xPFtzQontWs/ufqzM/yO6ahcRb8 lWypEnK+1iG6f4NOD8QB9erRomNZvHtZIDaonpKXc86e+6IrBu1ZShCXmo14rvvO GARJxTJUGcoe6t6A7lU5LMwBIGsUuN/y8nzroPLe9svVgTYJURx1lFPxlAzIAKtD r8o/kAP0VE2LCq6Lo0UUKEjcOC62DOy8u0m06ZQoXEk7wcFs5J3sP/ybpPeerZLB WNLPzjQol2fOwEfWeC9sT43AZSgBOfZFiex6sceteiPd+zbcLWpsx8bUy1PoH/45 Q2OK8or6xTGje2ndMK4JH3DvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhOJC8/7S JDY9A1nh16wkeSIMREowHwYDVR0jBBgwFoAUhfItkhU/IB1ZI6nyf5Yfx21xGbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0REREMzOTE2MTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIxWkk2bnlmNVlmeDIxeEdi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGZJdGtoVV9JQjFaSTZueWY1WWZ4MjF4R2JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0REREMzOTE2MTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIx Wkk2bnlmNVlmeDIxeEdiZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQClMERmhPFAea8OaEL3Xdtwa5pXyL4MT7BeTcK/eWMDPZBz3kV7tx4aDjS5Ubuq ecrdr11TyANgzGLbfqDBIuEfCTpSGBDbKiGVhxmkPkPlMLfu8h4yLOumE1/F6nXV kOjnMcsUqEamX/ji5Jfrolt5aK13nkstD99ZUN1Ef7DAZ8B4kN2nc2Qgmm8zAr3r Uwy7WChcWSZ1yTuJNXTkU1/ukna2se4xkFBtvo5JqKdpsmfAmoX8iwV8Drp5/KrN Y9ox25bPyVjHJnki7OmG35ctJ607Gt2GxgfXBXZdTyyznBH+cVAddkVTZ3/zj1K9 uQNz2i5pnOfnbOnkhx7WcyNg -----END CERTIFICATE-----Generated at Fri Jul 24 23:24:49 2026 by rpki-client