$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft File: r_h3chh1NYXDiOm4HDkGa9ONtZI.mft (raw, json) Hash identifier: HiagKWUJiIAih7tzABy3i5JJFN+48r04m+4ne9WIV/4= Subject key identifier: 4F:19:1E:0B:3F:5E:FD:B1:6A:3C:9F:BD:A7:0E:13:8E:79:33:CA:E0 Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 Certificate issuer: /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft Manifest number: DF Signing time: Thu 23 Jul 2026 08:21:41 +0000 Manifest this update: Thu 23 Jul 2026 08:21:40 +0000 Manifest next update: Thu 30 Jul 2026 08:21:40 +0000 Files and hashes: 1: r_h3chh1NYXDiOm4HDkGa9ONtZI.crl (hash: EKouTY/82PLHNGJoDz+zPUIbLjQf+AAfOjepX/jGAU4=) 2: AFD61B9C36A311F08A82A258C4F9AE02.roa (hash: d6zMH6FslhCioO9BUQgF2N2RzyG3M8j7DpL3pPa6Rys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Validity Not Before: Jul 23 08:21:40 2026 GMT Not After : Jul 30 08:21:40 2026 GMT Subject: CN=6a61cf14-fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:2e:93:d1:27:fb:13:06:b2:fd:32:21:d3: 18:c7:f1:9a:cf:db:83:af:73:6d:4a:ab:60:9c:96: d5:89:2a:27:4f:47:93:22:07:52:66:2f:33:3f:c3: d9:67:30:09:47:e4:79:22:65:a8:b8:bf:eb:eb:cc: 68:5a:7d:dc:be:7d:78:7f:10:46:05:c7:d0:bb:69: cf:f6:3f:26:e4:65:40:a2:f5:ae:ea:2e:f9:27:ad: 2a:ca:a8:72:da:d2:54:0c:5e:46:49:6f:04:5b:78: 31:04:30:ae:81:77:08:bf:7a:09:b9:50:3a:a3:ee: 19:ad:46:81:bb:89:84:29:26:65:e4:f3:84:34:07: b2:67:11:8e:bc:42:b6:87:03:86:8e:d0:df:ae:0c: 24:10:f9:c1:9c:d0:f0:15:a2:79:11:9d:83:af:ea: f5:15:3d:f3:87:8b:9a:3d:ad:7c:b3:db:7d:1d:00: 15:93:d8:aa:0e:4d:e4:7e:dd:b3:93:ec:57:62:9d: 3c:d3:bb:99:ba:44:c8:56:78:33:fc:42:20:d8:08: 82:1a:8a:58:c8:0b:c9:21:6e:69:c5:00:7b:62:19: 86:f9:76:c2:c2:64:75:e0:ee:0c:f6:51:04:c3:96: 7d:e3:02:a5:4c:dc:59:62:20:55:e3:1d:8c:2a:37: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:1E:0B:3F:5E:FD:B1:6A:3C:9F:BD:A7:0E:13:8E:79:33:CA:E0 X509v3 Authority Key Identifier: keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5e:42:d7:e3:13:fe:56:f5:e6:06:cf:37:3b:7b:ee:a9:1b: fc:09:a4:a5:da:43:c9:f6:09:d1:40:a5:8e:2c:c6:20:1e:74: db:79:c8:96:04:b1:21:f6:3b:e5:83:4d:50:d2:e5:19:25:f9: ef:04:8b:aa:44:4d:18:e2:6c:ef:49:00:5a:a2:d4:32:6d:11: 67:f0:8b:29:5e:2a:d5:f3:23:96:a3:3f:38:74:39:bc:27:94: 0e:04:07:c7:99:7f:95:7f:c3:12:54:7f:a1:c0:c8:63:f1:1c: 19:cf:10:ea:31:4b:95:ef:75:c4:3f:c6:db:e4:d2:3d:7b:de: c0:3f:d1:78:04:19:fc:86:b9:e5:e8:b3:02:d5:78:c5:6c:4e: 5d:64:0d:0d:56:e1:ee:48:9b:10:87:54:bf:35:26:d2:27:a6: 41:3c:cf:e1:1a:69:31:97:2a:26:32:ce:3c:bb:dd:ae:39:33: 38:ac:b6:ed:fe:57:6e:79:be:36:64:b4:45:8c:d0:29:d9:76: 7a:5f:f2:0a:f8:88:83:10:47:34:bc:97:62:60:4b:fc:c9:56: 05:a2:8f:cf:0d:4b:e3:31:fd:d1:a6:5e:47:62:a6:e9:99:15: 85:ac:09:2f:a1:ec:7a:60:13:a8:fc:98:6c:32:8d:cf:9b:2a: e3:fe:47:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzRkUxMTAvBgNVBAUTKEFGRjg3NzcyMTg3NTM1ODVDMzg4RTlCODFDMzkwNjZC RDM4REI1OTIwHhcNMjYwNzIzMDgyMTQwWhcNMjYwNzMwMDgyMTQwWjAYMRYwFAYD VQQDEw02YTYxY2YxNC1mZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z4uk9En+xMGsv0yIdMYx/Gaz9uDr3NtSqtgnJbViSonT0eTIgdSZi8zP8PZ ZzAJR+R5ImWouL/r68xoWn3cvn14fxBGBcfQu2nP9j8m5GVAovWu6i75J60qyqhy 2tJUDF5GSW8EW3gxBDCugXcIv3oJuVA6o+4ZrUaBu4mEKSZl5POENAeyZxGOvEK2 hwOGjtDfrgwkEPnBnNDwFaJ5EZ2Dr+r1FT3zh4uaPa18s9t9HQAVk9iqDk3kft2z k+xXYp0807uZukTIVngz/EIg2AiCGopYyAvJIW5pxQB7YhmG+XbCwmR14O4M9lEE w5Z94wKlTNxZYiBV4x2MKjc5nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8ZHgs/ Xv2xajyfvacOE455M8rgMB8GA1UdIwQYMBaAFK/4d3IYdTWFw4jpuBw5BmvTjbWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNGRS8yQTU2ODc4MjM2 QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9yX2gzY2hoMU5ZWERpT200SERrR2E5T050 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaDNjaGgxTllYRGlPbTRIRGtHYTlPTnRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNGRS8yQTU2ODc4MjM2QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9yX2gzY2hoMU5Z WERpT200SERrR2E5T050WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiV5C1+MT/lb15gbPNzt77qkb/AmkpdpDyfYJ0UCljizGIB5023nIlgSxIfY7 5YNNUNLlGSX57wSLqkRNGOJs70kAWqLUMm0RZ/CLKV4q1fMjlqM/OHQ5vCeUDgQH x5l/lX/DElR/ocDIY/EcGc8Q6jFLle91xD/G2+TSPXvewD/ReAQZ/Ia55eizAtV4 xWxOXWQNDVbh7kibEIdUvzUm0iemQTzP4RppMZcqJjLOPLvdrjkzOKy27f5Xbnm+ NmS0RYzQKdl2el/yCviIgxBHNLyXYmBL/MlWBaKPzw1L4zH90aZeR2Km6ZkVhawJ L6HsemATqPyYbDKNz5sq4/5HTw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:06:24 2026 by rpki-client