$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft File: tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json) Hash identifier: XEs/46wfCrNZTLn/rIUwbqabN+Pyd/kXKgJeHIL1gUA= Subject key identifier: B2:1E:15:94:FD:1C:65:7C:87:89:FF:A2:90:20:0E:C8:B1:A4:23:0F Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft Manifest number: 29 Signing time: Wed 22 Jul 2026 22:59:36 +0000 Manifest this update: Wed 22 Jul 2026 22:59:35 +0000 Manifest next update: Wed 29 Jul 2026 22:59:35 +0000 Files and hashes: 1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: fphDIT3QbrhoiMUywrgpQpX7DQQ/7F/yL1V6/+Dc9q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: Jul 22 22:59:35 2026 GMT Not After : Jul 29 22:59:35 2026 GMT Subject: CN=6a614b58-4620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:73:fe:2b:de:67:53:1b:17:40:f2:d2:b2: d9:ff:96:d2:fe:0d:41:29:1b:48:ba:b4:29:30:df: a2:96:57:d8:56:64:fd:f4:16:0d:79:b5:4d:09:dd: c0:88:f7:ae:1a:45:78:aa:54:0f:63:dc:80:40:13: 1b:d6:db:05:f1:7d:bc:62:0f:57:3b:13:1f:84:f5: 40:9b:e3:16:7d:67:f7:c3:5c:9f:d3:93:47:89:f1: e6:17:56:dc:39:32:bb:83:ba:c2:03:10:5a:0f:7a: 07:f9:a7:68:12:85:eb:79:cd:b2:c3:7d:ed:da:a3: 6a:cb:0e:00:81:4e:73:08:dd:a7:70:0a:c3:d9:4f: 44:c7:ad:f6:35:7b:72:43:8c:73:d3:45:97:9a:38: 8d:f6:46:43:34:a1:df:cf:5c:fa:4d:cb:b3:be:8d: 48:22:1a:8b:f5:d5:82:5e:2e:9d:27:41:0c:2d:9b: e9:2e:50:1f:ca:44:ae:21:eb:b1:ab:8b:41:8f:d8: 6c:47:5d:d0:10:0e:1d:c4:39:52:d8:19:d0:f8:2a: 25:2a:d1:f3:c4:ce:a1:d9:26:35:f2:f8:6e:10:13: 03:f9:ca:c6:1f:bf:1d:28:12:77:0a:5d:91:56:70: 35:85:d3:78:51:f1:ef:a8:78:3f:25:b3:a4:ab:3e: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:15:94:FD:1C:65:7C:87:89:FF:A2:90:20:0E:C8:B1:A4:23:0F X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:61:64:6e:db:f3:af:f9:d0:85:32:5a:eb:15:33:d0:0a:4a: 84:f3:b7:36:d0:de:4e:2c:d7:9a:c3:6e:d0:b3:94:f6:c1:0c: 56:2f:71:ac:c1:c4:07:bf:20:64:05:ac:f7:00:45:ce:5d:52: 2f:23:d9:15:3e:f3:ce:bd:fc:93:e5:ef:1e:cb:ac:e6:22:bc: ba:52:23:3e:f0:77:8f:e2:29:5a:68:3d:bf:97:d1:fe:37:fc: 8a:8f:19:57:f6:0f:2a:cb:6d:ea:5f:19:30:97:5a:3c:b9:0c: 7c:93:9a:ac:a7:b5:30:4d:37:8e:de:59:2f:34:3d:1f:27:22: d3:24:d8:6e:b2:a1:a2:c2:f8:ad:4d:50:1d:43:25:b8:84:26: 1e:00:aa:0c:98:93:2f:64:fd:f8:6e:f8:57:51:e9:3b:0c:a5: bd:2a:82:ec:f3:61:b0:34:59:7c:26:3c:5f:46:51:c0:19:66: af:31:84:21:5a:54:c1:4e:f7:50:83:66:ce:81:5b:ee:4f:2f: 42:ec:ac:22:e1:bf:24:c3:ae:0f:52:e9:92:56:ed:08:c1:ac: 62:a6:50:0d:71:39:7c:5a:a3:9a:cc:98:b2:37:bd:69:70:1d: 04:a3:34:88:c9:3c:34:2a:c4:f0:46:09:c9:e4:3b:9b:46:9d: 3e:98:c9:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjA3MjIyMjU5MzVaFw0yNjA3MjkyMjU5MzVaMBgxFjAUBgNV BAMTDTZhNjE0YjU4LTQ2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO93P+K95nUxsXQPLSstn/ltL+DUEpG0i6tCkw36KWV9hWZP30Fg15tU0J3cCI 964aRXiqVA9j3IBAExvW2wXxfbxiD1c7Ex+E9UCb4xZ9Z/fDXJ/Tk0eJ8eYXVtw5 MruDusIDEFoPegf5p2gShet5zbLDfe3ao2rLDgCBTnMI3adwCsPZT0THrfY1e3JD jHPTRZeaOI32RkM0od/PXPpNy7O+jUgiGov11YJeLp0nQQwtm+kuUB/KRK4h67Gr i0GP2GxHXdAQDh3EOVLYGdD4KiUq0fPEzqHZJjXy+G4QEwP5ysYfvx0oEncKXZFW cDWF03hR8e+oeD8ls6SrPhwZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsh4VlP0c ZXyHif+ikCAOyLGkIw8wHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QTQwLzRFRUVBMUE2NDkwQzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBH ZGVsbllFYXhlYWllZ0R4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMYWRu2/Ov+dCFMlrrFTPQCkqE87c20N5OLNeaw27Qs5T2wQxWL3GswcQHvyBk Baz3AEXOXVIvI9kVPvPOvfyT5e8ey6zmIry6UiM+8HeP4ilaaD2/l9H+N/yKjxlX 9g8qy23qXxkwl1o8uQx8k5qsp7UwTTeO3lkvND0fJyLTJNhusqGiwvitTVAdQyW4 hCYeAKoMmJMvZP34bvhXUek7DKW9KoLs82GwNFl8JjxfRlHAGWavMYQhWlTBTvdQ g2bOgVvuTy9C7Kwi4b8kw64PUumSVu0IwaxiplANcTl8WqOazJiyN71pcB0EozSI yTw0KsTwRgnJ5DubRp0+mMml -----END CERTIFICATE-----Generated at Fri Jul 24 00:42:33 2026 by rpki-client