$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft File: HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json) Hash identifier: znjiXBp7csi3m4j/oWl4fgdOisiVSTz6l4yl6WCH7VQ= Subject key identifier: A9:85:E3:52:E8:11:F1:5D:90:0D:C8:E4:83:53:B6:7F:2B:0C:D7:9D Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft Manifest number: 04BE Signing time: Thu 23 Jul 2026 00:41:48 +0000 Manifest this update: Thu 23 Jul 2026 00:41:47 +0000 Manifest next update: Thu 30 Jul 2026 00:41:47 +0000 Files and hashes: 1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: VztRwGw/thoiPYuW91i9NaSQanod9NFNwbRTA0kgu34=) 2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Validity Not Before: Jul 23 00:41:47 2026 GMT Not After : Jul 30 00:41:47 2026 GMT Subject: CN=6a61634b-9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:07:7a:95:2c:c5:02:e9:b4:92:1c:e9:1d: 55:60:20:13:a7:91:62:20:4d:34:27:04:f1:53:8e: 6f:16:eb:1f:90:c9:8f:ba:a6:9e:a3:8b:c2:b0:78: f2:ed:90:16:28:5f:f3:58:c6:fc:9e:6c:31:d2:20: 18:95:e2:34:d5:60:79:d0:04:b3:db:53:e1:31:71: eb:c8:42:b9:fe:16:40:21:8b:91:d6:c5:67:14:41: 53:ca:eb:9b:0f:7d:33:5c:11:2a:e1:26:69:90:34: ef:80:63:68:c9:84:da:bc:9e:b6:13:35:df:0c:a8: bf:73:42:c9:ff:b5:57:9a:89:9f:42:01:41:0f:a4: 35:25:e6:84:0f:15:7e:fb:a6:ef:ad:c5:91:35:b2: 42:12:59:c5:98:b7:40:c0:eb:78:36:4a:e8:bd:a0: c2:64:f9:db:13:bf:54:54:b8:4e:39:81:4f:e0:09: 2b:d9:24:ed:bd:09:65:ae:f4:4e:0e:f4:34:f9:0d: c0:41:58:c9:54:ca:5e:2b:b9:a9:f8:6e:78:fa:ba: 04:65:e7:16:d3:50:84:08:76:0b:38:f3:bb:e9:5b: 3e:e8:09:91:80:65:5e:ed:2f:03:bd:ff:0e:26:fa: b0:6a:c2:9f:5e:ba:1c:d4:bf:27:f6:2f:48:27:59: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:85:E3:52:E8:11:F1:5D:90:0D:C8:E4:83:53:B6:7F:2B:0C:D7:9D X509v3 Authority Key Identifier: keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cf:80:10:87:c7:fe:14:8e:9d:9c:cc:5e:a8:ce:ec:87:d6: 8d:ca:e0:26:27:95:b5:8a:c2:46:df:a4:63:e9:b1:6c:8b:93: b5:6d:13:ac:31:6e:b0:c7:9c:55:e0:66:29:37:71:56:2e:63: bc:79:2a:ad:24:40:91:90:df:7a:ce:34:29:72:a9:a2:53:0a: 97:46:4d:34:31:70:45:72:22:ae:46:f1:99:9c:03:19:e2:ca: b4:80:fb:bf:74:d2:c6:79:18:4b:4c:36:6b:a1:d5:e2:d6:d9: c2:f3:94:ce:dc:f2:03:ad:91:54:8b:29:0d:84:c7:3e:1d:16: d5:1a:9b:15:c2:37:de:2d:d3:99:28:0f:52:e3:76:c5:74:fb: 61:31:9d:81:53:9c:8c:28:79:db:a1:3d:24:e0:75:ec:3f:92: 87:e2:de:bb:57:71:6b:96:88:91:c7:5f:10:1d:53:13:84:37: 38:5b:a6:61:b2:d5:6c:8d:1f:60:63:7f:9a:56:34:3c:55:f1: f4:a1:8a:e9:2f:47:a4:d1:9a:d4:a1:2e:be:a3:59:9c:9c:bf: a9:08:0b:97:68:e2:f2:95:6a:c8:79:fc:4c:92:50:3f:01:83: 2c:11:76:71:ad:a1:65:b8:89:72:0e:97:42:6d:cd:6b:a9:26: 10:8a:14:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ1QTIxMTAvBgNVBAUTKDFDMDQzMDc3MjQxNTczQ0VCODU4RDk1MUYwMkIyMjA1 N0JBMzk2RTcwHhcNMjYwNzIzMDA0MTQ3WhcNMjYwNzMwMDA0MTQ3WjAYMRYwFAYD VQQDEw02YTYxNjM0Yi05NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdcHepUsxQLptJIc6R1VYCATp5FiIE00JwTxU45vFusfkMmPuqaeo4vCsHjy 7ZAWKF/zWMb8nmwx0iAYleI01WB50ASz21PhMXHryEK5/hZAIYuR1sVnFEFTyuub D30zXBEq4SZpkDTvgGNoyYTavJ62EzXfDKi/c0LJ/7VXmomfQgFBD6Q1JeaEDxV+ +6bvrcWRNbJCElnFmLdAwOt4NkrovaDCZPnbE79UVLhOOYFP4Akr2STtvQllrvRO DvQ0+Q3AQVjJVMpeK7mp+G54+roEZecW01CECHYLOPO76Vs+6AmRgGVe7S8Dvf8O JvqwasKfXroc1L8n9i9IJ1lnUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmF41Lo EfFdkA3I5INTtn8rDNedMB8GA1UdIwQYMBaAFBwEMHckFXPOuFjZUfArIgV7o5bn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDVBMi9BM0QyRENBQTgw MDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4NjRXTmxSOENzaUJYdWps dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBUXdkeVFWYzg2NFdObFI4Q3NpQlh1amx1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDVBMi9BM0QyRENBQTgwMDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4 NjRXTmxSOENzaUJYdWpsdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiM+AEIfH/hSOnZzMXqjO7IfWjcrgJieVtYrCRt+kY+mxbIuTtW0TrDFusMec VeBmKTdxVi5jvHkqrSRAkZDfes40KXKpolMKl0ZNNDFwRXIirkbxmZwDGeLKtID7 v3TSxnkYS0w2a6HV4tbZwvOUztzyA62RVIspDYTHPh0W1RqbFcI33i3TmSgPUuN2 xXT7YTGdgVOcjCh526E9JOB17D+Sh+Leu1dxa5aIkcdfEB1TE4Q3OFumYbLVbI0f YGN/mlY0PFXx9KGK6S9HpNGa1KEuvqNZnJy/qQgLl2ji8pVqyHn8TJJQPwGDLBF2 ca2hZbiJcg6XQm3Na6kmEIoU2Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:08 2026 by rpki-client