$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: pd11MhnYA575ojO9r21GX1jr57sl87q/QDIVQ8krmc8= Subject key identifier: 55:06:8A:A6:E4:C4:13:D5:F2:9B:BC:D4:A0:57:E7:FF:D3:46:D1:34 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01A9 Signing time: Thu 23 Jul 2026 05:33:11 +0000 Manifest this update: Thu 23 Jul 2026 05:33:10 +0000 Manifest next update: Thu 30 Jul 2026 05:33:10 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: M0HUws4E+9RCmfqlFCuhPj5x8xmEcy2E4iy2ko0/oDw=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Jul 23 05:33:10 2026 GMT Not After : Jul 30 05:33:10 2026 GMT Subject: CN=6a61a797-2f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:3b:30:36:9b:bd:c6:05:a4:a9:80:27:7e: 47:d2:7f:12:8f:a9:34:42:a0:33:45:ae:9b:84:09: 99:15:12:61:1c:14:6c:cd:10:3e:b7:fc:64:ab:4c: a7:8c:00:3a:30:d7:47:76:b1:72:5b:a3:b3:fd:ce: fb:f7:a5:cf:21:5f:b9:e3:cc:8b:92:95:9c:fb:b2: cf:c9:9e:cb:00:bd:00:62:a0:94:37:bd:70:30:17: c6:a3:39:2e:fb:c5:7e:3b:4e:bd:bc:ba:bd:c5:e8: 68:f7:a8:1d:02:cc:da:18:68:75:71:24:2e:01:d8: 69:ed:18:8e:e5:dc:2e:e8:68:9f:41:69:13:c9:12: 7c:1e:71:a2:f2:8f:44:17:58:aa:b4:10:9f:8f:95: 14:44:e7:19:f3:ea:8c:28:bc:0d:a9:cb:e5:6b:0d: 52:42:47:b6:c8:1f:78:ef:fb:c5:d3:7d:5a:8e:42: 6c:70:47:cd:2c:61:79:07:10:a3:30:12:f8:6e:18: 52:14:a9:73:5d:bb:42:34:a9:c8:3b:12:9a:76:b6: 01:63:47:8f:5f:52:e7:a7:a2:e6:f3:f0:4d:83:58: 55:dc:67:e5:4a:26:c4:b2:1c:a9:34:ad:a0:36:21: 8f:b1:aa:38:bd:24:c6:2a:50:95:42:c2:ac:09:74: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:8A:A6:E4:C4:13:D5:F2:9B:BC:D4:A0:57:E7:FF:D3:46:D1:34 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:ff:45:e6:e9:03:4f:d5:cd:05:60:11:02:45:3f:30:21: 03:7f:0a:12:c2:66:d1:27:30:b5:68:2b:a6:e4:22:2e:c8:41: 7b:48:8f:f0:21:2f:60:b1:82:fe:ef:f1:c1:19:8b:61:88:3c: b2:a2:e3:e6:19:16:38:0f:73:a0:2c:e0:86:48:7b:8f:33:9a: a9:93:74:b2:ce:f3:c5:19:e5:50:2e:c1:e8:f1:9c:fb:74:68: eb:fc:2b:eb:24:12:02:8f:e7:f8:1a:61:68:22:07:9e:92:7f: fc:4c:4b:a9:09:9e:32:05:da:ab:78:1a:15:74:ed:7a:90:41: 6c:9e:99:f5:64:25:ca:da:da:66:0d:cf:15:08:b6:82:2d:eb: f3:6a:8d:e0:a0:9c:22:09:35:33:0d:91:aa:3d:0b:39:c5:7c: d4:49:ed:26:f8:44:a3:bb:fa:f6:c6:e6:92:88:5b:e9:45:f1: d2:27:81:bd:05:07:a4:bf:a8:bb:1a:4b:62:bb:27:11:7a:55: 01:91:09:59:b7:b8:bf:8f:67:e7:bf:f3:0e:51:13:fb:c9:9f: 8b:eb:b8:4c:74:f6:ba:a1:cf:c1:e2:2b:e6:9f:7a:fc:ec:49: 49:0e:8d:3d:c4:e7:10:38:79:d8:1a:11:f1:f1:ad:34:ed:97: 30:90:5a:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwNzIzMDUzMzEwWhcNMjYwNzMwMDUzMzEwWjAYMRYwFAYD VQQDEw02YTYxYTc5Ny0yZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYE7MDabvcYFpKmAJ35H0n8Sj6k0QqAzRa6bhAmZFRJhHBRszRA+t/xkq0yn jAA6MNdHdrFyW6Oz/c7796XPIV+548yLkpWc+7LPyZ7LAL0AYqCUN71wMBfGozku +8V+O069vLq9xeho96gdAszaGGh1cSQuAdhp7RiO5dwu6GifQWkTyRJ8HnGi8o9E F1iqtBCfj5UUROcZ8+qMKLwNqcvlaw1SQke2yB947/vF031ajkJscEfNLGF5BxCj MBL4bhhSFKlzXbtCNKnIOxKadrYBY0ePX1Lnp6Lm8/BNg1hV3GflSibEshypNK2g NiGPsao4vSTGKlCVQsKsCXSeAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUGiqbk xBPV8pu81KBX5//TRtE0MB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASU3/RebpA0/VzQVgEQJFPzAhA38KEsJm0ScwtWgrpuQiLshBe0iP8CEvYLGC /u/xwRmLYYg8sqLj5hkWOA9zoCzghkh7jzOaqZN0ss7zxRnlUC7B6PGc+3Ro6/wr 6yQSAo/n+BphaCIHnpJ//ExLqQmeMgXaq3gaFXTtepBBbJ6Z9WQlytraZg3PFQi2 gi3r82qN4KCcIgk1Mw2Rqj0LOcV81EntJvhEo7v69sbmkohb6UXx0ieBvQUHpL+o uxpLYrsnEXpVAZEJWbe4v49n57/zDlET+8mfi+u4THT2uqHPweIr5p96/OxJSQ6N PcTnEDh52BoR8fGtNO2XMJBaKg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:53:22 2026 by rpki-client