$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json) Hash identifier: IRU16BgOnlxHhjlpJeiH7bXr9FxJeN4ZDpKaNXueS9M= Subject key identifier: 10:DD:6F:A6:D6:B7:0A:C5:B3:6A:0B:FA:0D:E7:92:8C:26:AC:31:BD Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 09:50:54 +0000 Manifest this update: Thu 23 Jul 2026 09:50:54 +0000 Manifest next update: Thu 30 Jul 2026 09:50:54 +0000 Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: VMBNO1ada3ON+4jP+jiMKyh4PERZqMApReCPOaqzZTs=) 2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Validity Not Before: Jul 23 09:50:54 2026 GMT Not After : Jul 30 09:50:54 2026 GMT Subject: CN=6a61e3fe-380b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:94:33:ce:ac:84:71:09:10:25:a1:28:59: 8e:2f:07:80:ef:63:2d:16:7b:56:6d:77:ac:4e:d6: 28:3c:9e:8d:1b:29:56:5f:ea:12:b8:25:39:69:7e: 37:af:4e:e5:fb:ae:58:56:b3:0e:5d:a4:8c:55:32: 7e:6e:0e:d3:ea:05:0e:ba:c1:75:fb:ac:3c:47:e2: 7c:7e:fc:d7:7d:a5:fe:d9:4b:be:fb:76:8d:1f:fa: 90:e0:61:59:24:89:fb:ae:30:9c:0f:c7:30:84:f5: db:4b:4c:f5:a5:3c:72:79:41:4d:ab:00:b4:80:13: d4:ab:89:cb:3b:98:64:e1:94:0a:b6:ab:7a:f3:03: ee:66:04:33:f5:00:66:2f:23:e7:49:c3:88:56:11: c4:5c:a6:49:a4:07:a8:aa:84:40:35:eb:97:14:fa: b1:88:19:cc:0e:19:e5:3e:d8:d3:37:e1:1e:26:0c: ef:d0:02:e7:2c:ee:e7:89:4b:b3:e2:cb:1c:f9:34: 28:b2:31:fd:b4:ab:08:b0:35:af:2f:30:c8:1d:6a: 46:fa:92:64:ae:e0:60:4e:79:d6:aa:dc:04:92:d6: 18:26:e2:e3:fd:57:92:01:56:d9:aa:b9:48:32:d7: d6:6e:39:47:4d:d8:d2:95:5f:30:3c:47:ba:ac:af: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DD:6F:A6:D6:B7:0A:C5:B3:6A:0B:FA:0D:E7:92:8C:26:AC:31:BD X509v3 Authority Key Identifier: keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:43:4e:84:6e:bb:5c:fa:4d:43:48:b3:fc:2c:1c:48:15:5b: 06:74:01:74:6d:0e:7c:0a:8f:9c:48:df:d4:4c:3a:ca:99:3f: f4:63:85:e0:9e:91:00:32:ca:60:d0:52:34:6b:e6:67:0d:ee: 21:a0:18:72:4b:30:f4:a1:0f:04:70:d8:7e:2b:db:0d:10:62: 69:59:c2:1a:ea:00:1d:01:f6:3a:33:c8:9e:30:ea:59:9f:e4: 2d:85:e9:23:f8:8e:40:a7:7e:8b:b7:d8:39:57:7b:a2:44:77: 52:9e:c6:f5:9e:85:e2:e5:39:47:f5:2f:45:43:95:31:b1:be: 3f:42:58:8d:04:ec:63:e5:c7:56:ff:06:ad:30:e6:77:f5:58: 70:ca:82:89:e8:f3:fc:4f:ec:1f:76:7c:ec:5f:a2:6a:1b:0e: c9:8c:12:de:17:a6:bc:e8:40:ee:27:78:5a:52:6e:0e:3f:7e: 96:88:82:e5:2a:df:91:e3:b2:a8:23:e8:96:29:6b:c1:f3:81: 09:2b:64:1a:71:46:0c:7c:1e:25:9d:75:94:fc:18:90:a5:7b: 7f:a6:d2:97:85:f4:6d:a9:04:99:8a:62:43:e5:0b:81:f6:c3: f6:9e:9d:89:cb:19:c5:6a:07:aa:a8:a8:ca:8c:f9:0b:63:f6: 05:87:27:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjUzQjExMC8GA1UEBRMoODY0Qjg4OUE1Mzc4NzEwOTg1MjY1NDFGMEVCOTEyNTZG REFGQTdCMTAeFw0yNjA3MjMwOTUwNTRaFw0yNjA3MzAwOTUwNTRaMBgxFjAUBgNV BAMTDTZhNjFlM2ZlLTM4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmXpQzzqyEcQkQJaEoWY4vB4DvYy0We1Ztd6xO1ig8no0bKVZf6hK4JTlpfjev TuX7rlhWsw5dpIxVMn5uDtPqBQ66wXX7rDxH4nx+/Nd9pf7ZS777do0f+pDgYVkk ifuuMJwPxzCE9dtLTPWlPHJ5QU2rALSAE9Srics7mGThlAq2q3rzA+5mBDP1AGYv I+dJw4hWEcRcpkmkB6iqhEA165cU+rGIGcwOGeU+2NM34R4mDO/QAucs7ueJS7Pi yxz5NCiyMf20qwiwNa8vMMgdakb6kmSu4GBOedaq3ASS1hgm4uP9V5IBVtmquUgy 19ZuOUdN2NKVXzA8R7qsr/ClAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEN1vpta3 CsWzagv6DeeSjCasMb0wHwYDVR0jBBgwFoAUhkuImlN4cQmFJlQfDrkSVv2vp7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCLzAwREE5RDY4RTAx QTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1FtRkpsUWZEcmtTVnYydnA3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt1SW1sTjRjUW1GSmxRZkRya1NWdjJ2cDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCLzAwREE5RDY4RTAxQTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1Ft RkpsUWZEcmtTVnYydnA3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDMQ06Ebrtc+k1DSLP8LBxIFVsGdAF0bQ58Co+cSN/UTDrKmT/0Y4XgnpEAMspg 0FI0a+ZnDe4hoBhySzD0oQ8EcNh+K9sNEGJpWcIa6gAdAfY6M8ieMOpZn+Qthekj +I5Ap36Lt9g5V3uiRHdSnsb1noXi5TlH9S9FQ5Uxsb4/QliNBOxj5cdW/watMOZ3 9VhwyoKJ6PP8T+wfdnzsX6JqGw7JjBLeF6a86EDuJ3haUm4OP36WiILlKt+R47Ko I+iWKWvB84EJK2QacUYMfB4lnXWU/BiQpXt/ptKXhfRtqQSZimJD5QuB9sP2np2J yxnFageqqKjKjPkLY/YFhyd6 -----END CERTIFICATE-----Generated at Fri Jul 24 03:22:42 2026 by rpki-client