$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: KA2Pxxf0LVJaSFa7D8xPtIZqXIKqNvzqtU4+cYXKUNM= Subject key identifier: 9F:BD:AC:77:27:2C:98:2A:4C:77:96:C8:C1:80:4E:3F:42:1D:C0:A7 Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 0586 Signing time: Thu 23 Jul 2026 00:02:55 +0000 Manifest this update: Thu 23 Jul 2026 00:02:54 +0000 Manifest next update: Thu 30 Jul 2026 00:02:54 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: nIqRjtOH2v3UzXZQbPGSpIjFwCjktRO/2lL9AIpc8UQ=) 2: FE0D78046DE911F18A77D2D25CA30FBC.roa (hash: XiBXgFzUAWL1pwnYSYxy1I5MTxdL8wu1faYe0BCjxYY=) 3: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Jul 23 00:02:54 2026 GMT Not After : Jul 30 00:02:54 2026 GMT Subject: CN=6a615a2e-e736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:56:af:3a:44:40:0f:c6:d5:1c:94:b1:ec: 9a:f5:9f:39:78:d9:7e:34:a2:f0:e1:17:c0:10:4e: 03:7b:b9:ed:fe:14:1e:2d:a6:88:43:21:4e:43:cb: a1:2f:b9:65:21:9c:60:cf:cc:7f:85:4f:d3:f8:cb: 1b:32:fa:dc:d6:89:53:5b:5c:cf:70:00:ee:f4:30: 18:74:05:84:98:75:92:77:d0:4c:5b:ff:7f:0b:f7: 89:87:3f:21:da:b8:ad:e2:91:dc:10:62:42:5d:de: 38:ea:ed:25:75:8d:9a:8f:98:b9:2a:d5:4e:7f:9c: 32:89:3e:55:4a:df:3c:3b:3c:59:5b:06:f1:cf:f0: 32:d2:7c:a6:65:03:a9:9f:c3:59:66:ed:c2:a2:d6: d5:80:31:cc:38:3e:ef:f6:81:e3:c7:9f:90:57:cb: 12:78:8c:b2:5e:af:b6:6e:d1:ab:04:39:f2:28:9c: 02:87:eb:5e:fd:6f:9c:82:c1:ce:19:08:87:5e:09: 3d:f0:25:c8:97:90:3e:c3:2c:5a:52:ba:c4:dc:05: 92:ab:4f:77:07:55:de:62:3c:28:d6:d4:ca:36:e2: 1d:e8:b4:03:db:ed:8e:77:ea:c0:7d:2e:a8:2a:de: 17:98:83:c3:0f:5e:07:6c:76:c3:e5:0e:26:7f:81: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:AC:77:27:2C:98:2A:4C:77:96:C8:C1:80:4E:3F:42:1D:C0:A7 X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:97:66:13:35:db:af:24:e2:6a:18:0c:97:00:01:b1:92:85: 7b:9d:5a:55:1a:d7:9a:9a:77:cb:d4:dc:ad:e0:b3:be:e8:83: 15:cf:a7:67:16:f3:d9:0b:0a:8c:ba:ce:76:c0:d8:66:5c:d3: ff:50:77:c3:ab:40:c4:05:32:36:52:65:9d:c7:ab:8f:3e:02: 67:43:99:6e:1d:f1:e3:e2:b8:66:6b:86:6d:21:fd:28:77:73: d3:ba:38:1e:82:11:14:2f:99:57:56:2e:9c:2c:19:0f:17:98: 46:16:ba:24:00:33:09:24:31:e5:f6:f2:1a:b0:f1:a9:f3:c0: 7e:0e:38:dd:f8:c4:d0:3e:01:1f:fa:aa:41:04:89:a5:3f:15: 9a:7c:1d:30:68:88:d8:c1:a9:5a:d9:28:7b:8a:91:95:77:23: 4a:83:98:cc:17:ca:d0:65:bb:78:30:2d:45:0a:27:5b:5e:fd: 56:c9:10:d7:28:22:78:79:a9:c2:82:99:f2:d2:69:d1:84:2f: 9e:25:2a:fd:da:f6:61:82:c3:78:99:10:fa:5f:3e:17:e9:b2: 14:73:97:d6:be:1f:21:cd:e7:b6:dd:3f:13:f5:6f:df:1b:94: f1:ea:cd:e4:0e:b7:59:12:d5:57:0f:74:65:10:f6:bd:1f:cc: 32:68:fa:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjYwNzIzMDAwMjU0WhcNMjYwNzMwMDAwMjU0WjAYMRYwFAYD VQQDEw02YTYxNWEyZS1lNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMNWrzpEQA/G1RyUseya9Z85eNl+NKLw4RfAEE4De7nt/hQeLaaIQyFOQ8uh L7llIZxgz8x/hU/T+MsbMvrc1olTW1zPcADu9DAYdAWEmHWSd9BMW/9/C/eJhz8h 2rit4pHcEGJCXd446u0ldY2aj5i5KtVOf5wyiT5VSt88OzxZWwbxz/Ay0nymZQOp n8NZZu3CotbVgDHMOD7v9oHjx5+QV8sSeIyyXq+2btGrBDnyKJwCh+te/W+cgsHO GQiHXgk98CXIl5A+wyxaUrrE3AWSq093B1XeYjwo1tTKNuId6LQD2+2Od+rAfS6o Kt4XmIPDD14HbHbD5Q4mf4Hi+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+9rHcn LJgqTHeWyMGATj9CHcCnMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJdmEzXbryTiahgMlwABsZKFe51aVRrXmpp3y9TcreCzvuiDFc+nZxbz2QsK jLrOdsDYZlzT/1B3w6tAxAUyNlJlncerjz4CZ0OZbh3x4+K4ZmuGbSH9KHdz07o4 HoIRFC+ZV1YunCwZDxeYRha6JAAzCSQx5fbyGrDxqfPAfg443fjE0D4BH/qqQQSJ pT8VmnwdMGiI2MGpWtkoe4qRlXcjSoOYzBfK0GW7eDAtRQonW179VskQ1ygieHmp woKZ8tJp0YQvniUq/dr2YYLDeJkQ+l8+F+myFHOX1r4fIc3ntt0/E/Vv3xuU8erN 5A63WRLVVw90ZRD2vR/MMmj6qw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:29 2026 by rpki-client