$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: cmEWZ+I7aKn2C68jdcK3I2XeqZSWxunBu/mfAoPBTZY= Subject key identifier: 4C:78:A7:5A:9D:B7:69:F9:B4:E0:1B:39:3F:F2:19:81:07:68:24:61 Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 83 Signing time: Thu 23 Jul 2026 09:29:39 +0000 Manifest this update: Thu 23 Jul 2026 09:29:39 +0000 Manifest next update: Thu 30 Jul 2026 09:29:39 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: k728dH6Lro5SXbY1wW2OElDDVTtO/UbG7QTiHkc6Wyg=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Jul 23 09:29:39 2026 GMT Not After : Jul 30 09:29:39 2026 GMT Subject: CN=6a61df03-278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:fb:8c:c5:5b:5a:e8:d4:3f:e9:0b:6d:04: 1a:22:1a:13:5e:b5:3b:5f:14:2a:72:8e:fa:db:22: 94:0e:97:31:45:8b:e0:e9:a6:e3:7c:50:10:73:74: 04:c8:8f:f4:a3:36:35:a2:41:3b:39:92:43:35:0f: 91:b3:66:dc:0f:58:20:22:2a:4d:3a:73:8c:25:43: 96:8c:ab:47:3e:9b:fa:7a:5c:06:2c:5b:6c:6b:dd: 98:2d:e4:2a:20:3b:9f:81:1b:9a:7b:b9:2d:f3:1a: b6:b8:89:bb:1e:2e:57:5c:ba:f2:dc:89:68:9f:b1: 81:a4:2d:a4:21:90:a4:c9:b3:43:25:df:57:f4:60: 08:2a:c0:18:38:09:a0:92:e2:45:06:c6:49:60:50: 68:5c:76:fa:6c:8f:2a:be:95:e2:38:27:27:92:a2: 75:d7:a4:91:e0:38:1c:1f:ca:15:12:18:2c:3c:1b: d0:d0:fe:a9:e2:4a:6e:06:14:67:e8:dd:b4:a8:98: ca:b6:79:ec:3f:1e:93:47:3f:12:d2:18:5f:15:bc: e9:8b:79:cf:ae:8d:86:e7:5e:4e:42:6c:90:e6:dd: ee:bf:ef:aa:c8:0a:8b:ba:c8:f9:d5:2b:9a:74:aa: d2:2c:8f:4a:da:09:78:d7:2f:c4:19:76:ce:8f:4b: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:78:A7:5A:9D:B7:69:F9:B4:E0:1B:39:3F:F2:19:81:07:68:24:61 X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a7:c6:e6:eb:d4:63:24:6e:8b:7e:cf:91:05:63:39:56:46: f7:9f:6f:54:a9:4a:fe:2e:0a:f6:a1:98:69:81:21:ad:2e:c9: c5:46:57:9e:82:4e:ce:ba:77:11:80:7c:f5:f3:7f:16:5c:f8: c6:ca:35:cf:ae:df:02:67:98:c5:f4:72:30:8e:45:71:13:1b: 5b:63:7d:37:40:e7:aa:4a:b9:48:0f:c0:46:43:8e:df:d8:ff: 7f:09:59:f2:61:03:8d:7b:2c:7d:21:54:de:2d:7c:2e:74:7d: 99:64:05:27:5e:16:fe:5b:55:0f:b9:59:0f:87:09:79:ab:e7: 5b:4d:25:fe:d3:e6:35:7c:3e:94:9f:5c:eb:cf:b8:81:80:a2: 72:b6:2f:45:82:02:5f:90:10:2d:01:9b:60:c6:f3:98:b5:a7: c7:25:58:a4:b8:4e:43:9d:11:93:f2:fc:5d:12:8d:71:b1:d0: 41:79:f9:f6:08:02:a5:fc:52:b5:88:56:b5:bb:4b:ae:c1:00: 92:09:f5:4e:99:11:84:1c:79:aa:76:1b:0f:1e:9a:7f:d7:6e: b4:68:52:26:b5:ea:28:fa:27:09:94:a5:55:ef:87:70:93:7a: ae:97:2a:49:06:16:1f:32:ec:39:d6:f4:d9:b6:5a:fa:94:d3: 63:e8:ec:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUwMUUxMTAvBgNVBAUTKDg1MDg3RDA4RURCMzM3RUUwMUVCMUFFRUI4MTJDQkVF MzRBRDhFNjMwHhcNMjYwNzIzMDkyOTM5WhcNMjYwNzMwMDkyOTM5WjAYMRYwFAYD VQQDEw02YTYxZGYwMy0yNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tz7jMVbWujUP+kLbQQaIhoTXrU7XxQqco762yKUDpcxRYvg6abjfFAQc3QE yI/0ozY1okE7OZJDNQ+Rs2bcD1ggIipNOnOMJUOWjKtHPpv6elwGLFtsa92YLeQq IDufgRuae7kt8xq2uIm7Hi5XXLry3Ilon7GBpC2kIZCkybNDJd9X9GAIKsAYOAmg kuJFBsZJYFBoXHb6bI8qvpXiOCcnkqJ116SR4DgcH8oVEhgsPBvQ0P6p4kpuBhRn 6N20qJjKtnnsPx6TRz8S0hhfFbzpi3nPro2G515OQmyQ5t3uv++qyAqLusj51Sua dKrSLI9K2gl41y/EGXbOj0u8PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx4p1qd t2n5tOAbOT/yGYEHaCRhMB8GA1UdIwQYMBaAFIUIfQjtszfuAesa7rgSy+40rY5j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTAxRS8xNDQ3QzBEOEJF QzgxMUYwODI3MzY2MEJDNEY5QUUwMi9oUWg5Q08yek4tNEI2eHJ1dUJMTDdqU3Rq bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGptTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTAxRS8xNDQ3QzBEOEJFQzgxMUYwODI3MzY2MEJDNEY5QUUwMi9oUWg5Q08yek4t NEI2eHJ1dUJMTDdqU3RqbU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKfG5uvUYyRui37PkQVjOVZG959vVKlK/i4K9qGYaYEhrS7JxUZXnoJOzrp3 EYB89fN/Flz4xso1z67fAmeYxfRyMI5FcRMbW2N9N0Dnqkq5SA/ARkOO39j/fwlZ 8mEDjXssfSFU3i18LnR9mWQFJ14W/ltVD7lZD4cJeavnW00l/tPmNXw+lJ9c68+4 gYCicrYvRYICX5AQLQGbYMbzmLWnxyVYpLhOQ50Rk/L8XRKNcbHQQXn59ggCpfxS tYhWtbtLrsEAkgn1TpkRhBx5qnYbDx6af9dutGhSJrXqKPonCZSlVe+HcJN6rpcq SQYWHzLsOdb02bZa+pTTY+jsFQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:40:22 2026 by rpki-client