$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft File: HLlfP3vebhmbdAuSgqxyKk7amZs.mft (raw, json) Hash identifier: 1UmOfkrbtRbJvrqER16pjonHArEuyvghhksP+FHB07U= Subject key identifier: BD:DE:64:07:82:93:D8:02:45:5D:7D:1F:30:23:46:37:75:32:0C:68 Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B Certificate issuer: /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft Manifest number: 7E Signing time: Thu 23 Jul 2026 09:50:34 +0000 Manifest this update: Thu 23 Jul 2026 09:50:33 +0000 Manifest next update: Thu 30 Jul 2026 09:50:33 +0000 Files and hashes: 1: HLlfP3vebhmbdAuSgqxyKk7amZs.crl (hash: ozoRdeCWkueoLUMpWjldJzlpW3UCnE+iJOnJppwfc6Y=) 2: 304D9EDEF13A11F0A5B04E41566F56BC.roa (hash: AC/jIeXBOHw70y2QOJSmCZ+NDE9I0e7M9WpwuYpLz9U=) 3: 0C1F9D8CF13A11F08789470C566F56BC.roa (hash: sgoDIUBe0jr7XN1MyW0ONqjTLm6kK+bIbhy55Li2/S8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Validity Not Before: Jul 23 09:50:33 2026 GMT Not After : Jul 30 09:50:33 2026 GMT Subject: CN=6a61e3ea-d6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:48:16:a0:31:f2:c0:6f:6a:05:90:c1:42: 34:6b:92:f1:ef:bd:57:09:cd:b1:61:77:4b:ec:98: 7c:0a:88:09:54:d9:12:72:68:f6:56:a0:03:80:e8: 71:a1:8c:f0:f6:ab:5c:6b:0c:9f:c9:3b:1b:97:d7: 80:61:73:5c:74:ab:3c:6b:62:a6:4c:64:ca:38:8e: 22:5f:5c:87:b6:54:e9:16:0b:81:9f:94:0c:be:ce: 66:d1:7d:d9:fd:60:06:f7:32:90:1d:25:17:fd:fb: 23:28:22:f6:b3:c2:f9:6c:86:10:c9:e4:6c:43:f8: 7e:8b:1a:66:7d:d1:96:1a:77:a9:4f:ca:70:58:f1: 3f:d0:86:90:0b:34:25:57:bb:e7:ed:ff:90:5e:64: 29:c1:78:a2:64:fb:00:24:ac:e3:52:ca:9e:31:a9: 2d:1a:11:3e:45:a7:ba:af:c0:ad:a3:9a:2c:8a:15: 46:18:88:af:df:f4:8f:64:c3:7c:b9:47:8c:43:a8: c3:0b:3b:d5:50:60:eb:05:df:24:0a:df:51:23:d8: be:3a:17:7b:80:38:86:05:90:28:ea:b2:db:0f:68: f5:8f:48:d7:2e:41:90:0c:7c:af:09:f0:15:5b:fa: c0:e7:43:9e:b0:08:25:42:f4:32:0c:3e:61:bb:f0: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:64:07:82:93:D8:02:45:5D:7D:1F:30:23:46:37:75:32:0C:68 X509v3 Authority Key Identifier: keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:25:6f:6b:9f:21:ec:0f:00:68:ac:31:f3:e3:7a:6a:0d:c4: 21:13:d6:68:c4:b8:8f:2a:1e:a6:1e:88:ee:85:a0:01:f7:03: 1d:26:68:a6:d9:05:f4:fc:b7:93:fc:8e:5f:e9:9f:0d:ef:55: 9b:b2:d8:50:41:22:e9:c6:45:92:81:ed:80:71:80:40:d8:42: ad:85:14:a6:16:b6:b0:2d:f3:c0:2b:fa:27:28:a6:9f:6c:55: 2e:e6:c4:9c:5c:df:e8:3b:7f:ef:ac:f9:49:cc:96:c5:88:0a: df:cb:f3:b0:69:3b:8c:8b:2c:9c:92:90:44:5e:8b:39:c9:2f: 11:07:29:06:c2:98:f6:68:a6:a6:4b:f5:72:42:ed:42:bc:f8: 3d:79:5c:bf:f5:7f:80:e0:40:21:5d:c1:7f:c4:7a:f4:35:12: e3:d6:c1:9f:be:dc:55:c4:81:be:02:ae:9c:7a:f6:49:30:26: 9c:78:a3:de:dd:5f:30:d5:15:64:04:d9:44:21:b1:f5:a5:bf: 5f:aa:0c:fd:83:97:f3:25:e7:26:f5:a8:b2:fb:06:1e:4d:8f: b2:2f:5d:76:f6:c2:15:bf:c8:99:9c:d0:f2:be:e0:5e:ef:9c: c4:26:72:bb:e1:e2:57:36:9d:cb:06:aa:fe:4f:60:46:97:17: 8c:dd:d5:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRUYxMTAvBgNVBAUTKDFDQjk1RjNGN0JERTZFMTk5Qjc0MEI5MjgyQUM3MjJB NEVEQTk5OUIwHhcNMjYwNzIzMDk1MDMzWhcNMjYwNzMwMDk1MDMzWjAYMRYwFAYD VQQDEw02YTYxZTNlYS1kNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwNIFqAx8sBvagWQwUI0a5Lx771XCc2xYXdL7Jh8CogJVNkScmj2VqADgOhx oYzw9qtcawyfyTsbl9eAYXNcdKs8a2KmTGTKOI4iX1yHtlTpFguBn5QMvs5m0X3Z /WAG9zKQHSUX/fsjKCL2s8L5bIYQyeRsQ/h+ixpmfdGWGnepT8pwWPE/0IaQCzQl V7vn7f+QXmQpwXiiZPsAJKzjUsqeMaktGhE+Rae6r8Cto5osihVGGIiv3/SPZMN8 uUeMQ6jDCzvVUGDrBd8kCt9RI9i+Ohd7gDiGBZAo6rLbD2j1j0jXLkGQDHyvCfAV W/rA50OesAglQvQyDD5hu/AttQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3eZAeC k9gCRV19HzAjRjd1MgxoMB8GA1UdIwQYMBaAFBy5Xz973m4Zm3QLkoKscipO2pmb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVFRi9DRUE4MzZCQURF RjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJobWJkQXVTZ3F4eUtrN2Ft WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMbGZQM3ZlYmhtYmRBdVNncXh5S2s3YW1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVFRi9DRUE4MzZCQURFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy9ITGxmUDN2ZWJo bWJkQXVTZ3F4eUtrN2FtWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArCVva58h7A8AaKwx8+N6ag3EIRPWaMS4jyoeph6I7oWgAfcDHSZoptkF9Py3 k/yOX+mfDe9Vm7LYUEEi6cZFkoHtgHGAQNhCrYUUpha2sC3zwCv6Jyimn2xVLubE nFzf6Dt/76z5ScyWxYgK38vzsGk7jIssnJKQRF6LOckvEQcpBsKY9mimpkv1ckLt Qrz4PXlcv/V/gOBAIV3Bf8R69DUS49bBn77cVcSBvgKunHr2STAmnHij3t1fMNUV ZATZRCGx9aW/X6oM/YOX8yXnJvWosvsGHk2Psi9ddvbCFb/ImZzQ8r7gXu+cxCZy u+HiVzadywaq/k9gRpcXjN3Vgg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:44:46 2026 by rpki-client