$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft File: hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json) Hash identifier: al/dURV++ues/q00SkSArizRlRRIj0qSTiCKdZlYspg= Subject key identifier: F5:15:29:0B:83:A6:D9:A9:56:1D:2A:B0:62:4F:9B:EA:EF:7D:3B:19 Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA Certificate issuer: /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft Manifest number: 0C Signing time: Thu 23 Jul 2026 11:13:16 +0000 Manifest this update: Thu 23 Jul 2026 11:13:16 +0000 Manifest next update: Thu 30 Jul 2026 11:13:16 +0000 Files and hashes: 1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: Oo5DR0C7lpO/Obh5+HL4AB0S8BV66hY1KUx8EtcyQOk=) 2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA Validity Not Before: Jul 23 11:13:16 2026 GMT Not After : Jul 30 11:13:16 2026 GMT Subject: CN=6a61f74c-e376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:4d:dc:57:61:d6:b1:3f:c4:b7:c2:f2:36: 61:98:1e:7e:b2:23:65:9d:4e:4a:56:77:f9:10:d4: ed:2a:f0:93:59:ee:71:bb:8a:e8:59:74:d9:a1:26: 0d:25:36:35:40:4a:8e:37:68:72:28:88:c1:ab:a6: 5e:2e:f5:bb:77:60:d8:bb:88:2e:bb:4c:6d:1c:d6: 9f:de:62:a5:80:13:60:1c:cd:f1:ac:71:fb:5c:15: ed:2f:ac:de:73:96:51:dd:9e:23:2b:fe:1f:28:1b: a3:6e:e1:58:38:24:7d:f1:ce:93:bc:96:ff:2f:8d: dc:ab:5b:88:d4:cd:2a:5b:c0:15:65:96:6a:87:fa: 3f:6d:93:0e:1f:34:2a:3f:9d:c8:c7:ad:95:c2:93: b9:f0:fe:89:11:fc:e6:1c:13:8f:76:68:57:b7:fb: 99:29:85:34:28:fb:ec:de:73:8a:d8:5f:4f:60:66: ca:20:9c:58:b6:20:fe:86:02:00:35:19:46:a4:49: c3:59:9f:67:8e:22:0e:91:98:d8:78:70:b2:5e:c6: ec:62:1b:22:df:35:30:96:a0:79:88:ad:c3:13:5b: 41:94:ed:4b:55:9d:3b:76:3a:4c:e5:60:77:5e:7a: e4:11:c7:4c:9d:ab:61:05:52:ce:03:d6:35:d9:12: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:29:0B:83:A6:D9:A9:56:1D:2A:B0:62:4F:9B:EA:EF:7D:3B:19 X509v3 Authority Key Identifier: keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:af:ba:5b:8a:b7:6d:82:f9:43:59:da:aa:c9:68:66:16:08: 64:de:53:db:ba:f2:63:ef:ef:42:d9:6a:64:38:3c:80:e3:07: 77:05:93:fa:c7:d9:b0:8f:8a:d1:1e:2b:03:cb:1f:bc:74:73: fa:59:03:cf:77:e2:c1:90:5b:61:2d:ec:ce:34:ce:fd:eb:8d: 6c:fa:2d:4e:90:08:a4:e5:35:72:1b:c0:5f:d1:02:ae:a1:28: ba:4b:97:93:05:18:5d:86:b1:31:c6:5e:61:2a:07:e0:31:b0: cf:19:c4:77:91:6f:77:a1:d6:78:fd:49:8c:f0:dd:63:cd:b4: 0a:79:c9:13:8c:9a:75:1a:d6:d5:5c:44:3c:86:60:8d:56:55: d9:63:0a:5d:0f:0c:4a:bf:93:7d:d8:91:b9:af:93:c9:1c:d0: ec:71:34:62:45:96:6f:e5:04:b8:be:15:b6:44:9f:7c:9d:2c: 29:2e:80:2a:f2:48:21:d1:fb:0f:e1:cf:1f:e5:10:0a:a4:b9: 5a:44:87:b5:f4:3d:fb:52:5a:59:0b:4a:bf:49:c0:45:68:0d: a1:1a:3e:24:69:73:6a:e9:c2:08:2c:c6:00:0e:d2:27:f3:b4: c4:b0:78:16:91:92:38:a3:b0:70:ac:11:7b:9b:f8:79:91:3a: bb:84:97:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVCOTExMC8GA1UEBRMoODVDMDc2RkQ5RUMwNjlBQTNCRUI4NzUzNEU5NDdBODlD NDNEOTZDQTAeFw0yNjA3MjMxMTEzMTZaFw0yNjA3MzAxMTEzMTZaMBgxFjAUBgNV BAMTDTZhNjFmNzRjLWUzNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCG703cV2HWsT/Et8LyNmGYHn6yI2WdTkpWd/kQ1O0q8JNZ7nG7iuhZdNmhJg0l NjVASo43aHIoiMGrpl4u9bt3YNi7iC67TG0c1p/eYqWAE2AczfGscftcFe0vrN5z llHdniMr/h8oG6Nu4Vg4JH3xzpO8lv8vjdyrW4jUzSpbwBVllmqH+j9tkw4fNCo/ ncjHrZXCk7nw/okR/OYcE492aFe3+5kphTQo++zec4rYX09gZsognFi2IP6GAgA1 GUakScNZn2eOIg6RmNh4cLJexuxiGyLfNTCWoHmIrcMTW0GU7UtVnTt2OkzlYHde euQRx0ydq2EFUs4D1jXZEl9HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9RUpC4Om 2alWHSqwYk+b6u99OxkwHwYDVR0jBBgwFoAUhcB2/Z7Aaao764dTTpR6icQ9lsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzlGMjVBQzBBNzUx NzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFvNzY0ZFRUcFI2aWNROWxz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNCMl9aN0FhYW83NjRkVFRwUjZpY1E5bHNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUI5LzlGMjVBQzBBNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFv NzY0ZFRUcFI2aWNROWxzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2r7pbirdtgvlDWdqqyWhmFghk3lPbuvJj7+9C2WpkODyA4wd3BZP6x9mwj4rR HisDyx+8dHP6WQPPd+LBkFthLezONM79641s+i1OkAik5TVyG8Bf0QKuoSi6S5eT BRhdhrExxl5hKgfgMbDPGcR3kW93odZ4/UmM8N1jzbQKeckTjJp1GtbVXEQ8hmCN VlXZYwpdDwxKv5N92JG5r5PJHNDscTRiRZZv5QS4vhW2RJ98nSwpLoAq8kgh0fsP 4c8f5RAKpLlaRIe19D37UlpZC0q/ScBFaA2hGj4kaXNq6cIILMYADtIn87TEsHgW kZI4o7BwrBF7m/h5kTq7hJfW -----END CERTIFICATE-----Generated at Fri Jul 24 05:00:06 2026 by rpki-client