$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json) Hash identifier: 1v1WahaAIDi5iWMnU7yHxokZume9tuHRQxdOUZ8PHQU= Subject key identifier: B4:78:09:76:35:4F:AC:41:14:26:F7:7A:26:4D:CD:0A:FD:C6:5E:07 Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft Manifest number: 0251 Signing time: Thu 23 Jul 2026 03:30:59 +0000 Manifest this update: Thu 23 Jul 2026 03:30:58 +0000 Manifest next update: Thu 30 Jul 2026 03:30:58 +0000 Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: u3lxSPQfbg3OcAa326vrhHUhaPxzGaE+x00ou657VuI=) 2: 805A2E74660311EF90397033C4F9AE02.roa (hash: 5vtGlk0S0hYad6mDuGYTky+IHAV1KVmi2xi5vEoQKNE=) 3: 8405155C69EB11EF933A993CC4F9AE02.roa (hash: 6/dXduBGzp0fOt3H0jel27vj2BC5gLfjT1zUeVEO9J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Jul 23 03:30:58 2026 GMT Not After : Jul 30 03:30:58 2026 GMT Subject: CN=6a618af3-ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:fd:cc:3a:4d:2e:e9:39:37:21:ab:8e:80: 82:7a:15:84:5f:36:9d:bb:06:d4:f0:93:e1:78:b9: 6e:2d:8c:a5:60:ce:e3:02:22:2b:4e:af:70:1e:1f: e6:36:9f:14:9f:c5:e9:bf:ef:c9:1c:49:d0:dd:0f: 5c:c6:8d:ba:b9:cd:d7:f6:0f:92:df:04:0c:98:5a: 7e:f0:86:7e:d3:57:3c:c2:89:52:56:ae:e8:d4:05: 03:c7:01:c3:97:81:d4:a0:59:c0:2e:16:ee:a5:35: a2:4f:9f:74:1c:f1:72:1f:ed:d4:8f:61:89:36:6c: 30:02:bd:cd:3d:c6:dc:2e:5a:63:09:ad:1f:02:fd: d5:b5:4d:df:48:66:e6:e5:a6:38:90:9e:b5:70:b6: b0:a3:18:c3:74:dd:b7:c7:d0:4d:a3:46:2d:83:59: ab:db:bf:1e:31:61:a4:e3:0b:1e:e0:04:92:a9:b2: c8:a8:24:c6:db:4f:20:4a:d3:bd:8c:62:d2:a2:9a: d0:8e:af:cb:3b:8b:ff:0f:3b:4e:98:d8:a7:89:82: c8:9c:7e:ef:ba:a3:97:aa:de:1c:09:a6:04:a1:d3: 75:cb:e6:51:2e:5b:d5:1f:6d:44:00:87:53:e4:ee: 3a:a8:bf:34:4e:17:57:04:ca:72:3d:14:fc:04:c0: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:78:09:76:35:4F:AC:41:14:26:F7:7A:26:4D:CD:0A:FD:C6:5E:07 X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:52:22:f5:ec:23:61:f0:9b:fb:25:5a:5d:b9:37:03:5c:ac: da:d1:07:54:d9:d7:2d:b3:40:21:e7:30:19:74:54:8b:98:31: 4a:d7:2d:f3:b5:b5:39:e1:6d:2e:17:43:82:af:10:02:83:84: ec:49:1f:72:61:ee:e9:1a:8b:73:0a:e3:35:91:db:1c:a0:8f: 9b:46:55:d1:87:66:8c:06:5c:66:b3:50:c7:93:fa:d0:85:1a: 6e:db:86:a8:66:c9:0f:f2:98:45:fe:bf:e3:b5:86:c3:4a:f5: ff:5d:10:33:c6:f5:8d:14:99:26:6a:f8:40:06:88:af:a6:a4: 10:6e:f4:0c:35:fd:0b:35:22:84:f8:19:7d:ae:3d:0b:bd:e3: a0:12:0c:1c:99:d5:d4:ef:d2:b0:6e:00:b9:f0:57:e6:10:f6: 1e:54:53:11:a2:22:56:07:1f:b3:5f:8e:cb:fb:3a:c9:d4:82: f6:7c:31:7b:04:05:b4:bd:f8:17:c8:bc:83:b0:1f:e2:c9:ff: 12:7d:12:da:fb:65:cb:80:64:03:f9:a9:04:e8:81:b7:8c:19: 25:36:46:f5:d5:95:fc:fe:ca:de:c0:93:73:9d:5c:17:53:4f: 1f:8a:cb:59:a4:d6:2e:4d:dc:6b:ba:1e:2e:dd:50:de:83:70: 2e:11:60:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwNzIzMDMzMDU4WhcNMjYwNzMwMDMzMDU4WjAYMRYwFAYD VQQDEw02YTYxOGFmMy1lZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxT9zDpNLuk5NyGrjoCCehWEXzaduwbU8JPheLluLYylYM7jAiIrTq9wHh/m Np8Un8Xpv+/JHEnQ3Q9cxo26uc3X9g+S3wQMmFp+8IZ+01c8wolSVq7o1AUDxwHD l4HUoFnALhbupTWiT590HPFyH+3Uj2GJNmwwAr3NPcbcLlpjCa0fAv3VtU3fSGbm 5aY4kJ61cLawoxjDdN23x9BNo0Ytg1mr278eMWGk4wse4ASSqbLIqCTG208gStO9 jGLSoprQjq/LO4v/DztOmNiniYLInH7vuqOXqt4cCaYEodN1y+ZRLlvVH21EAIdT 5O46qL80ThdXBMpyPRT8BMBzFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLR4CXY1 T6xBFCb3eiZNzQr9xl4HMB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1 U0k3enR1SVNXNGVPWkFja2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlIi9ewjYfCb+yVaXbk3A1ys2tEHVNnXLbNAIecwGXRUi5gxStct87W1OeFt LhdDgq8QAoOE7EkfcmHu6RqLcwrjNZHbHKCPm0ZV0YdmjAZcZrNQx5P60IUabtuG qGbJD/KYRf6/47WGw0r1/10QM8b1jRSZJmr4QAaIr6akEG70DDX9CzUihPgZfa49 C73joBIMHJnV1O/SsG4AufBX5hD2HlRTEaIiVgcfs1+Oy/s6ydSC9nwxewQFtL34 F8i8g7Af4sn/En0S2vtly4BkA/mpBOiBt4wZJTZG9dWV/P7K3sCTc51cF1NPH4rL WaTWLk3ca7oeLt1Q3oNwLhFgTg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:49:42 2026 by rpki-client