$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: FkPxQcRYR3Q1JGdVcypirfGcbtCK/d45of7BjQE1GiA= Subject key identifier: CD:29:7F:94:63:E5:A6:46:69:C9:57:49:01:D3:FC:68:36:1A:09:FD Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 09:27:03 +0000 Manifest this update: Thu 23 Jul 2026 09:27:03 +0000 Manifest next update: Thu 30 Jul 2026 09:27:03 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: 2RQbq89dLUS8gBHlgF56rT4g7xC2hEn22ss2fFwBgbI=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Jul 23 09:27:03 2026 GMT Not After : Jul 30 09:27:03 2026 GMT Subject: CN=6a61de67-67f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:b5:d0:6e:b8:2c:21:54:97:ed:d3:86:4d: a7:29:f8:35:a6:e7:7e:48:24:17:e3:0e:b4:81:d4: e8:10:db:a5:6a:6f:e9:d4:15:9c:40:6c:6a:ae:df: a2:29:09:c1:04:a1:4e:6b:32:a4:80:b6:cf:c4:b7: b4:c4:13:b0:0f:84:3d:7a:50:49:9f:89:37:75:90: d7:3b:30:13:64:cc:5a:df:71:26:c4:9a:2a:1b:97: 6d:78:ee:9c:34:3d:13:a9:04:f3:09:c1:05:96:9f: e0:0e:d3:b6:28:d8:d5:02:8f:91:fa:95:7b:61:70: e7:9e:91:14:7e:ac:b0:74:c0:1b:33:8e:35:eb:99: 40:34:41:38:4b:58:98:f0:84:d8:64:a0:6a:f9:41: 02:de:cf:c0:c7:87:71:80:b6:b2:3b:2a:fb:b0:27: bf:a2:e0:17:5e:85:4a:3b:cb:bd:08:c5:a5:39:56: bd:bd:80:46:e4:d8:eb:c4:03:29:85:00:66:dd:fb: 1f:5a:96:95:c1:3f:46:85:49:90:15:e9:39:75:2c: fd:72:26:62:16:74:e5:87:2c:3a:69:26:53:be:3f: 07:98:e9:93:28:ac:e0:26:d9:e7:56:af:1d:46:28: 5b:a8:a1:ed:6a:d4:dc:b7:00:a3:e8:3f:2b:d8:a4: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:7F:94:63:E5:A6:46:69:C9:57:49:01:D3:FC:68:36:1A:09:FD X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9d:a5:6a:c8:6f:7f:33:68:ad:95:af:69:f7:24:0f:67:71: a1:a5:80:ce:f2:41:15:83:39:19:40:00:90:0e:25:fb:28:c2: 96:aa:ce:55:33:41:7c:d6:35:91:07:87:d1:ba:5a:ef:c1:ae: b3:ad:06:59:c7:11:d6:cc:0f:2b:a5:0b:90:c9:8d:82:e4:8c: 1a:c7:01:4a:c5:18:aa:4b:80:cd:74:91:c8:4b:24:ff:d3:c8: 01:30:e8:66:57:69:e1:1a:13:a4:a4:e4:64:32:2f:0b:a1:d1: c8:a6:39:be:90:44:46:17:ec:67:8f:41:d3:3b:93:0a:43:92: f7:ea:3e:b5:94:e6:0b:91:48:10:c7:46:3c:5c:ed:6f:15:fb: 6f:13:b4:50:4e:15:7c:7b:94:e7:ff:9c:d8:4e:4c:87:31:b1: 02:c7:e6:b3:34:5d:92:71:59:be:f5:c8:15:d6:94:00:e5:be: 8a:b7:6c:e3:41:85:ca:2c:33:9f:23:7f:3c:8b:9a:96:89:a7: 8b:90:54:d2:87:e4:77:fb:fa:2e:12:82:f6:5d:9c:d4:66:2c: 9c:ec:fc:21:e0:d9:40:b9:3d:c7:ca:36:bb:31:d7:a3:23:9d: 64:ee:91:8d:0b:27:17:27:27:61:d1:9f:bf:10:84:da:1d:db: 3b:cd:2f:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRDQxMTAvBgNVBAUTKDdDNzg5NTk2RDVBMzdCMDQ1QzlEOUYxM0E0MjAwQzFF ODc0NzdGNzQwHhcNMjYwNzIzMDkyNzAzWhcNMjYwNzMwMDkyNzAzWjAYMRYwFAYD VQQDEw02YTYxZGU2Ny02N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ie10G64LCFUl+3Thk2nKfg1pud+SCQX4w60gdToENulam/p1BWcQGxqrt+i KQnBBKFOazKkgLbPxLe0xBOwD4Q9elBJn4k3dZDXOzATZMxa33EmxJoqG5dteO6c ND0TqQTzCcEFlp/gDtO2KNjVAo+R+pV7YXDnnpEUfqywdMAbM44165lANEE4S1iY 8ITYZKBq+UEC3s/Ax4dxgLayOyr7sCe/ouAXXoVKO8u9CMWlOVa9vYBG5NjrxAMp hQBm3fsfWpaVwT9GhUmQFek5dSz9ciZiFnTlhyw6aSZTvj8HmOmTKKzgJtnnVq8d RihbqKHtatTctwCj6D8r2KSeHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0pf5Rj 5aZGaclXSQHT/Gg2Ggn9MB8GA1UdIwQYMBaAFHx4lZbVo3sEXJ2fE6QgDB6HR390 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNENC9ENDdGNDkwQ0I5 NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9mSGlWbHRXamV3UmNuWjhUcENBTUhvZEhm M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNENC9ENDdGNDkwQ0I5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9mSGlWbHRXamV3 UmNuWjhUcENBTUhvZEhmM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmJ2lashvfzNorZWvafckD2dxoaWAzvJBFYM5GUAAkA4l+yjClqrOVTNBfNY1 kQeH0bpa78Gus60GWccR1swPK6ULkMmNguSMGscBSsUYqkuAzXSRyEsk/9PIATDo Zldp4RoTpKTkZDIvC6HRyKY5vpBERhfsZ49B0zuTCkOS9+o+tZTmC5FIEMdGPFzt bxX7bxO0UE4VfHuU5/+c2E5MhzGxAsfmszRdknFZvvXIFdaUAOW+irds40GFyiwz nyN/PIualomni5BU0ofkd/v6LhKC9l2c1GYsnOz8IeDZQLk9x8o2uzHXoyOdZO6R jQsnFycnYdGfvxCE2h3bO80vvw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:37 2026 by rpki-client