$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json) Hash identifier: VhVLEx+6qGUDcvbZmK+YIvSpoGewXzrUWy/07l5/BPQ= Subject key identifier: 46:FE:78:F3:5D:59:F8:BA:7E:8D:F5:50:68:6D:AB:D6:11:AA:2F:B7 Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft Manifest number: DB Signing time: Thu 23 Jul 2026 08:22:53 +0000 Manifest this update: Thu 23 Jul 2026 08:22:53 +0000 Manifest next update: Thu 30 Jul 2026 08:22:53 +0000 Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: r/E5ye459PleiZSnSqu96A/2UtMyYnfQnecYDiPXW48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Validity Not Before: Jul 23 08:22:53 2026 GMT Not After : Jul 30 08:22:53 2026 GMT Subject: CN=6a61cf5d-2f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:72:21:fc:09:61:4b:72:97:81:41:74:f0: 25:f0:a7:33:a3:de:98:02:3d:da:00:9c:dc:90:43: 56:63:fa:d7:3a:62:31:5d:d5:9a:c6:6c:44:b9:0a: 15:17:d0:0d:0c:e1:fa:13:93:bc:d4:98:3d:56:b6: 74:b9:cc:14:e5:e5:63:5b:39:ab:5f:9b:fa:3c:72: 32:27:17:26:1f:5c:a1:35:8c:a8:ec:fc:37:f2:1c: 26:85:e5:2d:0e:06:fd:8f:33:1b:bb:5b:ae:79:55: 84:29:b5:d8:42:b2:d2:8d:7f:20:37:91:71:92:fc: 9b:c8:9f:95:fb:cd:1f:fa:2c:2b:f7:17:c8:3f:12: db:3f:86:b7:bf:73:81:3b:67:6d:77:0f:6a:d1:6f: bc:5d:40:d4:7b:38:13:33:d1:34:6a:c6:90:0f:60: 06:3c:f5:ca:ee:58:01:2d:ab:ea:13:3f:b8:2f:5f: 88:57:9c:2b:f1:f7:ad:1b:d3:6a:33:36:ee:6e:4d: 53:07:58:b0:f2:92:e0:71:32:14:30:c8:d8:32:c7: f2:99:33:16:d4:cf:96:a3:40:f9:c0:d4:2e:2e:a2: 76:08:41:5b:cb:e7:d1:84:a3:69:40:bc:c4:00:0c: 67:84:e9:7b:02:1e:7e:9f:34:e9:6c:1d:16:9e:ff: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:78:F3:5D:59:F8:BA:7E:8D:F5:50:68:6D:AB:D6:11:AA:2F:B7 X509v3 Authority Key Identifier: keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:da:de:4d:27:6c:90:2a:ed:6c:d0:a1:f8:ab:4f:f0:0e:87: a8:3c:b7:0d:4b:f9:10:22:a9:97:a6:73:00:67:b9:49:40:c9: 8b:75:6e:50:e5:bf:b8:7b:92:e2:b8:65:b0:76:a8:31:96:3c: a4:7c:92:41:5e:8e:c6:92:4f:54:74:c3:1f:3a:43:ff:83:59: 30:a8:03:98:73:af:67:30:f6:0c:d1:a8:5c:0e:e3:f9:99:e2: 03:95:99:c1:3c:9d:f1:db:00:66:ea:b6:c6:33:26:1e:f3:7d: 80:28:cd:ed:9a:65:87:61:e3:e8:cb:18:20:bb:4e:cf:60:fc: 96:92:41:be:7b:51:41:b8:4c:c8:63:73:e9:3b:a3:37:8c:f1: 78:84:39:32:b8:3f:eb:c3:8a:a9:52:9c:6a:0e:21:5a:3f:8c: 89:f2:c4:7a:4d:8b:67:58:a3:e0:79:13:6c:1b:22:39:56:ec: 36:a5:02:63:94:38:a5:f3:58:c2:c5:2d:6c:ee:bb:88:1e:2b: 60:30:64:a4:db:5d:77:f9:97:b4:a2:80:11:b5:01:fe:4d:2f: 05:a7:6b:22:68:72:40:e4:7b:34:82:b3:d2:a6:be:3c:5d:4e: 80:1c:8b:88:17:fa:64:0f:34:d4:f1:7f:cd:c5:41:6a:36:c4: 8d:fb:95:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QzAxMTAvBgNVBAUTKDFEMERBQzExRUQ4MkUzNUMyM0IwQ0JFRkZCRUUwMDYy NjNCMDk5NTcwHhcNMjYwNzIzMDgyMjUzWhcNMjYwNzMwMDgyMjUzWjAYMRYwFAYD VQQDEw02YTYxY2Y1ZC0yZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXZyIfwJYUtyl4FBdPAl8Kczo96YAj3aAJzckENWY/rXOmIxXdWaxmxEuQoV F9ANDOH6E5O81Jg9VrZ0ucwU5eVjWzmrX5v6PHIyJxcmH1yhNYyo7Pw38hwmheUt Dgb9jzMbu1uueVWEKbXYQrLSjX8gN5FxkvybyJ+V+80f+iwr9xfIPxLbP4a3v3OB O2dtdw9q0W+8XUDUezgTM9E0asaQD2AGPPXK7lgBLavqEz+4L1+IV5wr8fetG9Nq Mzbubk1TB1iw8pLgcTIUMMjYMsfymTMW1M+Wo0D5wNQuLqJ2CEFby+fRhKNpQLzE AAxnhOl7Ah5+nzTpbB0Wnv8zywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEb+ePNd Wfi6fo31UGhtq9YRqi+3MB8GA1UdIwQYMBaAFB0NrBHtguNcI7DL7/vuAGJjsJlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81QUZCMTQ4RTM4 ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQxd2pzTXZ2LS00QVltT3dt VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRMnNFZTJDNDF3anNNdnYtLTRBWW1Pd21WYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81QUZCMTQ4RTM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQx d2pzTXZ2LS00QVltT3dtVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAktreTSdskCrtbNCh+KtP8A6HqDy3DUv5ECKpl6ZzAGe5SUDJi3VuUOW/uHuS 4rhlsHaoMZY8pHySQV6OxpJPVHTDHzpD/4NZMKgDmHOvZzD2DNGoXA7j+ZniA5WZ wTyd8dsAZuq2xjMmHvN9gCjN7Zplh2Hj6MsYILtOz2D8lpJBvntRQbhMyGNz6Tuj N4zxeIQ5Mrg/68OKqVKcag4hWj+MifLEek2LZ1ij4HkTbBsiOVbsNqUCY5Q4pfNY wsUtbO67iB4rYDBkpNtdd/mXtKKAEbUB/k0vBadrImhyQOR7NIKz0qa+PF1OgByL iBf6ZA801PF/zcVBajbEjfuV4Q== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:54 2026 by rpki-client