$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: ElYGLdQzwk2pfTuHVt/cTvag6S937ochyt52pl9Mafo= Subject key identifier: 43:85:05:A1:24:9E:53:F6:AD:79:90:F1:89:F8:E7:8E:18:AF:10:12 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 0414 Signing time: Thu 23 Jul 2026 01:15:24 +0000 Manifest this update: Thu 23 Jul 2026 01:15:23 +0000 Manifest next update: Thu 30 Jul 2026 01:15:23 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: IrQe/SDgMkXFCwqD/6J9q+GQQKVZ/GeWEjjGccw0XlI=) 2: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: xh8ZzkScwUoVrKvZnOf/z0vy2KKYFXPO6zuhnInuTK4=) 3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: 61tgJT9JBQD7/LnZY8sWrhXGon+4jXIx8zzVzR+mcYo=) 4: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: eyLRbf8L5PNErwQTJOk07CgThPMQFGU585OgUmJtuNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Jul 23 01:15:23 2026 GMT Not After : Jul 30 01:15:23 2026 GMT Subject: CN=6a616b2c-4729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:e5:07:9c:aa:0f:13:37:6b:39:44:c8:6c: 08:12:35:dd:63:4c:9f:bd:a0:4a:6c:82:36:c2:13: d4:54:dc:7b:9d:26:01:ca:db:97:95:12:93:e9:68: da:56:fe:22:d3:d1:5f:e4:44:d8:51:6d:59:5a:0f: 94:10:15:9d:4d:81:d4:c8:b8:8a:09:10:28:d2:c8: 08:8a:f7:54:38:76:ae:f1:e1:05:80:a0:c3:55:42: 81:97:c3:53:0a:a8:45:87:0a:f2:8f:75:a3:85:20: 29:fa:1b:bc:65:e9:56:90:02:23:cc:3b:ab:e1:48: d6:b6:6c:00:bd:93:2d:c2:d0:43:5f:a1:3b:b7:35: f8:d7:03:dc:86:03:66:22:0e:49:25:8b:f7:9f:a1: d8:70:17:4c:27:e6:b8:d2:73:0d:5c:b3:cb:e4:52: de:86:26:f8:97:2d:0d:51:12:ec:79:42:e9:f4:71: fd:71:a4:2e:84:74:a9:e3:0d:4a:2e:9e:d2:23:5f: 65:7b:7d:37:f2:e0:66:3c:75:7e:08:57:b0:1c:88: f9:b9:01:b6:7a:77:bd:e8:a1:6e:0e:71:64:39:8c: 02:bf:7f:d6:1a:d6:9d:35:6d:0a:30:52:c3:d0:9c: bf:2d:c1:56:fb:f8:2b:bc:3f:04:97:bf:d9:25:b0: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:85:05:A1:24:9E:53:F6:AD:79:90:F1:89:F8:E7:8E:18:AF:10:12 X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ff:51:a8:e4:2d:8c:05:81:13:b6:4d:ce:c2:26:66:67:63: 01:a4:a7:91:9f:76:85:6a:c9:b6:a1:99:ea:21:33:15:42:f9: 5d:7b:7f:cf:08:38:de:d8:9d:ec:cc:99:4d:3a:fd:6b:02:ea: 20:07:99:cc:50:08:2b:35:e9:4b:e8:a9:6d:93:fe:a3:87:0c: 87:27:86:52:bc:0e:e8:3d:90:60:4c:ba:10:1c:57:5b:04:33: 89:09:58:90:96:52:fc:28:a8:66:e0:20:64:eb:22:82:de:2f: b5:4c:07:6e:34:3a:72:d2:e6:2f:6b:44:6d:48:ab:02:ae:e2: 07:84:0c:5c:52:d3:4f:5b:79:6a:1f:a9:c2:23:0e:61:d0:d4: b7:d0:a5:83:49:ab:67:a9:f8:3e:37:d6:37:2a:2d:01:ce:30: ea:9b:df:f7:9e:ca:c2:dc:2e:92:cc:91:5b:7d:a6:d9:21:8a: 02:e0:ac:76:c2:04:46:c6:6a:ba:fe:af:eb:dc:83:e8:36:d4: e8:42:f0:6d:78:8c:d4:15:00:7a:02:d3:1b:18:63:fb:95:20: 34:d5:bf:7c:c0:0f:cf:c0:59:c0:e7:d6:d8:1b:c0:9f:22:0f: 03:05:d2:3b:44:7a:30:da:94:8e:f9:cb:75:23:5f:e1:40:69: 2f:8e:2e:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjYwNzIzMDExNTIzWhcNMjYwNzMwMDExNTIzWjAYMRYwFAYD VQQDEw02YTYxNmIyYy00NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdvlB5yqDxM3azlEyGwIEjXdY0yfvaBKbII2whPUVNx7nSYBytuXlRKT6Wja Vv4i09Ff5ETYUW1ZWg+UEBWdTYHUyLiKCRAo0sgIivdUOHau8eEFgKDDVUKBl8NT CqhFhwryj3WjhSAp+hu8ZelWkAIjzDur4UjWtmwAvZMtwtBDX6E7tzX41wPchgNm Ig5JJYv3n6HYcBdMJ+a40nMNXLPL5FLehib4ly0NURLseULp9HH9caQuhHSp4w1K Lp7SI19le3038uBmPHV+CFewHIj5uQG2ene96KFuDnFkOYwCv3/WGtadNW0KMFLD 0Jy/LcFW+/grvD8El7/ZJbAQYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOFBaEk nlP2rXmQ8Yn4544YrxASMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOv9RqOQtjAWBE7ZNzsImZmdjAaSnkZ92hWrJtqGZ6iEzFUL5XXt/zwg43tid 7MyZTTr9awLqIAeZzFAIKzXpS+ipbZP+o4cMhyeGUrwO6D2QYEy6EBxXWwQziQlY kJZS/CioZuAgZOsigt4vtUwHbjQ6ctLmL2tEbUirAq7iB4QMXFLTT1t5ah+pwiMO YdDUt9Clg0mrZ6n4PjfWNyotAc4w6pvf957KwtwuksyRW32m2SGKAuCsdsIERsZq uv6v69yD6DbU6ELwbXiM1BUAegLTGxhj+5UgNNW/fMAPz8BZwOfW2BvAnyIPAwXS O0R6MNqUjvnLdSNf4UBpL44uWg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:04 2026 by rpki-client