$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: otCd2HL+WDzzSUvoHDpTouT8U8UFZk34wcUXfld3qFc= Subject key identifier: 97:35:0E:35:1E:B8:15:8E:7A:3E:25:DC:09:65:ED:6D:BE:12:AC:D2 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08A9 Signing time: Wed 22 Jul 2026 21:12:49 +0000 Manifest this update: Wed 22 Jul 2026 21:12:48 +0000 Manifest next update: Wed 29 Jul 2026 21:12:48 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: i2nTKXl7H68r9jk6kJ0m2IicWmBHZZNSC5FNZmLQkug=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: 08lz7b6szSEMQO1jrd2yTTyJym47lMNxqFGZhqAfyUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Jul 22 21:12:48 2026 GMT Not After : Jul 29 21:12:48 2026 GMT Subject: CN=6a613251-908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:bb:2c:a2:7d:72:22:a9:4a:a5:37:4f:af: b8:14:95:77:ae:09:f6:14:f4:c6:c9:f6:a1:a1:fc: 60:89:3f:8c:81:8f:3d:56:6b:26:79:24:f7:a0:e6: 78:04:e4:c6:79:89:7e:7b:51:ee:8e:9f:96:c0:ce: 8b:ee:7f:ec:5b:16:23:30:00:f7:a1:2f:b4:c8:d2: 05:a9:a8:3c:0b:bb:b9:5e:91:82:54:6e:18:11:ec: 0d:7e:8a:d5:cd:43:2b:05:08:5c:3c:06:2e:04:59: 4c:59:8b:9b:48:ce:68:73:3c:57:a2:3e:a8:15:b2: 5f:d0:3e:59:b0:87:40:0d:cf:a2:cb:ac:e9:bf:bb: 52:f1:e7:b7:cb:4f:63:97:0c:bd:d4:7c:09:62:09: 49:f4:ba:c9:ce:67:8f:6a:58:da:47:6e:ec:40:3a: f8:be:20:e4:89:60:f0:ed:7e:fd:e1:39:1c:9c:1d: 51:4e:28:45:f4:04:db:ae:76:3e:dc:9c:f8:be:e5: cf:b7:b3:e2:d9:e9:c7:e1:3b:56:27:47:cf:ed:dc: 93:64:36:fb:ac:02:9c:c7:f5:35:67:dc:5e:11:dc: 69:bc:ed:86:a8:fc:53:87:1b:66:95:b4:e3:ac:41: b7:9a:16:6e:7f:5b:55:3b:ff:b6:1f:db:d9:7d:db: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:0E:35:1E:B8:15:8E:7A:3E:25:DC:09:65:ED:6D:BE:12:AC:D2 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:4d:e4:4f:70:5b:5d:98:0b:07:e2:49:a3:1f:a8:de:67:38: 36:e1:2c:46:a1:9d:17:12:d1:60:85:1d:c0:70:33:a8:3e:30: f1:3b:70:e7:81:80:aa:88:62:cd:9f:a4:c7:0a:92:9a:b6:80: 73:42:53:bf:46:2b:5f:4f:17:b3:bf:7f:42:e9:55:04:16:8c: b9:da:59:4b:23:97:ae:59:3b:93:6e:f3:8f:95:40:75:68:4d: 83:0b:e6:4b:d9:41:21:cf:ff:17:6d:ed:5d:83:1c:fb:3a:92: 88:de:e4:8a:69:48:26:49:0a:e5:10:17:93:6b:ed:94:a1:ea: cc:c7:7b:8c:11:ec:51:ac:2c:0f:8a:b0:77:62:a8:df:ba:f5: d0:c8:91:11:27:b6:61:03:c0:d6:0c:a1:24:87:1c:9a:5e:f6: 04:ac:b0:33:7f:4a:76:b0:88:8e:41:1e:5e:b2:7d:89:30:36: 2b:47:94:27:31:2e:e0:1c:4a:b3:c0:e9:fe:2b:e2:08:38:ca: 60:12:e7:ee:3c:fa:ed:9a:b9:1a:2a:49:65:38:81:9b:70:bb: 1c:91:79:ba:0c:56:d5:35:e7:18:92:c4:f2:60:b0:56:b4:60: 24:9a:68:b7:82:f4:06:ad:5a:5c:fb:38:c8:9e:47:bb:26:03: 90:97:ab:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYwNzIyMjExMjQ4WhcNMjYwNzI5MjExMjQ4WjAYMRYwFAYD VQQDEw02YTYxMzI1MS05MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMm7LKJ9ciKpSqU3T6+4FJV3rgn2FPTGyfahofxgiT+MgY89VmsmeST3oOZ4 BOTGeYl+e1Hujp+WwM6L7n/sWxYjMAD3oS+0yNIFqag8C7u5XpGCVG4YEewNforV zUMrBQhcPAYuBFlMWYubSM5oczxXoj6oFbJf0D5ZsIdADc+iy6zpv7tS8ee3y09j lwy91HwJYglJ9LrJzmePaljaR27sQDr4viDkiWDw7X794TkcnB1RTihF9ATbrnY+ 3Jz4vuXPt7Pi2enH4TtWJ0fP7dyTZDb7rAKcx/U1Z9xeEdxpvO2GqPxThxtmlbTj rEG3mhZuf1tVO/+2H9vZfduzRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJc1DjUe uBWOej4l3All7W2+EqzSMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASE3kT3BbXZgLB+JJox+o3mc4NuEsRqGdFxLRYIUdwHAzqD4w8Ttw54GAqohi zZ+kxwqSmraAc0JTv0YrX08Xs79/QulVBBaMudpZSyOXrlk7k27zj5VAdWhNgwvm S9lBIc//F23tXYMc+zqSiN7kimlIJkkK5RAXk2vtlKHqzMd7jBHsUawsD4qwd2Ko 37r10MiRESe2YQPA1gyhJIccml72BKywM39KdrCIjkEeXrJ9iTA2K0eUJzEu4BxK s8Dp/iviCDjKYBLn7jz67Zq5GipJZTiBm3C7HJF5ugxW1TXnGJLE8mCwVrRgJJpo t4L0Bq1aXPs4yJ5HuyYDkJerhw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:24:31 2026 by rpki-client