$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: 4NyB7Z4ougwdADUEP96flbtTMCOaF6h+QFHPUySrlrc= Subject key identifier: E8:44:5A:6B:13:4F:1A:15:EE:64:3C:37:6F:59:57:16:4D:2E:42:BC Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 01CD Signing time: Thu 23 Jul 2026 05:03:36 +0000 Manifest this update: Thu 23 Jul 2026 05:03:35 +0000 Manifest next update: Thu 30 Jul 2026 05:03:35 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: Ujrzzm2WFPVllOMUok074PkThniltD63nBWv0nKJOJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Jul 23 05:03:35 2026 GMT Not After : Jul 30 05:03:35 2026 GMT Subject: CN=6a61a0a8-942f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:47:3b:a4:2a:06:7d:67:8b:d4:e0:40:33: 25:1e:00:10:cf:cb:a3:ee:78:f2:6e:15:dd:ed:7b: de:2c:22:1c:4c:e2:5b:c8:c5:d4:0c:8a:5f:fe:c3: e1:19:b8:93:e5:87:77:68:0f:77:d3:0d:0d:ee:ff: 42:69:1a:c7:44:33:0b:8d:b5:19:8e:b0:6f:bb:86: a0:d8:ec:67:2f:69:08:77:36:f6:c4:d9:b9:fe:29: b6:1e:50:42:74:e1:96:89:4a:19:98:7f:3e:33:e8: 7d:54:37:22:70:5e:09:d0:de:ce:00:7c:b9:8f:cd: 6c:f5:7e:3c:55:4b:c4:54:c0:d4:20:78:83:79:b6: 0f:bf:7a:a6:e2:d3:0b:36:19:9a:38:d7:2b:35:6e: 2c:ca:a4:e2:5c:13:83:f8:bf:61:fc:b8:be:16:f1: b6:74:44:7f:80:7e:7f:ba:49:02:8e:e7:6a:0e:a2: 6b:ee:95:f2:52:17:92:7a:f7:f3:00:a9:4a:17:f3: c7:b0:7c:b0:c5:20:02:26:6a:91:6f:3c:bd:f1:fc: dd:ad:4a:39:c5:46:37:2b:a6:09:9d:c9:bd:8c:44: ee:7d:c6:b2:45:48:b8:7c:3e:04:65:aa:0a:ff:10: b9:36:37:86:87:02:22:2e:95:15:71:39:92:f6:d2: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:44:5A:6B:13:4F:1A:15:EE:64:3C:37:6F:59:57:16:4D:2E:42:BC X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f6:06:22:07:b6:f1:41:d5:6d:b1:40:15:72:89:d0:74:c4: 2a:9f:8f:13:63:8e:a0:e5:54:66:86:52:c7:00:9f:96:2e:ba: ae:c1:0a:3f:35:87:58:55:ff:7c:35:6a:3f:68:bc:05:86:c0: c7:4b:d6:b3:3e:36:9a:e0:35:54:b5:dd:03:f9:68:35:df:f7: 2c:57:b7:7b:59:f6:c7:d2:3c:39:1b:9b:ad:43:65:04:ef:e0: aa:01:8c:b4:91:81:46:f5:86:3a:e6:26:e2:5a:54:24:d1:99: 21:db:a9:51:5d:ff:0d:1a:17:70:5a:95:1e:df:7b:a1:9a:5f: e2:42:19:98:61:d6:1a:24:02:88:b6:3f:94:01:3a:5c:4f:77: df:21:59:d2:87:a2:98:3f:72:7d:77:e5:0f:7f:62:d5:a6:b8: 49:4a:25:b5:a5:7c:0e:db:07:4a:a9:49:32:4f:3b:1d:51:d4: 9c:a9:e5:49:09:ef:8f:72:ca:80:2c:6d:98:99:70:e0:23:f8: b9:60:26:27:14:75:d0:49:b7:45:7d:a0:60:5a:cc:c9:51:32: fc:eb:8c:8e:6a:56:00:b0:a5:31:36:19:53:82:1a:68:46:fe: da:a8:43:eb:41:2b:69:6c:59:69:7c:86:32:11:c5:92:ab:b8: b4:0a:01:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjYwNzIzMDUwMzM1WhcNMjYwNzMwMDUwMzM1WjAYMRYwFAYD VQQDEw02YTYxYTBhOC05NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlblHO6QqBn1ni9TgQDMlHgAQz8uj7njybhXd7XveLCIcTOJbyMXUDIpf/sPh GbiT5Yd3aA930w0N7v9CaRrHRDMLjbUZjrBvu4ag2OxnL2kIdzb2xNm5/im2HlBC dOGWiUoZmH8+M+h9VDcicF4J0N7OAHy5j81s9X48VUvEVMDUIHiDebYPv3qm4tML NhmaONcrNW4syqTiXBOD+L9h/Li+FvG2dER/gH5/ukkCjudqDqJr7pXyUheSevfz AKlKF/PHsHywxSACJmqRbzy98fzdrUo5xUY3K6YJncm9jETufcayRUi4fD4EZaoK /xC5NjeGhwIiLpUVcTmS9tIRZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhEWmsT TxoV7mQ8N29ZVxZNLkK8MB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjvYGIge28UHVbbFAFXKJ0HTEKp+PE2OOoOVUZoZSxwCfli66rsEKPzWHWFX/ fDVqP2i8BYbAx0vWsz42muA1VLXdA/loNd/3LFe3e1n2x9I8ORubrUNlBO/gqgGM tJGBRvWGOuYm4lpUJNGZIdupUV3/DRoXcFqVHt97oZpf4kIZmGHWGiQCiLY/lAE6 XE933yFZ0oeimD9yfXflD39i1aa4SUoltaV8DtsHSqlJMk87HVHUnKnlSQnvj3LK gCxtmJlw4CP4uWAmJxR10Em3RX2gYFrMyVEy/OuMjmpWALClMTYZU4IaaEb+2qhD 60EraWxZaXyGMhHFkqu4tAoB6g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:47 2026 by rpki-client