$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json) Hash identifier: rMXS72qgFhFXvlyYe3HY4HR0hp+MGTP9g//sSVbMENI= Subject key identifier: 54:94:44:18:EC:1F:53:BC:0B:2B:CD:A3:03:93:69:F8:B6:4D:DB:54 Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 15F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft Manifest number: 15DF Signing time: Wed 22 Jul 2026 16:50:01 +0000 Manifest this update: Wed 22 Jul 2026 16:50:00 +0000 Manifest next update: Wed 29 Jul 2026 16:50:00 +0000 Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: XfmtGaQViawRETzDUxivuy3XiYAZyZq6WKywDV9FG08=) 2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=) 3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5620 (0x15f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: Jul 22 16:50:00 2026 GMT Not After : Jul 29 16:50:00 2026 GMT Subject: CN=6a60f4b8-e8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:36:f7:58:a5:76:4e:07:68:43:c3:c4:93: bc:85:4c:f3:2b:13:7f:d3:dd:0b:b9:d5:92:b2:bf: 49:04:17:7c:6c:ff:bb:d1:59:21:9f:7e:64:f1:a4: f3:6b:47:8d:a0:10:3a:e7:39:76:26:fe:a2:ad:73: b7:2f:60:a6:7f:16:c1:b9:7e:8d:4a:9d:53:45:b9: 26:a4:02:28:2b:eb:00:db:f5:f5:0f:78:b6:e7:32: 7b:b0:c8:b4:a1:26:4e:8d:d6:6d:54:8c:7e:32:15: a4:b9:19:2f:e7:93:a0:e6:d0:06:18:6a:f0:9c:8a: 2e:07:63:37:eb:da:a2:5a:ae:56:c5:3f:9a:c0:8c: cd:5f:ee:04:be:76:e9:be:28:5f:07:4f:19:36:c2: 68:d5:ec:b1:20:e7:aa:fe:94:83:0b:49:17:2f:dc: fd:e7:aa:4f:03:08:6f:a8:0f:d0:f6:d3:ca:d1:c0: de:3b:c7:55:c5:54:c4:76:93:1b:df:5e:a7:f7:34: 65:63:f0:3b:86:f9:52:8a:73:17:d9:91:e4:a8:24: 66:0e:f6:b5:84:9d:02:65:41:f7:a5:17:96:3d:31: 4f:fa:a5:80:4c:ff:c1:5c:ce:35:40:61:da:b2:a7: 25:25:a5:6c:e0:da:ce:6c:ea:f3:34:74:81:c1:65: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:44:18:EC:1F:53:BC:0B:2B:CD:A3:03:93:69:F8:B6:4D:DB:54 X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:0c:96:8c:20:60:eb:6e:cd:61:d1:3f:c5:f6:53:0f:ac: 41:74:7e:fe:f8:ab:71:4f:02:e9:a0:bb:4c:86:db:5a:ee:d8: 2e:64:be:5d:1c:8b:12:73:d4:1c:03:4a:32:ba:e0:03:0e:b7: 58:f1:27:0d:be:f0:49:f3:eb:ea:ac:08:68:d6:8a:32:c2:b2: 7d:63:c5:19:b4:94:9a:cd:32:f6:39:0b:84:42:e5:83:56:43: be:80:a5:45:c5:0a:0d:e9:c6:67:d4:01:29:85:a3:b5:75:3f: 94:b1:c3:1d:99:3a:88:52:37:4e:45:e2:ac:66:1f:6e:39:11: a6:32:5b:8f:b4:19:8b:6c:d3:f5:5b:5c:48:28:79:99:ea:83: 8b:06:f6:0d:74:12:5f:de:59:f0:48:db:29:2c:ca:b5:09:a5: 2a:04:27:f6:0c:2f:80:1f:51:d1:56:7d:ee:42:65:f9:4c:ef: cc:d0:b4:42:e4:af:a1:1f:37:7d:41:68:de:e3:27:ec:e6:9e: da:ba:af:80:9c:3d:ef:df:e9:47:72:04:33:8a:1b:81:41:d4: c9:4c:86:17:e1:23:12:46:85:97:21:70:5f:9f:31:f6:1a:ef: 11:ff:42:c6:3f:ca:95:82:3b:12:ac:b2:78:78:a1:8b:f3:1e: b7:59:49:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjYwNzIyMTY1MDAwWhcNMjYwNzI5MTY1MDAwWjAYMRYwFAYD VQQDEw02YTYwZjRiOC1lOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFA291ildk4HaEPDxJO8hUzzKxN/090LudWSsr9JBBd8bP+70Vkhn35k8aTz a0eNoBA65zl2Jv6irXO3L2CmfxbBuX6NSp1TRbkmpAIoK+sA2/X1D3i25zJ7sMi0 oSZOjdZtVIx+MhWkuRkv55Og5tAGGGrwnIouB2M369qiWq5WxT+awIzNX+4Evnbp vihfB08ZNsJo1eyxIOeq/pSDC0kXL9z956pPAwhvqA/Q9tPK0cDeO8dVxVTEdpMb 316n9zRlY/A7hvlSinMX2ZHkqCRmDva1hJ0CZUH3pReWPTFP+qWATP/BXM41QGHa sqclJaVs4NrObOrzNHSBwWX2GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSURBjs H1O8CyvNowOTafi2TdtUMB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVFNC83OTM5NzMyMDREMDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3kt R2lCTVg0RGJRd1FRbW9NWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJcUMlowgYOtuzWHRP8X2Uw+sQXR+/vircU8C6aC7TIbbWu7YLmS+XRyLEnPU HANKMrrgAw63WPEnDb7wSfPr6qwIaNaKMsKyfWPFGbSUms0y9jkLhELlg1ZDvoCl RcUKDenGZ9QBKYWjtXU/lLHDHZk6iFI3TkXirGYfbjkRpjJbj7QZi2zT9VtcSCh5 meqDiwb2DXQSX95Z8EjbKSzKtQmlKgQn9gwvgB9R0VZ97kJl+UzvzNC0QuSvoR83 fUFo3uMn7Oae2rqvgJw979/pR3IEM4obgUHUyUyGF+EjEkaFlyFwX58x9hrvEf9C xj/KlYI7EqyyeHihi/Met1lJdQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:06:27 2026 by rpki-client