$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: l26Qptv5LL7NNmNjRxLnUH2XgmgLu0h4x6PXTH4l0q0= Subject key identifier: 37:EC:AD:68:EC:DD:8F:15:BD:73:D1:48:B0:2E:B7:C5:12:1A:30:33 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C9A Signing time: Wed 22 Jul 2026 18:52:03 +0000 Manifest this update: Wed 22 Jul 2026 18:52:03 +0000 Manifest next update: Wed 29 Jul 2026 18:52:03 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: fQq+CNcOYmNVs3fhWk4EnIG5DixPwWLhvaKL6ORCJMQ=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Jul 22 18:52:03 2026 GMT Not After : Jul 29 18:52:03 2026 GMT Subject: CN=6a611153-841d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0a:93:c4:10:d3:84:79:4d:e3:0e:92:8f:fd: 90:17:ef:36:c8:d1:2f:75:cf:aa:91:54:b6:09:61: 4b:3b:ae:32:51:67:e1:1f:48:90:ce:8f:8d:08:48: de:d8:19:7b:6e:3b:9f:b4:91:0f:af:20:24:bd:9c: 26:6e:68:81:82:5a:4c:7a:ae:23:a4:5a:5e:01:5d: 56:ed:7d:a7:4c:1a:46:95:b2:1c:f8:60:2d:37:13: 5b:67:08:d2:c6:e7:d8:7d:10:42:a6:04:38:12:9e: 82:dd:ff:a9:b0:09:5b:ea:b4:91:13:4b:4b:54:a3: 38:7a:be:87:d3:bb:25:a5:ae:18:f9:af:4c:8d:36: 71:3a:5f:58:23:45:22:0e:0b:1f:8d:f8:33:55:12: f8:32:a5:39:53:e4:8c:e1:7e:77:27:e9:ad:cb:30: 0b:3c:31:09:88:99:db:5f:0d:21:ec:26:b1:5f:05: ef:e5:4b:ca:ee:0d:78:b1:3f:76:c9:5f:e1:da:9b: 0b:33:5c:db:72:29:a6:ba:f5:a6:45:1b:b5:06:95: 84:79:51:c0:d4:d0:ee:3a:48:bd:ad:3d:d0:25:91: fa:c9:6e:a8:ca:9f:a1:4c:ff:bf:ba:7e:40:4f:fa: e2:10:c4:1e:31:9a:ff:af:97:00:70:89:9c:35:3c: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EC:AD:68:EC:DD:8F:15:BD:73:D1:48:B0:2E:B7:C5:12:1A:30:33 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:17:36:5a:34:f1:05:70:5e:62:12:fb:5f:d8:25:9b:be:8e: 00:58:98:a1:cb:0c:99:2d:85:c4:df:75:45:e8:6e:7f:b6:c6: aa:c0:19:27:25:52:79:57:b6:09:c6:43:bc:9d:12:03:4f:99: bf:78:87:37:0f:ac:61:72:5b:3f:f4:5f:79:39:6b:6e:1f:b3: 2e:8a:f3:3b:20:b6:78:ac:0b:2b:17:2b:80:b3:fd:ea:42:8b: 2f:35:d2:df:47:a8:a8:78:67:3d:35:ea:3a:dd:47:f0:3a:0a: 43:85:20:6f:52:dd:e5:e5:95:2e:47:18:99:e1:48:5f:25:6e: 5b:76:99:9d:74:e5:1f:fa:4f:ed:a9:68:cd:54:e2:ea:1a:f7: 53:be:2e:f7:d4:82:6d:8a:a2:a2:83:1e:22:be:17:d2:7f:87: ae:61:1c:3b:2e:57:2f:0d:24:e0:22:ca:41:0e:33:a1:01:9f: 75:33:82:1d:81:0f:c4:bc:58:78:d9:14:c2:12:95:06:cc:47: 2b:ef:71:c5:45:e6:72:28:03:4d:b4:18:34:4c:86:3e:67:88: a3:91:47:dc:2c:f2:7b:1b:24:e2:16:ae:39:48:f3:77:64:71: ce:a6:c2:1f:04:f6:d8:74:4b:20:49:5b:b8:ba:79:b4:13:9f: 18:0b:77:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwNzIyMTg1MjAzWhcNMjYwNzI5MTg1MjAzWjAYMRYwFAYD VQQDEw02YTYxMTE1My04NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gqTxBDThHlN4w6Sj/2QF+82yNEvdc+qkVS2CWFLO64yUWfhH0iQzo+NCEje 2Bl7bjuftJEPryAkvZwmbmiBglpMeq4jpFpeAV1W7X2nTBpGlbIc+GAtNxNbZwjS xufYfRBCpgQ4Ep6C3f+psAlb6rSRE0tLVKM4er6H07slpa4Y+a9MjTZxOl9YI0Ui DgsfjfgzVRL4MqU5U+SM4X53J+mtyzALPDEJiJnbXw0h7CaxXwXv5UvK7g14sT92 yV/h2psLM1zbcimmuvWmRRu1BpWEeVHA1NDuOki9rT3QJZH6yW6oyp+hTP+/un5A T/riEMQeMZr/r5cAcImcNTw0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfsrWjs 3Y8VvXPRSLAut8USGjAzMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASBc2WjTxBXBeYhL7X9glm76OAFiYocsMmS2FxN91Rehuf7bGqsAZJyVSeVe2 CcZDvJ0SA0+Zv3iHNw+sYXJbP/RfeTlrbh+zLorzOyC2eKwLKxcrgLP96kKLLzXS 30eoqHhnPTXqOt1H8DoKQ4Ugb1Ld5eWVLkcYmeFIXyVuW3aZnXTlH/pP7alozVTi 6hr3U74u99SCbYqiooMeIr4X0n+HrmEcOy5XLw0k4CLKQQ4zoQGfdTOCHYEPxLxY eNkUwhKVBsxHK+9xxUXmcigDTbQYNEyGPmeIo5FH3Czyexsk4hauOUjzd2RxzqbC HwT22HRLIElbuLp5tBOfGAt3RQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:37 2026 by rpki-client