$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: QEDFHjOiEGdeK9aKfMmABF4MONMRb6urQmvSKzMBOx0= Subject key identifier: 65:CA:D9:DA:61:06:5A:A3:BC:8B:DF:65:DA:E3:75:4D:41:F0:87:95 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 35B4 Signing time: Mon 20 Jul 2026 14:41:08 +0000 Manifest this update: Mon 20 Jul 2026 14:41:08 +0000 Manifest next update: Mon 27 Jul 2026 14:41:08 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: zih/V8H6/NiQ1sJNE0xfjuvScbZ+E8PryDXbWGcqGfk=) 2: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=) 3: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=) 4: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: i7xoaF0lo4v/u3C3CSr1yIhYmxnuvtGvhXEfUH5uBHU=) 5: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=) 6: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=) 7: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13832 (0x3608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Jul 20 14:41:08 2026 GMT Not After : Jul 27 14:41:08 2026 GMT Subject: CN=6a5e3384-8894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:64:88:b7:9d:3b:8a:b0:66:46:01:a7:05: 03:30:2c:b7:24:71:1b:4a:77:0d:39:07:0c:28:d3: c6:df:ac:de:23:45:10:24:28:95:f6:47:79:6c:11: 91:90:85:bc:c2:27:76:1c:a7:61:b9:fd:b4:1f:78: 8f:d2:17:c5:13:ba:93:e5:ad:ea:c2:75:7c:a2:d0: 29:6b:71:ae:77:0e:89:30:a8:8a:dc:60:90:fe:e5: 9e:44:b5:8f:4a:9c:98:96:8a:85:49:03:c6:ec:28: 06:67:55:54:71:7b:cd:08:a2:e0:76:22:ae:d8:5a: 2d:1b:e6:fc:a8:68:34:10:b6:5e:c8:60:cf:d4:40: ab:fa:49:37:25:dd:bf:66:a4:85:87:8e:e9:de:9c: 27:08:6b:94:a1:b9:dd:2b:36:21:9a:23:1d:16:5e: 15:ef:5f:9c:80:40:d9:ba:c2:9f:dd:88:69:d9:cd: b9:91:15:e5:cd:b8:c1:0b:1e:19:62:67:62:36:3d: 66:db:c6:b8:12:ca:12:aa:66:21:f3:61:fb:26:f0: 16:c4:88:fb:5e:cb:0a:dd:c8:2e:6f:f0:68:4b:53: 0d:46:bd:03:9c:e0:6c:aa:6c:fe:33:e0:04:79:1e: 50:90:17:73:a5:42:07:dd:c7:3c:f8:d3:4d:77:55: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CA:D9:DA:61:06:5A:A3:BC:8B:DF:65:DA:E3:75:4D:41:F0:87:95 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:da:7f:24:20:a3:17:68:c1:c0:c8:0b:f8:b1:51:04:4e: e0:7e:a6:26:d7:5b:b1:bd:e8:25:b5:8a:8f:f5:29:b7:7d:e9: 1a:34:98:a7:73:58:57:15:f2:ef:c2:13:6d:0c:3c:ec:36:cc: b7:ec:ed:a6:25:79:fe:80:0f:c4:90:47:5a:2e:37:f6:1a:b1: d1:8b:68:11:6b:e6:8c:78:0b:f2:59:a7:d4:90:4c:9e:01:60: c9:4b:93:fd:88:36:1e:34:fa:4a:89:07:93:36:45:35:33:d8: 29:d6:86:18:2c:a5:59:2f:1e:30:63:6d:c7:dd:2c:6a:cf:19: 90:a2:be:8a:25:ed:50:6d:a4:0d:b0:0b:3b:e2:29:c0:f8:8c: 9e:2d:06:eb:ca:d3:e3:f7:13:e4:7a:cb:de:8c:0e:27:8a:73: a6:7e:1d:1e:1f:6d:61:e6:22:d5:d2:11:30:73:be:33:61:99: db:6c:61:9c:a7:0e:06:40:ba:1a:17:bf:cf:33:72:0e:df:3e: 04:d4:d0:60:0b:70:35:56:71:f1:6e:1e:87:28:53:6f:e6:52: 08:60:1e:f5:ea:5a:52:1c:c5:1f:11:00:74:92:e3:85:fc:53: b8:9f:48:58:20:00:fd:0c:ac:dd:6e:0e:2a:f2:01:4c:cc:6d: a1:4f:b4:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNzIwMTQ0MTA4WhcNMjYwNzI3MTQ0MTA4WjAYMRYwFAYD VQQDEw02YTVlMzM4NC04ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwltkiLedO4qwZkYBpwUDMCy3JHEbSncNOQcMKNPG36zeI0UQJCiV9kd5bBGR kIW8wid2HKdhuf20H3iP0hfFE7qT5a3qwnV8otApa3Gudw6JMKiK3GCQ/uWeRLWP SpyYloqFSQPG7CgGZ1VUcXvNCKLgdiKu2FotG+b8qGg0ELZeyGDP1ECr+kk3Jd2/ ZqSFh47p3pwnCGuUobndKzYhmiMdFl4V71+cgEDZusKf3Yhp2c25kRXlzbjBCx4Z YmdiNj1m28a4EsoSqmYh82H7JvAWxIj7XssK3cgub/BoS1MNRr0DnOBsqmz+M+AE eR5QkBdzpUIH3cc8+NNNd1UhwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXK2dph BlqjvIvfZdrjdU1B8IeVMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASbHafyQgoxdowcDIC/ixUQRO4H6mJtdbsb3oJbWKj/Upt33pGjSYp3NYVxXy 78ITbQw87DbMt+ztpiV5/oAPxJBHWi439hqx0YtoEWvmjHgL8lmn1JBMngFgyUuT /Yg2HjT6SokHkzZFNTPYKdaGGCylWS8eMGNtx90sas8ZkKK+iiXtUG2kDbALO+Ip wPiMni0G68rT4/cT5HrL3owOJ4pzpn4dHh9tYeYi1dIRMHO+M2GZ22xhnKcOBkC6 Ghe/zzNyDt8+BNTQYAtwNVZx8W4ehyhTb+ZSCGAe9epaUhzFHxEAdJLjhfxTuJ9I WCAA/Qys3W4OKvIBTMxtoU+04Q== -----END CERTIFICATE-----Generated at Tue Jul 21 07:07:55 2026 by rpki-client