$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: KPYbUuXwxsNjXUx178KhfBADSdSh2Ro7dcQBPxUm7GI= Subject key identifier: E5:13:DE:DE:EE:EB:43:02:77:95:CA:FA:5F:CB:8A:15:6A:8F:B3:E8 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 145D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 1427 Signing time: Mon 20 Jul 2026 17:04:09 +0000 Manifest this update: Mon 20 Jul 2026 17:04:09 +0000 Manifest next update: Mon 27 Jul 2026 17:04:09 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: h2c2QGBHg+gaIv72kuxpWLN55f/qC9Oa4D6vz1Yv1MA=) 2: 40567CA8F25A11F09752333B5F6F56BC.roa (hash: 4OEr8GYD/68Q3dhtUrIhuI6SwejTwEeFTSAEWL1/kTk=) 3: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: lwkWaq6p0L37tuMHM356+eKrIkOsIPecy57fgsnLnhY=) 4: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WqMqFVIMW/WczjTWRvzLRKr2fBm6q4MFQ+IAb2s3IrY=) 5: 999C6728F7FF11F08B2BFA086C6F56BC.roa (hash: 5jwoaJRF05ynypppsournA2NpxdgiK2g9i/wb3qUNp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5213 (0x145d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Jul 20 17:04:09 2026 GMT Not After : Jul 27 17:04:09 2026 GMT Subject: CN=6a5e5509-2199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:e1:a4:9e:54:98:13:64:53:dd:ee:9e:f8: 30:fc:fd:60:37:0d:d3:98:36:9d:be:61:dd:ff:fd: 42:0a:e0:b6:e8:05:cc:9f:ff:6a:27:18:74:3a:47: 03:f7:0a:6a:0f:79:81:cf:1a:0e:97:8a:1b:3d:66: d8:39:b1:ad:76:c3:a7:cd:70:94:57:07:a7:85:af: 69:cf:ba:bc:44:46:62:28:3a:9d:3d:b9:c3:58:94: d6:6b:8c:46:5a:77:f3:f1:28:cb:e0:66:b4:f5:a3: 36:ca:dc:99:c5:3e:23:e4:77:9a:d3:62:d6:8e:8e: 9c:5f:34:a6:8f:4e:4a:2e:ca:09:a4:ad:d6:45:83: 2c:40:ad:82:f9:7c:fc:ad:ad:44:70:f9:4b:de:83: c8:69:e7:d2:02:19:06:29:92:b4:fa:f9:00:64:f6: be:75:b7:86:1d:2d:25:08:62:91:37:d2:7c:76:b5: d4:cb:72:7e:d7:65:3a:9d:b5:1a:d7:a1:15:36:49: 5a:9d:c8:cb:bf:f4:bb:da:c0:e2:a6:dc:24:77:c9: d0:c8:25:bb:dd:bd:04:aa:14:59:ed:d0:20:1e:da: 7a:33:f6:81:c9:b6:1b:68:54:5f:ac:bf:62:f0:c4: 42:4c:57:fe:09:99:51:c6:a1:7e:c6:56:2d:7e:18: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:13:DE:DE:EE:EB:43:02:77:95:CA:FA:5F:CB:8A:15:6A:8F:B3:E8 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fe:6a:d4:08:6f:23:ea:f3:d8:87:40:2d:38:2d:6a:f8:38: 94:53:2c:a1:51:ba:15:7c:45:86:c0:90:d3:38:60:17:cc:a2: 22:b5:c8:d6:eb:03:fa:79:5c:b9:58:5b:bf:27:a3:59:84:ba: 9d:2e:c4:85:fe:fa:3f:28:ad:d9:25:f6:b5:b0:d8:dd:0e:e1: 6c:88:e1:de:9a:ad:e7:66:47:d6:bf:10:cc:f4:db:40:61:3f: 14:36:06:31:79:7e:cc:87:03:9d:ae:7a:71:c2:68:92:d7:20: 94:7d:d6:3e:75:36:4d:a9:7e:5b:8a:24:8b:fd:df:0d:5d:11: 32:41:51:84:35:bc:72:e3:16:2e:e4:c9:94:af:41:64:de:54: b2:07:a6:3d:3a:2b:23:fa:ab:60:77:b9:2b:fc:91:ae:c3:b1: 29:26:1c:36:a6:44:42:ea:2b:7c:07:0f:61:88:ab:15:b2:7c: e7:e3:b9:c9:ff:90:f4:eb:a7:b2:4f:b5:5a:d7:ac:49:7a:0e: 28:71:ab:a4:6f:e7:9b:d5:dc:16:af:f1:f5:3a:b7:07:14:d6: 3f:45:9f:de:41:0f:2f:7a:de:29:15:e7:8b:6d:7b:86:1d:f9: f1:18:26:e3:17:0d:8a:11:55:ba:38:d5:c3:7b:36:ac:90:90: ec:90:02:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjYwNzIwMTcwNDA5WhcNMjYwNzI3MTcwNDA5WjAYMRYwFAYD VQQDEw02YTVlNTUwOS0yMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NLhpJ5UmBNkU93unvgw/P1gNw3TmDadvmHd//1CCuC26AXMn/9qJxh0OkcD 9wpqD3mBzxoOl4obPWbYObGtdsOnzXCUVwenha9pz7q8REZiKDqdPbnDWJTWa4xG Wnfz8SjL4Ga09aM2ytyZxT4j5Hea02LWjo6cXzSmj05KLsoJpK3WRYMsQK2C+Xz8 ra1EcPlL3oPIaefSAhkGKZK0+vkAZPa+dbeGHS0lCGKRN9J8drXUy3J+12U6nbUa 16EVNklancjLv/S72sDiptwkd8nQyCW73b0EqhRZ7dAgHtp6M/aBybYbaFRfrL9i 8MRCTFf+CZlRxqF+xlYtfhieMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUT3t7u 60MCd5XK+l/LihVqj7PoMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/5q1AhvI+rz2IdALTgtavg4lFMsoVG6FXxFhsCQ0zhgF8yiIrXI1usD+nlc uVhbvyejWYS6nS7Ehf76Pyit2SX2tbDY3Q7hbIjh3pqt52ZH1r8QzPTbQGE/FDYG MXl+zIcDna56ccJoktcglH3WPnU2Tal+W4oki/3fDV0RMkFRhDW8cuMWLuTJlK9B ZN5UsgemPTorI/qrYHe5K/yRrsOxKSYcNqZEQuorfAcPYYirFbJ85+O5yf+Q9Oun sk+1WtesSXoOKHGrpG/nm9XcFq/x9Tq3BxTWP0Wf3kEPL3reKRXni217hh358Rgm 4xcNihFVujjVw3s2rJCQ7JAC7A== -----END CERTIFICATE-----Generated at Wed Jul 22 00:43:27 2026 by rpki-client