$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft File: He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json) Hash identifier: KvKQ2h1X46AEDY0ZVINRkYjBRHNsWU2pQ2pK815UWBA= Subject key identifier: 55:80:86:DE:4B:AB:FA:61:36:47:2C:B8:58:00:FB:92:FB:22:B1:F2 Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft Manifest number: 02BE Signing time: Wed 19 Aug 2026 01:54:33 +0000 Manifest this update: Wed 19 Aug 2026 01:54:32 +0000 Manifest next update: Wed 26 Aug 2026 01:54:32 +0000 Files and hashes: 1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: Or8btmsB56X5aPl8/rrIWDNEX1COpjPBluel74Vo9Gs=) 2: 54365208708411EDA8B14246C4F9AE02.roa (hash: XkgCUe6o/GCC4RXMS466VJWBGD4478vydtNuBFIJtZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Aug 19 01:54:32 2026 GMT Not After : Aug 26 01:54:32 2026 GMT Subject: CN=6a850cd9-f5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:bd:3c:f4:c7:a2:0e:21:4f:48:0f:f3:ac: 75:38:77:ea:48:bc:ff:32:82:3c:cf:1b:d9:06:60: d4:14:76:f9:2d:1f:43:9f:ac:93:d3:17:e6:bf:32: 0e:65:00:71:e0:9b:a7:72:b4:75:d0:50:e5:cb:8e: e7:f9:9d:63:7d:3a:6e:1e:24:07:b7:0f:07:85:96: df:2a:1c:4d:2f:88:d7:db:57:f0:5a:b3:d7:10:cc: 3e:5f:6d:25:1e:76:7c:54:29:d0:2c:8d:16:9f:54: 33:cc:d2:35:2a:62:14:7b:b6:b3:11:38:43:86:6d: 37:63:5b:dd:91:c3:d0:e1:24:a4:56:69:39:2c:f0: 1d:2f:b0:0b:18:85:88:df:46:e6:c0:e2:54:7a:11: aa:56:f8:49:1c:a1:19:e9:8b:cb:ef:03:12:33:14: 85:a6:2d:f9:96:05:99:38:46:f4:07:55:be:ea:4d: 19:51:b9:d4:15:91:fe:a1:0a:af:f8:93:82:cc:10: 2b:df:ac:13:39:10:7a:6a:a2:81:40:12:5d:a2:79: 50:0c:7e:b9:f2:8d:a5:3f:fb:3c:be:93:fd:12:fd: 96:0c:cd:13:f5:de:f9:fc:c2:84:3f:3c:7a:81:42: 6f:94:b4:cd:47:a3:36:72:75:c9:ba:af:24:bf:df: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:80:86:DE:4B:AB:FA:61:36:47:2C:B8:58:00:FB:92:FB:22:B1:F2 X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:1d:17:ad:f0:1f:ee:f4:c4:83:32:8b:21:81:99:b1:43: 95:57:4b:a3:44:33:b0:b7:5a:bb:23:b0:7c:6c:20:c1:92:cb: 46:51:ee:1b:ae:57:b5:8d:f6:e0:e2:c1:a6:ee:d6:ba:8e:1b: 5d:40:7b:46:12:40:03:8f:ab:b1:df:93:79:fc:67:99:d8:20: 3a:7d:a9:f5:16:16:e7:57:31:02:f1:0a:2c:8e:71:0f:f9:be: 1e:c3:f0:72:ff:f7:8e:be:ab:dd:2b:6b:7e:df:2a:c6:11:f0: 68:4b:68:4c:92:51:43:d7:c2:4b:c6:fc:8c:50:77:20:17:9f: f8:ba:26:6f:dc:f6:22:c7:b7:1c:e4:31:39:e1:36:77:79:d2: 78:6b:84:be:30:b3:48:5f:71:02:bf:3a:67:d0:0e:fd:86:57: 22:70:8b:57:46:7f:bd:7c:99:05:2c:fb:64:d6:60:8e:71:4b: 64:17:f4:4b:d4:cd:fe:48:4d:c9:9d:47:76:e2:9f:cf:96:22: 3e:65:eb:7e:91:e5:b6:92:ba:a0:df:62:ec:f7:d4:cc:c6:19: f3:3b:68:d6:bb:5a:9d:48:80:81:dc:99:97:26:64:9c:73:72: c6:41:7b:d4:7a:8b:97:10:4f:da:82:31:bc:4c:2d:6d:04:1b: a4:46:d2:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjYwODE5MDE1NDMyWhcNMjYwODI2MDE1NDMyWjAYMRYwFAYD VQQDEw02YTg1MGNkOS1mNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcG9PPTHog4hT0gP86x1OHfqSLz/MoI8zxvZBmDUFHb5LR9Dn6yT0xfmvzIO ZQBx4JuncrR10FDly47n+Z1jfTpuHiQHtw8HhZbfKhxNL4jX21fwWrPXEMw+X20l HnZ8VCnQLI0Wn1QzzNI1KmIUe7azEThDhm03Y1vdkcPQ4SSkVmk5LPAdL7ALGIWI 30bmwOJUehGqVvhJHKEZ6YvL7wMSMxSFpi35lgWZOEb0B1W+6k0ZUbnUFZH+oQqv +JOCzBAr36wTORB6aqKBQBJdonlQDH658o2lP/s8vpP9Ev2WDM0T9d75/MKEPzx6 gUJvlLTNR6M2cnXJuq8kv9+cvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWAht5L q/phNkcsuFgA+5L7IrHyMB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODVFMy8xQjEyQTgyNDcwNzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdo amRldEJxMnF4SkVlUGk5NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzgdF63wH+70xIMyiyGBmbFDlVdLo0QzsLdauyOwfGwgwZLLRlHuG65XtY32 4OLBpu7Wuo4bXUB7RhJAA4+rsd+TefxnmdggOn2p9RYW51cxAvEKLI5xD/m+HsPw cv/3jr6r3Strft8qxhHwaEtoTJJRQ9fCS8b8jFB3IBef+Lomb9z2Ise3HOQxOeE2 d3nSeGuEvjCzSF9xAr86Z9AO/YZXInCLV0Z/vXyZBSz7ZNZgjnFLZBf0S9TN/khN yZ1HduKfz5YiPmXrfpHltpK6oN9i7PfUzMYZ8zto1rtanUiAgdyZlyZknHNyxkF7 1HqLlxBP2oIxvEwtbQQbpEbSzQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:33 2026 by rpki-client