$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft File: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json) Hash identifier: l28ANR9XLqDoI7rbOMwEYPjIfQN7rYiv4JvJ2Hau1ts= Subject key identifier: F9:20:5B:34:B0:9D:19:70:EB:CC:76:48:52:56:0C:FA:83:35:B0:D0 Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft Manifest number: 50 Signing time: Tue 21 Jul 2026 10:10:31 +0000 Manifest this update: Tue 21 Jul 2026 10:10:30 +0000 Manifest next update: Tue 28 Jul 2026 10:10:30 +0000 Files and hashes: 1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: 6SMEKiSVHCHOQU+en7w6YubPJuLkW+prXRWrMLI8DbQ=) 2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296 Validity Not Before: Jul 21 10:10:30 2026 GMT Not After : Jul 28 10:10:30 2026 GMT Subject: CN=6a5f4597-1f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:46:3e:d3:4d:83:3a:ae:5c:d1:33:9e:6b: bf:69:90:3c:ac:52:ee:f8:54:55:c5:c5:14:2d:40: 31:8f:af:90:da:f8:91:1d:22:dd:14:ec:5d:27:b9: a0:31:63:3d:8d:3f:80:b8:70:04:b8:cf:59:fa:e3: f6:5b:61:b0:45:4d:36:19:f0:f6:ab:cc:87:86:1d: 97:87:b7:d1:da:22:c4:60:ff:72:e5:60:b4:0c:9a: a8:6f:54:0a:b6:93:ac:29:6e:c8:ec:8e:31:03:ac: db:d5:28:03:46:a7:95:a5:bf:47:8c:2a:aa:4b:22: c0:c9:0f:0f:ca:9b:98:94:e4:0c:cc:26:3a:50:be: aa:e2:5c:96:cf:f8:f0:5f:bb:2c:9d:5a:26:23:29: ea:56:37:bd:c3:00:41:7a:2c:2e:da:24:a0:24:7c: 33:b9:ad:95:23:d9:64:8c:de:3e:0e:4e:ea:67:ab: 64:15:95:bd:68:40:f8:be:23:44:64:1b:7e:34:3d: dc:98:29:b9:9f:d4:c4:0d:f8:69:51:03:f6:82:b6: e0:67:b6:ba:57:74:33:56:7f:d9:76:54:0c:e0:f8: 01:69:8d:23:fb:70:22:e4:1f:a7:bb:a2:e4:76:30: 89:f0:fb:51:c3:f1:93:8d:e6:6c:77:1a:44:0c:57: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:5B:34:B0:9D:19:70:EB:CC:76:48:52:56:0C:FA:83:35:B0:D0 X509v3 Authority Key Identifier: keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:45:6d:36:02:33:24:0b:02:3c:47:2c:f9:ac:68:fd:98:ff: af:42:cf:93:72:c9:03:68:d5:a6:7c:05:19:06:9d:6c:ce:a4: ae:ef:fc:53:24:86:de:eb:7e:2a:30:6d:93:ef:5e:46:9e:0f: f5:ba:c3:ae:4c:53:30:e3:16:49:1a:a7:69:92:cf:73:29:e8: 80:00:c4:dc:77:60:72:35:c6:ac:b2:6c:b1:1c:50:42:35:22: 8e:b2:f5:2d:35:c9:49:eb:aa:93:40:68:e8:a0:78:28:81:11: bd:43:dc:42:b4:d9:8e:94:b8:b8:84:c1:6a:b0:7b:d6:7e:d8: 21:40:36:58:ba:bc:c0:a1:e8:f8:d1:93:d4:b3:b7:21:5a:c4: 58:8b:78:18:f2:14:d8:4e:3c:84:53:77:fa:f6:a0:e5:ce:be: a3:99:0c:16:e2:25:a6:a1:dc:c0:49:20:6c:5d:30:b4:eb:d7: 7d:ab:8b:6c:59:12:9f:bc:19:52:f9:e1:24:6f:af:5a:ea:38: 5a:2e:4e:d0:a8:c0:c4:b2:b0:e3:40:d2:c8:99:a9:cb:25:de: 26:c5:dc:fa:25:9f:1d:18:d6:e1:01:ac:e1:65:cb:d8:2e:73: 46:d2:a3:44:97:7f:39:9f:cf:7e:df:10:9f:59:33:3a:9c:ac: b8:cb:5d:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF MjEzQzI5NjAeFw0yNjA3MjExMDEwMzBaFw0yNjA3MjgxMDEwMzBaMBgxFjAUBgNV BAMTDTZhNWY0NTk3LTFmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvb0Y+002DOq5c0TOea79pkDysUu74VFXFxRQtQDGPr5Da+JEdIt0U7F0nuaAx Yz2NP4C4cAS4z1n64/ZbYbBFTTYZ8ParzIeGHZeHt9HaIsRg/3LlYLQMmqhvVAq2 k6wpbsjsjjEDrNvVKANGp5Wlv0eMKqpLIsDJDw/Km5iU5AzMJjpQvqriXJbP+PBf uyydWiYjKepWN73DAEF6LC7aJKAkfDO5rZUj2WSM3j4OTupnq2QVlb1oQPi+I0Rk G340PdyYKbmf1MQN+GlRA/aCtuBntrpXdDNWf9l2VAzg+AFpjSP7cCLkH6e7ouR2 MInw+1HD8ZON5mx3GkQMVxGxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+SBbNLCd GXDrzHZIUlYM+oM1sNAwHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD NzcwLzRBQ0Y5NkQ2MTBERTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZt cThCYlFJUFRQd3VJVHdwWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoRW02AjMkCwI8Ryz5rGj9mP+vQs+TcskDaNWmfAUZBp1szqSu7/xTJIbe634q MG2T715Gng/1usOuTFMw4xZJGqdpks9zKeiAAMTcd2ByNcassmyxHFBCNSKOsvUt NclJ66qTQGjooHgogRG9Q9xCtNmOlLi4hMFqsHvWftghQDZYurzAoej40ZPUs7ch WsRYi3gY8hTYTjyEU3f69qDlzr6jmQwW4iWmodzASSBsXTC069d9q4tsWRKfvBlS +eEkb69a6jhaLk7QqMDEsrDjQNLImanLJd4mxdz6JZ8dGNbhAazhZcvYLnNG0qNE l385n89+3xCfWTM6nKy4y12q -----END CERTIFICATE-----Generated at Tue Jul 21 17:57:58 2026 by rpki-client