$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: 7J4HALUI8VR4I2p3LcsZaBiGHrrqdOlhJIELpZS4BfI= Subject key identifier: 40:61:FA:00:2F:B1:41:FA:62:69:90:2C:70:66:15:2C:9F:83:D9:1C Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 3568 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 3568 Signing time: Mon 20 Jul 2026 14:16:56 +0000 Manifest this update: Mon 20 Jul 2026 14:16:56 +0000 Manifest next update: Mon 27 Jul 2026 14:16:56 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: CLocC/trlFR4N3Y+w0obc6SXJ7XyzvM0Ay3Msk2h5X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Jul 20 14:16:56 2026 GMT Not After : Jul 27 14:16:56 2026 GMT Subject: CN=6a5e2dd8-6155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:84:1d:4b:93:b2:13:ab:a8:98:d8:71:b7: dd:7c:81:1f:56:c4:1b:4a:6c:79:19:26:09:40:43: 1c:fd:8b:2b:40:d5:ee:93:a3:e7:1a:54:70:52:eb: 52:c0:18:16:89:5e:5a:05:97:0a:77:01:2f:ad:e6: 40:0e:31:41:ef:a0:ea:48:a7:98:e3:40:af:70:cc: 0b:e6:17:97:2a:9f:c9:d4:73:51:b7:7d:91:04:20: 6c:a3:00:51:5c:19:17:7a:1a:59:57:17:44:71:cb: 15:79:33:17:1a:f4:0b:d8:0b:2c:89:28:ef:ce:06: 70:f1:2d:96:50:91:64:1d:ba:51:72:66:db:42:d8: 9c:4f:82:64:d2:0b:8a:2c:4e:ed:58:ab:4c:d2:a0: 51:17:12:08:13:45:60:8e:5a:57:56:f8:b1:19:f2: db:24:35:b3:d8:d5:14:41:a8:58:32:cd:a9:08:4b: 41:0e:b5:af:6d:35:d7:82:47:ad:d0:3c:b6:da:79: ef:31:ca:88:12:62:29:96:58:67:d9:5f:28:f8:f0: a5:60:a7:e3:15:93:c7:f7:2f:6b:70:9f:0a:e7:f5: 0f:7f:e1:08:5b:05:95:01:97:90:ca:1e:01:42:51: 94:0c:7b:24:f7:bb:ae:4b:b2:e8:ec:bb:07:5a:f5: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:61:FA:00:2F:B1:41:FA:62:69:90:2C:70:66:15:2C:9F:83:D9:1C X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:20:c6:ae:45:62:39:59:8c:3e:0d:09:e5:90:68:93:be:3b: 5e:de:f3:e7:f7:72:81:a1:5c:f0:fb:c6:8b:6c:cb:94:d5:4f: 13:da:e4:df:18:d9:09:11:96:92:9a:9e:4b:6b:6f:3e:71:af: df:57:7b:46:ca:7f:fe:03:ed:a2:4d:cb:b9:b0:48:83:32:ec: 8a:63:2e:6e:dc:22:71:07:06:46:7b:fe:d8:71:b4:a3:4e:e2: 7f:f4:75:2f:06:8a:f4:52:0c:d0:b9:4f:8d:b0:f5:86:c3:04: b1:b5:4a:3b:cb:cd:b9:03:7d:7c:e2:4a:99:60:ee:6a:c4:f1: f9:d2:7f:50:d8:54:8d:a7:f0:11:0c:91:82:13:96:73:e9:f5: 8e:81:e6:ab:9c:ff:af:c9:df:5f:e7:bb:12:6e:8c:86:7d:8e: 8d:a0:b8:23:40:83:97:9b:ce:1c:bb:12:07:ed:a5:7c:bd:0d: 93:1c:7b:96:91:66:be:71:73:57:c5:8b:0f:00:83:0e:90:be: f6:76:b5:67:86:e4:96:98:47:ed:a7:89:e3:92:86:10:20:22: a2:99:e2:0f:d2:93:6b:9d:30:68:dc:72:9b:73:46:64:ec:33: 4e:35:ff:bd:0f:ac:be:4b:94:99:83:0b:8c:a0:3f:5d:f9:43: 5f:5f:67:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjYwNzIwMTQxNjU2WhcNMjYwNzI3MTQxNjU2WjAYMRYwFAYD VQQDEw02YTVlMmRkOC02MTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iGEHUuTshOrqJjYcbfdfIEfVsQbSmx5GSYJQEMc/YsrQNXuk6PnGlRwUutS wBgWiV5aBZcKdwEvreZADjFB76DqSKeY40CvcMwL5heXKp/J1HNRt32RBCBsowBR XBkXehpZVxdEccsVeTMXGvQL2AssiSjvzgZw8S2WUJFkHbpRcmbbQticT4Jk0guK LE7tWKtM0qBRFxIIE0VgjlpXVvixGfLbJDWz2NUUQahYMs2pCEtBDrWvbTXXgket 0Dy22nnvMcqIEmIpllhn2V8o+PClYKfjFZPH9y9rcJ8K5/UPf+EIWwWVAZeQyh4B QlGUDHsk97uuS7Lo7LsHWvXsqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBh+gAv sUH6YmmQLHBmFSyfg9kcMB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQiDGrkViOVmMPg0J5ZBok747Xt7z5/dygaFc8PvGi2zLlNVPE9rk3xjZCRGW kpqeS2tvPnGv31d7Rsp//gPtok3LubBIgzLsimMubtwicQcGRnv+2HG0o07if/R1 LwaK9FIM0LlPjbD1hsMEsbVKO8vNuQN9fOJKmWDuasTx+dJ/UNhUjafwEQyRghOW c+n1joHmq5z/r8nfX+e7Em6Mhn2OjaC4I0CDl5vOHLsSB+2lfL0Nkxx7lpFmvnFz V8WLDwCDDpC+9na1Z4bklphH7aeJ45KGECAiopniD9KTa50waNxym3NGZOwzTjX/ vQ+svkuUmYMLjKA/XflDX19n4w== -----END CERTIFICATE-----Generated at Tue Jul 21 17:58:23 2026 by rpki-client