$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: Au3cQQmlyZKu/YpXyzC8DZpONWg37GTJOb92YNzbdsQ= Subject key identifier: EB:CE:F1:65:BA:C5:7D:9D:B0:47:0C:CC:B3:73:76:2C:B7:5E:8D:A1 Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 01D7 Signing time: Mon 03 Aug 2026 04:50:04 +0000 Manifest this update: Mon 03 Aug 2026 04:50:04 +0000 Manifest next update: Mon 10 Aug 2026 04:50:04 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: 7F3J8WYF+1cckcJ/6Gm4Ly9d+1lVnHxoQEOG3NUu2+w=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 04:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Aug 3 04:50:04 2026 GMT Not After : Aug 10 04:50:04 2026 GMT Subject: CN=6a701dfc-5535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:64:99:b6:ac:61:97:7f:af:c6:a4:74:9c: 08:d2:f3:f4:de:26:7e:62:15:e6:de:56:7a:34:5c: 28:2b:77:1f:1a:ee:d1:54:11:a1:87:36:1e:f8:2a: ee:9f:90:9f:25:13:68:dc:a3:9e:a7:78:3e:33:93: 1f:bc:00:ba:03:93:42:5b:c0:19:58:ae:dd:67:84: 0c:35:f1:9c:a0:2a:f2:f9:fc:51:a7:da:56:fa:d8: 7f:b5:88:ec:7d:78:18:61:5c:39:16:49:f8:46:fd: 24:8a:06:af:55:76:c1:67:da:81:6a:46:97:53:ec: 3f:b7:6f:96:36:a2:7b:38:d7:1c:84:9a:61:06:e7: 26:29:a5:63:df:43:2b:0e:5e:34:e0:2f:51:ef:1c: d8:cb:ad:33:bb:44:6d:84:e2:7b:da:54:5f:58:d7: 8a:ba:cf:00:c2:07:02:ae:98:b2:23:2a:6b:b8:b5: db:1a:32:06:88:3c:47:76:70:61:1e:cd:af:31:97: cb:89:2b:b6:c2:a5:4f:29:87:58:4f:9b:cc:2f:a6: c6:62:65:ae:67:6f:65:fa:7e:c4:3e:07:f5:d0:7d: ef:be:af:17:a4:9e:9e:9d:97:8f:89:a6:28:12:95: e8:9e:8e:9b:44:77:84:eb:87:d7:61:00:79:83:39: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CE:F1:65:BA:C5:7D:9D:B0:47:0C:CC:B3:73:76:2C:B7:5E:8D:A1 X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a6:ed:23:ad:5e:77:c2:4d:de:22:6a:7f:89:70:e8:3f:92: 40:a3:53:82:77:91:c8:6f:dc:d3:10:31:cf:14:7e:81:4a:8d: b7:fc:93:bd:0d:2b:06:e4:a1:b8:e1:98:cc:0d:8c:ee:58:2f: c3:ac:fe:fa:da:ff:1b:d5:05:93:dd:6d:85:23:a9:51:3f:eb: 87:74:38:09:4e:12:e5:8f:0b:61:14:e8:60:a2:7a:98:5f:b4: ec:a4:9f:1f:fa:77:d0:4d:3a:5a:9a:ec:0b:6b:99:49:46:15: c1:6d:95:c6:79:9e:34:8e:ae:44:08:03:e1:56:31:d5:d4:d1: 50:f8:bd:91:fb:6a:b9:a2:2d:92:20:57:22:36:02:81:c5:86: 1c:fa:c2:6c:b9:9a:58:dd:c3:99:23:ce:fd:e7:c9:f1:dc:99: ca:49:34:2c:ac:f8:cd:66:f1:b1:f9:04:51:01:5e:cc:a8:90: 2c:08:8f:f2:ab:fe:a2:99:58:6e:b3:77:22:78:5b:0a:7d:f2: 86:f9:e0:0b:c3:82:78:6c:7d:d7:a2:db:54:be:00:59:73:33: 23:52:01:a7:8d:52:18:e8:6a:b0:03:01:9a:ea:5a:c5:69:aa: 86:0d:e1:80:75:bc:7e:ac:25:18:e2:ad:68:17:65:79:10:ab: f4:3f:67:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjYwODAzMDQ1MDA0WhcNMjYwODEwMDQ1MDA0WjAYMRYwFAYD VQQDEw02YTcwMWRmYy01NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+FkmbasYZd/r8akdJwI0vP03iZ+YhXm3lZ6NFwoK3cfGu7RVBGhhzYe+Cru n5CfJRNo3KOep3g+M5MfvAC6A5NCW8AZWK7dZ4QMNfGcoCry+fxRp9pW+th/tYjs fXgYYVw5Fkn4Rv0kigavVXbBZ9qBakaXU+w/t2+WNqJ7ONcchJphBucmKaVj30Mr Dl404C9R7xzYy60zu0RthOJ72lRfWNeKus8AwgcCrpiyIypruLXbGjIGiDxHdnBh Hs2vMZfLiSu2wqVPKYdYT5vML6bGYmWuZ29l+n7EPgf10H3vvq8XpJ6enZePiaYo EpXono6bRHeE64fXYQB5gzk4IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvO8WW6 xX2dsEcMzLNzdiy3Xo2hMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdabtI61ed8JN3iJqf4lw6D+SQKNTgneRyG/c0xAxzxR+gUqNt/yTvQ0rBuSh uOGYzA2M7lgvw6z++tr/G9UFk91thSOpUT/rh3Q4CU4S5Y8LYRToYKJ6mF+07KSf H/p30E06WprsC2uZSUYVwW2VxnmeNI6uRAgD4VYx1dTRUPi9kftquaItkiBXIjYC gcWGHPrCbLmaWN3DmSPO/efJ8dyZykk0LKz4zWbxsfkEUQFezKiQLAiP8qv+oplY brN3InhbCn3yhvngC8OCeGx916LbVL4AWXMzI1IBp41SGOhqsAMBmupaxWmqhg3h gHW8fqwlGOKtaBdleRCr9D9nkA== -----END CERTIFICATE-----Generated at Mon Aug 3 20:58:41 2026 by rpki-client