$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: 4JTGBLUQ2qNd8a9uSILdkhnxyrUEK7FvTnKzm/hwtqg= Subject key identifier: DD:9C:99:12:B1:7C:49:73:31:E3:4F:FF:B9:31:86:EB:3D:40:33:B3 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 35DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 35A5 Signing time: Tue 18 Aug 2026 14:36:02 +0000 Manifest this update: Tue 18 Aug 2026 14:36:01 +0000 Manifest next update: Tue 25 Aug 2026 14:36:01 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: KvP2tOd58nBdnV2HreHWY89VBVoob6R6u5v6nD2rQSQ=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: GdbV5Ius2SX/2VWhDropz4MtiJxrTyNr0FB4ZLxG1hc=) 3: 550BDEE486FD11F194514C90ABEE528E.roa (hash: iL0IlNFnWDDdjTAF1iako5YyrA05aJHTqNYvClHPmeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13786 (0x35da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Aug 18 14:36:01 2026 GMT Not After : Aug 25 14:36:01 2026 GMT Subject: CN=6a846dd2-ea0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:c5:e1:ee:1c:3e:53:42:37:13:4f:4a:29: dd:8b:de:b7:14:6f:f3:52:5e:a7:65:a5:6d:31:9b: 39:c9:9b:c5:f3:49:6d:21:38:f5:7b:bf:b1:36:63: 51:3b:fe:e0:de:98:53:fb:14:ba:77:81:07:f1:45: c2:32:30:2c:48:ce:56:e5:9c:b8:e9:91:9c:ef:e6: 56:e6:99:d2:0a:41:87:e4:86:53:ca:99:50:d3:cb: a6:44:dc:b2:2c:e4:46:10:63:1a:ca:bb:82:c2:f4: 13:bd:39:1e:07:8f:6a:02:31:2a:03:c5:76:14:2b: 4c:2a:6f:d7:43:6c:c4:01:bd:81:df:c6:b5:a9:20: 28:d1:e4:0b:58:ee:1c:40:e9:2a:77:2f:ac:8d:cb: 58:8a:df:13:74:c1:b9:09:a9:2d:1c:fb:ed:f4:7a: 68:6b:2f:f7:22:70:9e:7e:5f:8b:0d:72:4f:5d:dd: b6:7e:0c:f4:89:23:97:dc:e1:b1:b1:da:ce:3a:ee: 4d:a7:fc:f1:77:2c:da:69:1c:ba:6c:3d:86:e9:c1: 8e:fb:be:ee:67:a0:4f:2b:1b:89:a7:7d:ce:94:af: d1:eb:1b:58:78:10:59:f3:2e:70:67:02:21:3f:63: 4b:d3:1c:14:4c:2e:bf:93:11:14:ce:a4:92:c4:bb: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:99:12:B1:7C:49:73:31:E3:4F:FF:B9:31:86:EB:3D:40:33:B3 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d8:ea:7f:29:8b:0a:75:a4:81:c9:82:da:7f:de:88:b1:d2: 09:41:ae:3a:01:66:3f:73:23:8f:a4:8a:c9:13:4f:dc:6b:1e: 0b:36:85:ac:06:d8:75:48:3c:07:82:24:4b:5a:ba:f4:6a:0c: 93:0d:3c:50:76:e1:ad:25:5f:d7:a2:82:ec:f1:73:14:9f:a0: e5:5c:d6:8d:a6:b2:03:67:35:11:84:b2:75:84:2b:83:9f:76: 66:c8:28:f2:89:e9:85:59:73:a3:6c:8e:f3:90:f0:82:91:b0: 5f:4d:58:6b:0b:a1:2a:53:e4:58:37:74:3a:4e:b3:6e:d8:56: 4e:af:11:1f:6a:34:c1:34:8a:dc:12:dc:0f:a5:4b:31:1f:14: c6:1e:b5:6e:ac:eb:56:1f:c5:15:49:1b:37:f0:fe:8e:d1:69: 58:b3:17:ff:c3:ad:26:d5:aa:30:5b:af:f4:95:4b:98:78:46: c3:cf:cd:6e:6f:44:08:45:17:dd:1e:d8:6e:47:8d:ca:a5:6b: 45:07:55:e4:e5:37:51:69:3a:e8:ce:12:55:e5:f9:c0:0e:da: a5:a0:7b:8e:75:bf:eb:8f:43:f3:a5:f1:69:ea:fd:1a:9f:c4: 52:bd:c7:ca:f8:6f:5a:9d:87:bf:e9:22:d8:11:52:f5:03:9e: 44:3b:dc:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjYwODE4MTQzNjAxWhcNMjYwODI1MTQzNjAxWjAYMRYwFAYD VQQDEw02YTg0NmRkMi1lYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxevF4e4cPlNCNxNPSindi963FG/zUl6nZaVtMZs5yZvF80ltITj1e7+xNmNR O/7g3phT+xS6d4EH8UXCMjAsSM5W5Zy46ZGc7+ZW5pnSCkGH5IZTyplQ08umRNyy LORGEGMayruCwvQTvTkeB49qAjEqA8V2FCtMKm/XQ2zEAb2B38a1qSAo0eQLWO4c QOkqdy+sjctYit8TdMG5CaktHPvt9Hpoay/3InCefl+LDXJPXd22fgz0iSOX3OGx sdrOOu5Np/zxdyzaaRy6bD2G6cGO+77uZ6BPKxuJp33OlK/R6xtYeBBZ8y5wZwIh P2NL0xwUTC6/kxEUzqSSxLswXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2cmRKx fElzMeNP/7kxhus9QDOzMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOdjqfymLCnWkgcmC2n/eiLHSCUGuOgFmP3Mjj6SKyRNP3GseCzaFrAbYdUg8 B4IkS1q69GoMkw08UHbhrSVf16KC7PFzFJ+g5VzWjaayA2c1EYSydYQrg592Zsgo 8onphVlzo2yO85DwgpGwX01YawuhKlPkWDd0Ok6zbthWTq8RH2o0wTSK3BLcD6VL MR8Uxh61bqzrVh/FFUkbN/D+jtFpWLMX/8OtJtWqMFuv9JVLmHhGw8/Nbm9ECEUX 3R7YbkeNyqVrRQdV5OU3UWk66M4SVeX5wA7apaB7jnW/649D86Xxaer9Gp/EUr3H yvhvWp2Hv+ki2BFS9QOeRDvc8g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:35 2026 by rpki-client