$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: 6pU1kmWyeSimNIwj0exGdb7ox2wefZYnw5gHfGBqtZc= Subject key identifier: 18:A1:07:69:E1:24:30:51:6D:8B:BF:DA:C1:7C:A4:43:9C:63:80:B6 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0D1B Signing time: Sun 12 Jul 2026 18:13:21 +0000 Manifest this update: Sun 12 Jul 2026 18:13:20 +0000 Manifest next update: Sun 19 Jul 2026 18:13:20 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: u7qHbQwMfL+Rmyv5XK3sSnxwNSodgPE+H5RutD16OpM=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 18:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Jul 12 18:13:20 2026 GMT Not After : Jul 19 18:13:20 2026 GMT Subject: CN=6a53d941-975b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:00:43:60:d7:78:27:e5:8c:ae:49:d9:03: 30:2e:0b:da:48:04:91:2d:f1:eb:0f:1c:e1:d3:cb: 24:3b:46:90:65:09:b9:7f:66:ef:f1:f4:d0:ae:50: 15:a4:55:77:7d:55:47:1d:b4:77:74:5a:00:69:cc: 50:90:07:9b:66:07:99:15:d9:88:68:94:aa:2a:19: ee:45:a5:cd:b0:09:b5:4c:6a:08:9c:3f:d8:96:d2: ca:46:c1:0d:45:fb:61:92:6e:75:3a:43:4e:ee:cd: 2d:3d:98:20:ba:7e:79:0e:ee:a4:c5:cb:3e:78:66: 22:f0:43:6d:3f:35:b5:1e:33:0d:2d:24:bd:6d:b2: 88:3c:a6:b7:61:ed:a6:52:ed:fb:1f:62:9e:03:58: 72:e0:0b:53:8b:5d:6f:58:c1:52:fc:f2:a0:88:a7: da:00:a7:b8:12:a1:aa:37:95:f2:a5:98:ea:80:2e: 82:28:ca:14:d5:c1:8e:91:8a:bb:fa:4e:b2:90:92: d7:0d:68:e4:69:5c:f6:88:16:e2:cb:cb:59:22:ef: a3:30:dc:ac:53:3b:41:cd:de:cd:33:2a:61:08:fb: 5c:86:dc:77:a8:a4:26:3f:a5:12:82:84:5a:16:42: 35:84:40:13:38:20:c6:db:b0:80:7d:50:9a:52:c6: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A1:07:69:E1:24:30:51:6D:8B:BF:DA:C1:7C:A4:43:9C:63:80:B6 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:12:f8:11:0d:24:1d:75:5b:8e:22:19:6e:08:cf:2c:1b:78: 5a:72:18:ad:05:64:3f:96:03:d7:33:cd:c1:c2:3c:2e:bd:d0: d4:f1:64:27:45:ec:32:dc:91:40:4a:ba:99:5c:14:3d:71:be: 18:d3:b9:41:f4:c3:c6:89:d0:fb:7a:d6:eb:20:16:09:39:41: f8:b8:80:88:38:78:4c:18:87:bd:a0:aa:86:25:80:ec:66:22: 73:d2:06:5e:38:dd:a2:96:80:0e:ec:c1:a4:fd:ed:18:e4:ba: 99:db:6f:c4:09:65:74:75:16:ae:bd:a8:a6:0e:04:f2:c5:d9: 51:db:2a:6e:87:1a:50:70:81:fd:dd:56:d9:24:54:0e:11:fc: fe:5a:14:07:48:32:98:e0:bb:c4:15:fa:3a:fc:fe:57:c7:6d: 7d:f0:c3:bc:a4:5b:a1:92:ac:ac:a0:15:4c:2e:88:97:0f:87: 69:0e:dd:8e:9d:72:8f:94:6b:a0:42:b2:fa:6f:6e:11:b9:1c: e8:e3:db:61:aa:bf:af:bc:51:d2:17:a6:d4:dd:37:1b:71:8e: 63:77:1e:55:c1:6a:58:1f:bb:97:32:67:82:c1:84:50:c2:61: 4f:1c:9c:e5:32:0d:c1:e3:20:1e:af:95:ed:9a:de:e7:3f:3b: 76:b9:8c:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjYwNzEyMTgxMzIwWhcNMjYwNzE5MTgxMzIwWjAYMRYwFAYD VQQDEw02YTUzZDk0MS05NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAIAQ2DXeCfljK5J2QMwLgvaSASRLfHrDxzh08skO0aQZQm5f2bv8fTQrlAV pFV3fVVHHbR3dFoAacxQkAebZgeZFdmIaJSqKhnuRaXNsAm1TGoInD/YltLKRsEN Rfthkm51OkNO7s0tPZggun55Du6kxcs+eGYi8ENtPzW1HjMNLSS9bbKIPKa3Ye2m Uu37H2KeA1hy4AtTi11vWMFS/PKgiKfaAKe4EqGqN5XypZjqgC6CKMoU1cGOkYq7 +k6ykJLXDWjkaVz2iBbiy8tZIu+jMNysUztBzd7NMyphCPtchtx3qKQmP6USgoRa FkI1hEATOCDG27CAfVCaUsaPTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBihB2nh JDBRbYu/2sF8pEOcY4C2MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAExL4EQ0kHXVbjiIZbgjPLBt4WnIYrQVkP5YD1zPNwcI8Lr3Q1PFkJ0XsMtyR QEq6mVwUPXG+GNO5QfTDxonQ+3rW6yAWCTlB+LiAiDh4TBiHvaCqhiWA7GYic9IG XjjdopaADuzBpP3tGOS6mdtvxAlldHUWrr2opg4E8sXZUdsqbocaUHCB/d1W2SRU DhH8/loUB0gymOC7xBX6Ovz+V8dtffDDvKRboZKsrKAVTC6Ilw+HaQ7djp1yj5Rr oEKy+m9uEbkc6OPbYaq/r7xR0hem1N03G3GOY3ceVcFqWB+7lzJngsGEUMJhTxyc 5TINweMgHq+V7Zre5z87drmMtg== -----END CERTIFICATE-----Generated at Sun Jul 12 22:35:05 2026 by rpki-client