$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json) Hash identifier: wznA0Ap+dQu68GaCbcsPycQ419+j66tHEaowfYWnq3k= Subject key identifier: 2D:56:0C:D3:31:95:4E:DB:36:39:81:05:1C:41:E1:84:53:FF:10:2B Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft Manifest number: AC Signing time: Mon 27 Jul 2026 09:22:51 +0000 Manifest this update: Mon 27 Jul 2026 09:22:51 +0000 Manifest next update: Mon 03 Aug 2026 09:22:51 +0000 Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: hQstO59AgGxuj+mbo7eZJfMeKhbGoTk55zxrhHjEvSQ=) 2: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=) 3: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=) 4: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Jul 27 09:22:51 2026 GMT Not After : Aug 3 09:22:51 2026 GMT Subject: CN=6a67236b-ec74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:e7:9a:99:6d:87:8f:17:1e:52:cf:fb:d1: be:28:19:b9:ba:92:4b:93:8f:41:c0:46:3d:30:d3: 27:e4:f5:67:01:71:f7:22:b7:96:90:11:42:cb:f4: ec:e6:e9:9e:dc:63:ff:d2:46:07:c4:b3:89:4e:35: cf:5b:71:80:4d:6d:45:69:fa:92:ac:02:04:2b:28: 0b:72:e7:d3:f8:b4:5c:6c:a8:8a:b0:f0:9f:97:42: c9:3e:0f:d7:e3:05:4d:cf:7e:3e:f5:f6:17:0b:cc: 15:59:e1:b4:40:9d:27:c5:49:a9:46:89:7d:15:8a: 9e:f7:f8:29:1f:8c:b0:b7:d9:24:ab:ee:4f:63:fa: 3f:84:b9:c1:27:2e:f1:c3:41:e3:17:5e:ca:22:bc: 86:24:b7:ea:78:b0:3b:a1:13:29:23:22:e8:29:23: cf:08:0c:f9:e6:ae:04:68:f6:8b:b7:c7:5b:0a:c3: 9c:b3:c3:9c:05:ed:0e:3f:99:08:cf:cb:87:97:e7: 40:93:21:db:7d:ac:6e:d2:d8:ee:3d:b7:21:aa:2c: 39:96:10:d9:ea:90:bc:89:1a:e4:fd:05:89:e6:03: aa:c2:4c:0b:2e:b6:89:5c:fe:d1:af:ee:d2:b1:9a: 04:5d:40:6a:3b:02:ea:0e:58:37:2a:5d:d1:b9:24: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:56:0C:D3:31:95:4E:DB:36:39:81:05:1C:41:E1:84:53:FF:10:2B X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:ce:30:30:28:fa:6e:80:f8:56:0c:6e:c1:c5:e4:7f:43: b7:06:ce:b3:40:cb:0d:17:68:b8:fb:9b:0b:7a:1c:9e:5f:e8: 40:e6:c3:68:ac:f3:fb:b6:33:0c:1f:84:5a:7c:f8:56:12:e9: 91:fd:fd:7d:38:71:2b:90:19:82:58:1c:05:32:96:2b:be:8a: d3:5b:5f:0b:b2:20:bd:aa:03:19:b5:3d:25:8d:c7:9c:16:24: 55:ea:f2:57:9a:05:50:b8:d7:32:a4:a0:a1:d4:16:fe:61:81: 98:31:94:f9:bc:5d:19:66:f9:0e:0e:38:e7:52:29:98:1d:ea: af:f9:2f:e7:a2:50:4f:6b:77:c5:3c:70:1e:92:83:4b:cd:18: 29:d9:92:2b:ae:c1:be:35:84:6c:12:64:cc:a9:94:55:74:ac: f4:68:aa:6b:b1:fe:90:29:77:da:61:e3:23:1a:30:65:be:cc: 9a:d4:8e:30:ba:54:2b:5d:da:9d:2e:88:80:1b:69:f1:de:42: e3:87:73:b1:b2:3b:44:e4:a3:20:33:8b:22:c1:19:83:d1:66: 49:9d:0e:52:e6:7a:48:07:c4:0c:c3:ec:63:50:47:d4:3c:02: a4:1b:f2:86:d1:fc:98:48:18:ad:e7:35:68:42:c6:2e:2e:d5: a2:93:73:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYwNzI3MDkyMjUxWhcNMjYwODAzMDkyMjUxWjAYMRYwFAYD VQQDEw02YTY3MjM2Yi1lYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDznmplth48XHlLP+9G+KBm5upJLk49BwEY9MNMn5PVnAXH3IreWkBFCy/Ts 5ume3GP/0kYHxLOJTjXPW3GATW1FafqSrAIEKygLcufT+LRcbKiKsPCfl0LJPg/X 4wVNz34+9fYXC8wVWeG0QJ0nxUmpRol9FYqe9/gpH4ywt9kkq+5PY/o/hLnBJy7x w0HjF17KIryGJLfqeLA7oRMpIyLoKSPPCAz55q4EaPaLt8dbCsOcs8OcBe0OP5kI z8uHl+dAkyHbfaxu0tjuPbchqiw5lhDZ6pC8iRrk/QWJ5gOqwkwLLraJXP7Rr+7S sZoEXUBqOwLqDlg3Kl3RuSSNmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1WDNMx lU7bNjmBBRxB4YRT/xArMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVm NGFaY3Z4VnpRVENvNVVHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAppLOMDAo+m6A+FYMbsHF5H9DtwbOs0DLDRdouPubC3ocnl/oQObDaKzz+7Yz DB+EWnz4VhLpkf39fThxK5AZglgcBTKWK76K01tfC7IgvaoDGbU9JY3HnBYkVery V5oFULjXMqSgodQW/mGBmDGU+bxdGWb5Dg4451IpmB3qr/kv56JQT2t3xTxwHpKD S80YKdmSK67BvjWEbBJkzKmUVXSs9Giqa7H+kCl32mHjIxowZb7MmtSOMLpUK13a nS6IgBtp8d5C44dzsbI7ROSjIDOLIsEZg9FmSZ0OUuZ6SAfEDMPsY1BH1DwCpBvy htH8mEgYrec1aELGLi7VopNziw== -----END CERTIFICATE-----Generated at Mon Jul 27 22:57:03 2026 by rpki-client