$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft File: hKiqOolLETYwXceZBvulQzS1PeA.mft (raw, json) Hash identifier: /eSuRgaNQbCF68VT2hR1VY5oMbdH4kZWnZe5gjOU+UA= Subject key identifier: C7:41:57:35:E8:AA:B6:74:39:E5:56:37:8A:52:6B:7C:73:63:61:68 Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft Manifest number: 18 Signing time: Fri 17 Jul 2026 10:25:34 +0000 Manifest this update: Fri 17 Jul 2026 10:25:33 +0000 Manifest next update: Fri 24 Jul 2026 10:25:33 +0000 Files and hashes: 1: hKiqOolLETYwXceZBvulQzS1PeA.crl (hash: Z8qZWncU8ffT6E/Y7d3YgZXVJXNq8vfTURDmvDOMIIg=) 2: 1BEB68B66B8511F1A487D0D76547A888.roa (hash: GmeisJuhWQiDJx9dEkp8ML1jJ+SLX+9g6qVw8wX/9nU=) 3: 88CC215E697911F18B9BC60E7E47A888.roa (hash: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Jul 17 10:25:33 2026 GMT Not After : Jul 24 10:25:33 2026 GMT Subject: CN=6a5a031e-77c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:99:13:12:52:ff:89:2c:95:9f:07:93:57: 9b:77:a1:fd:3f:79:d6:cf:de:a0:de:0d:bb:5e:01: 85:3f:94:98:55:8e:56:33:42:7c:fb:73:bc:96:4a: 86:60:62:98:b0:03:c2:cd:09:55:21:0c:0f:7f:cf: f3:58:75:9b:24:92:79:6f:73:eb:44:c0:69:39:b1: 16:b7:f7:1a:17:be:c7:e4:6a:ee:cc:e3:92:b7:a5: 13:17:fc:75:6b:1e:ad:ef:b1:ec:63:85:cb:03:29: 27:3f:fb:41:e2:94:5d:54:ab:63:56:66:07:ef:68: d1:4c:32:98:b1:ff:73:a2:14:4c:aa:a7:e1:e1:64: 79:b0:07:59:26:8e:4b:76:24:03:ee:68:73:50:5c: 16:4d:3b:e3:85:61:7b:79:db:da:2f:d7:20:db:e6: f7:7a:71:11:e8:8f:30:c9:af:e2:af:76:e8:73:be: ac:3b:f1:60:50:29:0b:6e:65:20:10:d7:63:10:52: 0d:2a:d0:61:9d:9c:1b:e7:ef:17:cd:11:3e:5a:66: b1:14:7f:9f:46:00:ae:29:9f:fb:56:36:9b:4c:51: ea:4b:9b:25:09:9f:89:9f:07:b5:fe:d4:e4:cb:1a: 5f:48:c1:9d:5c:57:a2:ba:20:3e:29:c2:5a:43:06: 08:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:57:35:E8:AA:B6:74:39:E5:56:37:8A:52:6B:7C:73:63:61:68 X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6e:5c:97:a8:44:1d:3c:e9:8c:65:15:e3:cb:eb:30:dd:d5: 31:80:9d:b4:0e:43:d0:06:70:7b:4c:5d:9f:2b:90:bd:ef:2d: 43:83:67:c9:05:a6:67:ff:85:54:52:81:b1:9c:10:58:b4:99: 87:8b:bc:38:df:1d:95:bb:96:fc:c2:af:8b:aa:36:c2:03:25: 51:e1:9b:e7:45:79:ad:18:15:00:f8:b6:0d:a2:a3:b5:62:65: 35:a0:43:09:d5:ef:f0:fe:5c:87:d8:20:e3:6a:28:e3:01:a7: b4:a8:96:7f:25:46:72:33:84:bb:39:dd:80:de:cc:33:f0:a6: 83:08:7f:8b:13:d2:56:e9:ed:ad:08:a1:53:2e:0e:59:a0:06: 2a:a7:37:98:ec:8b:23:d3:2b:4b:3b:62:3b:59:46:91:3c:5e: da:e3:67:c5:24:d6:26:30:9d:eb:c7:e4:68:0f:99:79:6a:33: 39:5f:ab:40:38:f3:58:20:43:1b:95:19:29:00:a4:35:97:73: bc:0e:92:20:e5:37:62:d5:3b:2e:a8:1a:5a:21:bf:e9:7f:5d: 65:1b:e9:5e:56:d3:81:ce:46:b2:49:8a:b3:d8:c3:43:ac:9d: cd:df:2c:2e:4b:b6:d7:78:f1:37:8b:8d:4c:60:3c:ef:d3:ec: 9a:2c:f4:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA3MTcxMDI1MzNaFw0yNjA3MjQxMDI1MzNaMBgxFjAUBgNV BAMTDTZhNWEwMzFlLTc3YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+RpkTElL/iSyVnweTV5t3of0/edbP3qDeDbteAYU/lJhVjlYzQnz7c7yWSoZg YpiwA8LNCVUhDA9/z/NYdZskknlvc+tEwGk5sRa39xoXvsfkau7M45K3pRMX/HVr Hq3vsexjhcsDKSc/+0HilF1Uq2NWZgfvaNFMMpix/3OiFEyqp+HhZHmwB1kmjkt2 JAPuaHNQXBZNO+OFYXt529ov1yDb5vd6cRHojzDJr+Kvduhzvqw78WBQKQtuZSAQ 12MQUg0q0GGdnBvn7xfNET5aZrEUf59GAK4pn/tWNptMUepLmyUJn4mfB7X+1OTL Gl9IwZ1cV6K6ID4pwlpDBgjFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx0FXNeiq tnQ55VY3ilJrfHNjYWgwHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 OUQyLzIzRkRBNEFFNjk3MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZ d1hjZVpCdnVsUXpTMVBlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOblyXqEQdPOmMZRXjy+sw3dUxgJ20DkPQBnB7TF2fK5C97y1Dg2fJBaZn/4VU UoGxnBBYtJmHi7w43x2Vu5b8wq+LqjbCAyVR4ZvnRXmtGBUA+LYNoqO1YmU1oEMJ 1e/w/lyH2CDjaijjAae0qJZ/JUZyM4S7Od2A3swz8KaDCH+LE9JW6e2tCKFTLg5Z oAYqpzeY7Isj0ytLO2I7WUaRPF7a42fFJNYmMJ3rx+RoD5l5ajM5X6tAOPNYIEMb lRkpAKQ1l3O8DpIg5Tdi1TsuqBpaIb/pf11lG+leVtOBzkaySYqz2MNDrJ3N3ywu S7bXePE3i41MYDzv0+yaLPTE -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:42 2026 by rpki-client