$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: 66gADGnBen7Yfsw+i5nMMh6MHS+g0rZpkF1SOWUUVns= Subject key identifier: 4F:74:6D:58:EE:78:07:40:A8:09:A2:77:8A:9F:8C:04:BE:01:65:93 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 0291 Signing time: Sun 05 Jul 2026 02:14:55 +0000 Manifest this update: Sun 05 Jul 2026 02:14:55 +0000 Manifest next update: Sun 12 Jul 2026 02:14:55 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: lwfUYdm7FPSXuYqijne+B3ocba24m3KLQ0tap3QsBTI=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Jul 5 02:14:55 2026 GMT Not After : Jul 12 02:14:55 2026 GMT Subject: CN=6a49be1f-4430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:2a:ed:1c:76:e2:2a:09:c9:d2:e1:36:2b: 65:f5:3d:aa:41:1d:b1:65:0e:82:e4:72:65:66:b8: a3:18:0f:30:6a:85:e6:e8:b5:d4:3d:86:ee:76:cc: ee:fd:0b:1d:41:25:92:a3:a6:db:16:0e:23:c6:8e: 0c:bb:54:c7:00:dc:09:09:be:fa:af:f0:ae:29:34: a8:2f:0e:62:8d:cf:7f:05:b5:5e:b6:50:e8:de:4c: ff:ce:25:fc:4e:c3:11:12:0b:a7:43:04:5e:11:ae: b9:ba:97:22:81:90:1a:d3:71:89:56:44:6c:06:33: 6b:6a:61:0a:ce:16:b5:71:66:39:0c:d7:c2:3c:f4: 21:51:6c:8a:fd:ef:bd:ca:68:42:36:2c:6c:39:a6: f5:f2:08:ad:6c:af:ae:37:03:ac:53:96:74:dd:81: 7e:18:7c:d0:98:2b:7c:a6:52:ae:b6:10:96:08:b6: 7b:e2:c3:af:90:56:78:3f:e6:49:fc:9a:5e:1d:95: 0a:e9:96:47:c1:fb:d1:9c:9c:60:d4:66:99:cf:79: d8:43:9b:0e:1d:9c:01:ac:7c:8a:a0:a2:d2:b7:ea: c2:d4:51:f4:05:4e:d1:24:28:9a:c4:e1:6a:56:6b: 89:31:7d:e3:c9:f8:29:04:29:c3:bc:3c:3e:c3:cf: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:6D:58:EE:78:07:40:A8:09:A2:77:8A:9F:8C:04:BE:01:65:93 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:02:93:ec:91:4a:07:ab:5f:32:13:a9:1c:b6:15:05:1d:3f: 4a:68:7f:79:1a:cc:9f:8f:d3:56:71:05:c3:aa:76:ff:d2:ee: 98:ec:47:5e:d2:70:09:39:fc:0d:b2:63:9c:ee:6c:2a:68:3a: 45:b3:82:84:17:4f:e0:88:75:41:a5:fb:fd:fd:fe:8d:d8:ec: 64:86:ad:6c:57:93:be:62:12:3c:7c:54:a8:88:53:3d:13:fd: f7:19:d9:6e:51:a0:1c:ac:61:e6:cc:22:8a:c8:22:99:b8:22: b1:64:1e:bd:59:1c:80:df:c3:38:f7:a4:74:6e:19:42:53:16: 34:26:f7:b6:f6:c4:89:81:91:fb:1b:0b:33:99:a2:16:d5:c4: 1e:24:34:22:b5:2b:a9:1e:b4:72:c0:69:3d:02:5f:c1:f2:2a: 5c:64:c0:3b:fc:0d:a5:8b:30:89:a4:9c:2c:43:05:48:38:9c: bd:b7:78:80:f1:3b:25:71:bf:03:38:75:e8:34:0d:b9:03:31: ba:10:38:d4:5e:e4:3a:93:0e:07:b8:1a:bc:3d:c9:fb:98:17: 54:cc:bc:1d:40:0d:32:4d:1e:f3:4e:94:33:19:ec:dd:8e:08: 19:4d:82:de:b7:55:f4:1c:17:67:3e:08:47:13:de:24:94:37: e4:9c:67:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwNzA1MDIxNDU1WhcNMjYwNzEyMDIxNDU1WjAYMRYwFAYD VQQDEw02YTQ5YmUxZi00NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFkq7Rx24ioJydLhNitl9T2qQR2xZQ6C5HJlZrijGA8waoXm6LXUPYbudszu /QsdQSWSo6bbFg4jxo4Mu1THANwJCb76r/CuKTSoLw5ijc9/BbVetlDo3kz/ziX8 TsMREgunQwReEa65upcigZAa03GJVkRsBjNramEKzha1cWY5DNfCPPQhUWyK/e+9 ymhCNixsOab18gitbK+uNwOsU5Z03YF+GHzQmCt8plKuthCWCLZ74sOvkFZ4P+ZJ /JpeHZUK6ZZHwfvRnJxg1GaZz3nYQ5sOHZwBrHyKoKLSt+rC1FH0BU7RJCiaxOFq VmuJMX3jyfgpBCnDvDw+w8/nXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE90bVju eAdAqAmid4qfjAS+AWWTMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAigKT7JFKB6tfMhOpHLYVBR0/Smh/eRrMn4/TVnEFw6p2/9LumOxHXtJwCTn8 DbJjnO5sKmg6RbOChBdP4Ih1QaX7/f3+jdjsZIatbFeTvmISPHxUqIhTPRP99xnZ blGgHKxh5swiisgimbgisWQevVkcgN/DOPekdG4ZQlMWNCb3tvbEiYGR+xsLM5mi FtXEHiQ0IrUrqR60csBpPQJfwfIqXGTAO/wNpYswiaScLEMFSDicvbd4gPE7JXG/ Azh16DQNuQMxuhA41F7kOpMOB7gavD3J+5gXVMy8HUANMk0e806UMxns3Y4IGU2C 3rdV9BwXZz4IRxPeJJQ35JxnMA== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:37 2026 by rpki-client