$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft File: HFloWGy0x-KD8UGfWFBGjtpVloI.mft (raw, json) Hash identifier: VHO/m97A33APCn2t7j3MR4s30K6MHp7GCKApaNe5iiI= Subject key identifier: 3D:74:D8:B9:F8:5C:12:B9:26:18:8E:0C:CC:FC:B1:3B:64:72:1E:51 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft Manifest number: 8D Signing time: Fri 17 Jul 2026 08:48:01 +0000 Manifest this update: Fri 17 Jul 2026 08:48:00 +0000 Manifest next update: Fri 24 Jul 2026 08:48:00 +0000 Files and hashes: 1: HFloWGy0x-KD8UGfWFBGjtpVloI.crl (hash: 0iNwJOmnFJb2URPtzhJYIPF75F0Eh4Twjty4r8XKnQI=) 2: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (hash: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w=) 3: 9DB152BEBAE311F0A6981134C4F9AE02.roa (hash: PA9hOk6V6IhWEIDuuD3b5sMWQ+ZypkTpM3DoKTzEmx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Jul 17 08:48:00 2026 GMT Not After : Jul 24 08:48:00 2026 GMT Subject: CN=6a59ec41-f637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:0d:bc:5c:27:8f:4b:59:08:ed:77:73:50: 31:89:2d:fb:51:36:d2:82:e4:ab:19:b8:ad:5f:f2: ca:bc:52:7f:bc:3c:95:22:14:8b:aa:25:73:11:05: 56:53:88:cf:fb:08:cf:e2:41:f9:46:6a:a6:97:5b: e9:fb:1b:76:7c:1b:69:0e:ed:c7:80:e5:01:5a:30: 07:16:5f:c3:bb:ae:c2:36:7b:6b:5b:42:53:a7:0b: 0f:ba:3f:6c:4d:c6:b5:b3:6f:b0:1c:55:0b:09:fd: 84:eb:c2:b3:13:bb:6e:03:61:9e:70:cd:13:23:13: 74:75:78:2e:8d:81:18:0d:87:63:76:4c:ab:95:2e: 4e:39:c2:6f:ba:c1:a6:97:00:f3:30:6c:c5:71:a5: f4:af:ce:1d:9b:0d:a7:72:91:db:3e:f0:b0:96:03: 6f:b8:73:94:60:dc:cb:d7:6e:4f:fd:62:32:73:98: 0f:38:95:91:fc:3a:56:53:d3:6f:6d:42:d3:e7:9b: 98:bd:6b:87:42:54:7d:09:37:78:81:ba:01:49:3c: 26:a2:4a:58:49:cb:34:37:49:26:82:db:49:fe:f0: 03:a8:57:d7:be:ed:54:e0:a9:61:9e:f9:ff:37:15: f5:e6:75:1a:b4:05:64:c6:2b:02:7e:36:46:d9:8a: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:D8:B9:F8:5C:12:B9:26:18:8E:0C:CC:FC:B1:3B:64:72:1E:51 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:45:19:48:eb:75:e0:d3:28:1a:3c:9f:12:af:8d:1b:18:eb: 09:40:90:13:34:b4:be:4e:bd:d4:98:02:7d:83:9d:4e:4e:cd: fe:a3:f9:ce:bd:17:64:d1:6c:5e:bd:00:c2:29:e0:7b:3a:e2: a4:51:11:d9:08:c7:d4:3b:46:6b:1c:e7:22:74:13:a4:6f:f7: 8d:3e:ef:f5:9b:3c:e7:e2:fe:ad:f6:29:16:c5:2e:19:ac:ed: 7c:c5:f5:57:98:10:ac:53:c8:26:69:23:94:f9:31:e8:04:95: 8e:c3:3c:07:aa:71:6d:bc:7f:06:3d:24:6f:47:c0:00:91:87: 20:3e:30:9e:f5:27:69:14:0e:b0:24:2d:ed:b0:b2:b7:b0:69: 9a:f1:65:53:f5:e1:fc:4e:0d:57:16:f7:78:97:ab:d4:d1:1a: 96:e2:42:95:6f:1b:85:bd:72:03:86:23:66:ae:a9:f3:f4:05: b5:0e:38:62:05:d5:83:f6:c2:73:08:7d:a3:88:91:c5:a7:7c: 6c:61:48:60:07:a3:21:c2:c6:77:83:ee:f9:4a:07:8d:4d:ce: d2:1d:d6:ca:c4:6f:3c:38:27:3f:c2:34:1b:99:ea:0c:65:fe: 74:be:69:a3:84:ef:46:51:9e:b7:15:b0:fa:bb:34:e1:09:29: 27:2c:a8:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc4QTcxMTAvBgNVBAUTKDFDNTk2ODU4NkNCNEM3RTI4M0YxNDE5RjU4NTA0NjhF REE1NTk2ODIwHhcNMjYwNzE3MDg0ODAwWhcNMjYwNzI0MDg0ODAwWjAYMRYwFAYD VQQDEw02YTU5ZWM0MS1mNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQwNvFwnj0tZCO13c1AxiS37UTbSguSrGbitX/LKvFJ/vDyVIhSLqiVzEQVW U4jP+wjP4kH5Rmqml1vp+xt2fBtpDu3HgOUBWjAHFl/Du67CNntrW0JTpwsPuj9s Tca1s2+wHFULCf2E68KzE7tuA2GecM0TIxN0dXgujYEYDYdjdkyrlS5OOcJvusGm lwDzMGzFcaX0r84dmw2ncpHbPvCwlgNvuHOUYNzL125P/WIyc5gPOJWR/DpWU9Nv bULT55uYvWuHQlR9CTd4gboBSTwmokpYScs0N0kmgttJ/vADqFfXvu1U4Klhnvn/ NxX15nUatAVkxisCfjZG2YruFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD102Ln4 XBK5JhiODMz8sTtkch5RMB8GA1UdIwQYMBaAFBxZaFhstMfig/FBn1hQRo7aVZaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzhBNy9GQUU5NkM0QUI2 MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgtS0Q4VUdmV0ZCR2p0cFZs b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi9IRmxvV0d5MHgt S0Q4VUdmV0ZCR2p0cFZsb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKEUZSOt14NMoGjyfEq+NGxjrCUCQEzS0vk691JgCfYOdTk7N/qP5zr0XZNFs Xr0AwingezripFER2QjH1DtGaxznInQTpG/3jT7v9Zs85+L+rfYpFsUuGaztfMX1 V5gQrFPIJmkjlPkx6ASVjsM8B6pxbbx/Bj0kb0fAAJGHID4wnvUnaRQOsCQt7bCy t7BpmvFlU/Xh/E4NVxb3eJer1NEaluJClW8bhb1yA4YjZq6p8/QFtQ44YgXVg/bC cwh9o4iRxad8bGFIYAejIcLGd4Pu+UoHjU3O0h3WysRvPDgnP8I0G5nqDGX+dL5p o4TvRlGetxWw+rs04QkpJyyoKQ== -----END CERTIFICATE-----Generated at Sat Jul 18 03:27:41 2026 by rpki-client