$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: 8VKnQwu5nzmGxLp25OTrsJI8hTlmmJot2WjyqxVKeYc= Subject key identifier: 7D:0E:32:61:46:8D:E9:42:99:FA:73:8C:6B:62:DF:BD:51:4C:8B:A7 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: D8 Signing time: Tue 21 Jul 2026 08:21:02 +0000 Manifest this update: Tue 21 Jul 2026 08:21:01 +0000 Manifest next update: Tue 28 Jul 2026 08:21:01 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: oCxLOaA1xO743IdtOJP8KbYaq3k6ais2UapNhvYh0C4=) 2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Jul 21 08:21:01 2026 GMT Not After : Jul 28 08:21:01 2026 GMT Subject: CN=6a5f2bee-9c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:dd:b9:31:b6:a4:a6:af:9e:6d:46:70:ba: 75:b8:73:18:d3:a8:9d:3a:b5:2e:9a:fb:ac:8f:7d: 8a:b5:c5:af:69:c4:da:2a:73:05:aa:01:81:4b:76: e9:5b:a4:c2:f2:84:05:32:64:21:79:0c:95:82:d3: 81:5a:ef:03:2b:84:85:b2:18:b6:59:95:06:e8:de: a2:57:d8:7d:75:15:e3:48:52:77:98:de:be:38:4c: ca:f2:e4:87:ed:35:da:5e:19:cf:b6:d6:eb:02:58: 74:a6:da:3a:f8:80:30:11:f2:a3:0f:9f:e5:f7:11: de:61:d5:44:8f:01:33:aa:69:21:18:b2:38:7e:6e: 31:d9:d7:c4:50:11:10:de:2c:fd:47:78:10:80:24: 8a:f9:63:50:7d:b3:df:c6:51:f8:c1:a9:83:40:b8: 38:83:d4:fd:9d:f3:e3:52:f9:50:e6:c1:ea:f6:1a: f4:3e:51:e9:0c:71:ce:b0:d4:50:73:e4:c3:a7:e8: 3a:ad:cb:b6:ad:93:4b:1e:cf:24:f2:16:26:fc:f5: d3:02:4b:a3:15:62:38:da:53:cd:63:cf:48:57:3a: 8d:3f:97:b9:e4:2c:6a:59:0c:72:af:06:8c:a3:8a: 76:a8:0e:11:2f:2c:d6:0f:5f:e2:d7:78:ed:4d:89: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:32:61:46:8D:E9:42:99:FA:73:8C:6B:62:DF:BD:51:4C:8B:A7 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:44:8d:5e:4d:08:d2:a9:d3:d7:98:c9:0d:96:a1:2f:bf:e1: 25:22:4d:3f:64:5b:72:5b:c7:b9:c8:b3:1a:f2:7b:4d:fc:ef: 42:f1:89:f2:86:64:da:1f:85:01:fb:a8:b5:8c:06:88:ef:cd: 10:d8:b4:69:2a:3d:19:4c:d8:aa:3a:62:66:16:3f:20:42:37: 2d:64:c3:77:86:ef:67:4c:23:dd:74:1e:43:57:29:20:80:95: e8:a1:fc:bc:cc:58:8e:10:b7:16:92:26:2e:41:ea:ea:3f:25: eb:a0:e7:b5:ca:86:dc:ab:02:9e:e5:23:5f:11:dc:14:d4:a2: e4:d5:0c:ca:0f:5f:c1:99:00:a7:4e:94:59:6d:c1:fc:dc:51: d3:0b:41:73:1c:f7:97:70:91:30:9f:da:ea:9e:13:bb:f4:27: 74:9a:c4:92:f1:de:e7:47:41:7a:9e:d3:9c:0f:f6:87:f7:bb: 94:b1:c8:e8:da:0e:94:e8:d2:5f:10:79:64:8c:81:4f:5d:a5: 52:73:45:b8:0a:80:b3:6a:2a:40:f9:9b:9b:e2:05:3d:0b:fa: 9a:15:4d:6a:8d:66:88:6e:0e:fc:de:ff:9b:97:6c:2f:9a:eb: 28:2c:eb:4e:da:21:53:d6:04:00:99:87:da:dc:1b:02:cb:7d: 7d:4b:f9:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEUwN0U1NzY4OUMyN0E5OTM2MTFDQkFCQTk3QjE5NEQz MTc5NkNGNkYwHhcNMjYwNzIxMDgyMTAxWhcNMjYwNzI4MDgyMTAxWjAYMRYwFAYD VQQDEw02YTVmMmJlZS05YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgXduTG2pKavnm1GcLp1uHMY06idOrUumvusj32KtcWvacTaKnMFqgGBS3bp W6TC8oQFMmQheQyVgtOBWu8DK4SFshi2WZUG6N6iV9h9dRXjSFJ3mN6+OEzK8uSH 7TXaXhnPttbrAlh0pto6+IAwEfKjD5/l9xHeYdVEjwEzqmkhGLI4fm4x2dfEUBEQ 3iz9R3gQgCSK+WNQfbPfxlH4wamDQLg4g9T9nfPjUvlQ5sHq9hr0PlHpDHHOsNRQ c+TDp+g6rcu2rZNLHs8k8hYm/PXTAkujFWI42lPNY89IVzqNP5e55CxqWQxyrwaM o4p2qA4RLyzWD1/i13jtTYmXIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0OMmFG jelCmfpzjGti371RTIunMB8GA1UdIwQYMBaAFOB+V2icJ6mTYRy6upexlNMXls9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9FMTRGNzIyNDND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFaTmhITHE2bDdHVTB4ZVd6 MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9FMTRGNzIyNDNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFa TmhITHE2bDdHVTB4ZVd6MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ0SNXk0I0qnT15jJDZahL7/hJSJNP2RbclvHucizGvJ7TfzvQvGJ8oZk2h+F AfuotYwGiO/NENi0aSo9GUzYqjpiZhY/IEI3LWTDd4bvZ0wj3XQeQ1cpIICV6KH8 vMxYjhC3FpImLkHq6j8l66DntcqG3KsCnuUjXxHcFNSi5NUMyg9fwZkAp06UWW3B /NxR0wtBcxz3l3CRMJ/a6p4Tu/QndJrEkvHe50dBep7TnA/2h/e7lLHI6NoOlOjS XxB5ZIyBT12lUnNFuAqAs2oqQPmbm+IFPQv6mhVNao1miG4O/N7/m5dsL5rrKCzr TtohU9YEAJmH2twbAst9fUv5Gg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:27:30 2026 by rpki-client