$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json) Hash identifier: SyBpp3gKjKVRVBS3mxVMI+wcbX6YjUR1lUJ9fgWuY4o= Subject key identifier: 8B:04:15:11:2E:32:F7:27:F6:1F:0C:8F:DD:A4:F5:88:6B:30:78:9A Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 Certificate issuer: /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft Manifest number: 50 Signing time: Tue 21 Jul 2026 10:11:13 +0000 Manifest this update: Tue 21 Jul 2026 10:11:12 +0000 Manifest next update: Tue 28 Jul 2026 10:11:12 +0000 Files and hashes: 1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: wW3sx9eDI+ooxo+mVer1aX7jJMEDML2sdVm+rms5nQs=) 2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Validity Not Before: Jul 21 10:11:12 2026 GMT Not After : Jul 28 10:11:12 2026 GMT Subject: CN=6a5f45c1-9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:dc:cd:ef:15:f2:c0:91:66:c5:b9:b0:12: ce:3f:95:42:27:a8:bd:b9:56:b2:50:1e:e0:32:3e: 8e:76:3a:88:36:31:7e:ed:e2:f1:5a:d8:f0:d6:4e: 6f:9d:45:7c:9e:ee:d0:91:cc:35:ad:d9:06:f3:21: bd:ba:b0:67:60:58:c8:0e:05:31:2e:95:56:46:5b: da:7f:85:dd:8e:d4:01:c1:b5:65:92:de:5d:8e:3e: fe:2b:fa:6f:38:e3:a3:9a:da:c3:fb:f6:05:8d:a2: 98:b4:33:b6:99:2a:6d:99:62:2e:ec:2c:45:6e:96: 35:5a:0a:74:d2:d2:6d:2f:86:53:45:41:0e:72:d0: 9e:b1:d0:9b:32:80:a8:44:97:8d:b4:e3:e1:e3:af: 78:a4:59:57:11:4e:d5:33:df:7b:a7:4d:11:43:74: ed:33:d1:47:61:d5:23:0f:32:d3:fe:3f:77:6f:24: af:5a:31:e7:7c:44:fd:ac:d4:93:47:7d:ef:1c:18: 71:4d:0c:80:7f:e3:d6:67:34:2c:44:4b:5b:44:41: 80:6a:0a:46:2d:84:43:cc:72:86:d6:08:01:51:b5: ac:7a:a4:a9:1b:c6:f3:5f:47:d9:09:18:aa:8b:5b: 4c:c0:1f:aa:f9:82:aa:65:a2:cc:fc:8f:79:5a:78: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:15:11:2E:32:F7:27:F6:1F:0C:8F:DD:A4:F5:88:6B:30:78:9A X509v3 Authority Key Identifier: keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:33:af:55:db:98:d6:9b:f6:8b:d9:e4:4f:db:1d:6e:3c:b1: cb:2f:18:b5:80:98:ed:ae:f8:47:90:4a:51:46:bd:62:c8:d0: a7:a5:1f:24:ea:eb:7a:73:bb:71:81:69:fe:9e:bd:33:ea:ce: a6:e8:a7:e8:fc:57:e2:88:64:6d:d9:7f:b2:6c:85:14:3c:37: 89:7c:2e:fc:af:8c:b6:ac:aa:4d:f0:37:af:0f:40:d5:71:16: f1:8c:c1:a6:07:10:a1:d4:8f:cd:b9:2d:7c:2c:aa:47:9e:ce: 3f:63:e1:5d:89:9e:98:e6:0b:13:01:85:75:d3:1f:1e:36:7d: 33:f8:63:44:b7:36:13:ec:5b:82:af:92:a4:52:5e:49:a7:84: f3:ba:34:3b:e0:73:fe:f5:21:e8:39:b3:d8:8f:c5:27:d8:56: 1e:0e:9b:80:0e:3b:bf:98:2d:9e:e4:8c:14:a3:53:42:1d:17: f9:a2:88:c6:46:4b:e6:0d:89:ac:d3:e5:f6:d6:12:67:0d:7d: bc:48:ec:bb:fa:2a:05:f7:be:dc:0c:09:cb:e8:63:f4:1a:33: f8:e8:9c:59:46:90:f0:e9:a7:75:72:8e:e7:91:85:99:55:2c: b7:05:3a:aa:03:fc:00:9d:b5:e8:22:36:ab:54:35:6a:d8:8f: 46:79:2a:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoODVGMjJEOTIxNTNGMjAxRDU5MjNBOUYyN0Y5NjFGQzc2 RDcxMTlCODAeFw0yNjA3MjExMDExMTJaFw0yNjA3MjgxMDExMTJaMBgxFjAUBgNV BAMTDTZhNWY0NWMxLTliODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi7dzN7xXywJFmxbmwEs4/lUInqL25VrJQHuAyPo52Oog2MX7t4vFa2PDWTm+d RXye7tCRzDWt2QbzIb26sGdgWMgOBTEulVZGW9p/hd2O1AHBtWWS3l2OPv4r+m84 46Oa2sP79gWNopi0M7aZKm2ZYi7sLEVuljVaCnTS0m0vhlNFQQ5y0J6x0JsygKhE l4204+Hjr3ikWVcRTtUz33unTRFDdO0z0Udh1SMPMtP+P3dvJK9aMed8RP2s1JNH fe8cGHFNDIB/49ZnNCxES1tEQYBqCkYthEPMcobWCAFRtax6pKkbxvNfR9kJGKqL W0zAH6r5gqplosz8j3laeKrdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiwQVES4y 9yf2HwyP3aT1iGsweJowHwYDVR0jBBgwFoAUhfItkhU/IB1ZI6nyf5Yfx21xGbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0REREMzOTE2MTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIxWkk2bnlmNVlmeDIxeEdi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGZJdGtoVV9JQjFaSTZueWY1WWZ4MjF4R2JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0REREMzOTE2MTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIx Wkk2bnlmNVlmeDIxeEdiZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8M69V25jWm/aL2eRP2x1uPLHLLxi1gJjtrvhHkEpRRr1iyNCnpR8k6ut6c7tx gWn+nr0z6s6m6Kfo/FfiiGRt2X+ybIUUPDeJfC78r4y2rKpN8DevD0DVcRbxjMGm BxCh1I/NuS18LKpHns4/Y+FdiZ6Y5gsTAYV10x8eNn0z+GNEtzYT7FuCr5KkUl5J p4TzujQ74HP+9SHoObPYj8Un2FYeDpuADju/mC2e5IwUo1NCHRf5oojGRkvmDYms 0+X21hJnDX28SOy7+ioF977cDAnL6GP0GjP46JxZRpDw6ad1co7nkYWZVSy3BTqq A/wAnbXoIjarVDVq2I9GeSqz -----END CERTIFICATE-----Generated at Wed Jul 22 02:37:34 2026 by rpki-client