$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: CWuoshWlgEhSK4OCbF0F/euy8AcV50k+A3r31KSSAnY= Subject key identifier: 5A:91:7C:42:12:A4:0F:80:C4:5A:7B:B5:78:CF:02:64:B2:F6:B0:90 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 01A0 Signing time: Sun 05 Jul 2026 04:50:51 +0000 Manifest this update: Sun 05 Jul 2026 04:50:50 +0000 Manifest next update: Sun 12 Jul 2026 04:50:50 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: 4KYe++gkRmegQHdrj1thI/n+RE4xrgGRARudgmSOhME=) 2: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: c1ZdxCR5jy+2u4016P6OO4rIgFkE6Ob/aP92Gxo47WA=) 3: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 04:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Jul 5 04:50:50 2026 GMT Not After : Jul 12 04:50:50 2026 GMT Subject: CN=6a49e2ab-a9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:9b:5e:fa:ed:00:23:a4:02:7c:16:e7:00: 01:86:f2:f7:0a:da:91:01:ef:00:a6:e3:13:b0:72: f4:69:b7:88:55:34:48:da:94:27:8e:01:53:93:78: 85:35:dd:40:ba:e7:ac:e9:70:79:27:73:97:ba:98: a2:9a:2c:06:c1:a2:f3:70:01:76:e3:df:82:09:76: 6c:0a:67:aa:74:28:9d:74:56:29:9a:9f:a9:21:a4: 50:be:a9:39:df:3c:57:f0:cd:f1:46:69:7f:db:35: c7:70:48:b3:b5:df:4b:91:91:7f:cf:a7:c2:31:bf: c1:bb:82:c7:40:3e:82:fd:5d:77:58:04:23:f6:15: 10:f5:76:c8:ca:f1:db:2c:03:1c:0e:f3:eb:7e:c4: 8c:6a:78:be:da:78:9c:5a:1b:3d:97:02:92:0b:8c: 03:30:07:63:a5:b1:e8:ed:e1:fb:8b:40:49:a5:7d: 15:50:bc:ad:d7:a9:82:97:7e:38:f1:53:68:ec:4a: 9d:6d:0d:be:30:2f:b4:03:99:6f:30:58:bb:76:06: f0:e1:a9:31:a7:92:3a:0d:58:3d:7c:43:14:b8:c5: c6:51:ec:30:a1:de:37:55:9f:e2:7e:bb:34:69:36: 9c:69:23:b7:fb:57:4a:ce:81:4e:00:69:1f:54:24: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:91:7C:42:12:A4:0F:80:C4:5A:7B:B5:78:CF:02:64:B2:F6:B0:90 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:14:c9:0a:18:e2:a6:43:50:c5:ef:32:3a:3f:6c:61:49:b6: 01:c4:ba:99:5c:81:b5:e2:21:82:ac:2c:fa:43:f0:17:68:c9: 12:0d:79:8d:3d:80:f3:13:e4:49:99:1b:20:50:8c:79:05:06: cd:2d:44:5a:19:52:79:db:e6:05:1c:c7:20:37:8b:10:c7:b5: b5:f2:6f:3c:00:af:b3:81:36:e4:99:f7:fc:c4:24:01:6d:cb: 5d:15:6a:83:06:e2:e9:ea:7e:7f:89:b7:19:29:43:12:02:f0: 32:05:43:0e:d0:72:5d:20:75:28:63:79:9d:02:ab:31:d1:7f: db:14:0a:ec:c8:91:80:7e:bb:ff:d1:d4:f3:20:7a:28:a9:35: de:59:fd:09:a0:38:93:1f:d6:69:a7:70:c0:21:23:fe:05:72: 4e:00:34:da:7f:76:89:15:ec:3d:3f:6a:cf:58:f0:6f:09:ce: cc:a3:55:86:db:9d:c7:71:8e:e1:8f:00:df:25:e5:4b:5d:63: 09:05:5c:7d:1a:14:e3:c2:82:39:cf:94:9d:82:7a:bd:0e:51: 17:ca:6b:17:db:b5:1b:df:ce:bb:57:3b:b5:e3:50:d0:bc:91: 6f:8a:40:2f:43:bf:ba:82:0d:02:d3:e3:2e:a0:23:50:42:64: d5:91:26:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjYwNzA1MDQ1MDUwWhcNMjYwNzEyMDQ1MDUwWjAYMRYwFAYD VQQDEw02YTQ5ZTJhYi1hOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBibXvrtACOkAnwW5wABhvL3CtqRAe8ApuMTsHL0abeIVTRI2pQnjgFTk3iF Nd1Auues6XB5J3OXupiimiwGwaLzcAF249+CCXZsCmeqdCiddFYpmp+pIaRQvqk5 3zxX8M3xRml/2zXHcEiztd9LkZF/z6fCMb/Bu4LHQD6C/V13WAQj9hUQ9XbIyvHb LAMcDvPrfsSMani+2nicWhs9lwKSC4wDMAdjpbHo7eH7i0BJpX0VULyt16mCl344 8VNo7EqdbQ2+MC+0A5lvMFi7dgbw4akxp5I6DVg9fEMUuMXGUewwod43VZ/ifrs0 aTacaSO3+1dKzoFOAGkfVCSXnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqRfEIS pA+AxFp7tXjPAmSy9rCQMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPRTJChjipkNQxe8yOj9sYUm2AcS6mVyBteIhgqws+kPwF2jJEg15jT2A8xPk SZkbIFCMeQUGzS1EWhlSedvmBRzHIDeLEMe1tfJvPACvs4E25Jn3/MQkAW3LXRVq gwbi6ep+f4m3GSlDEgLwMgVDDtByXSB1KGN5nQKrMdF/2xQK7MiRgH67/9HU8yB6 KKk13ln9CaA4kx/WaadwwCEj/gVyTgA02n92iRXsPT9qz1jwbwnOzKNVhtudx3GO 4Y8A3yXlS11jCQVcfRoU48KCOc+UnYJ6vQ5RF8prF9u1G9/Ou1c7teNQ0LyRb4pA L0O/uoINAtPjLqAjUEJk1ZEmVg== -----END CERTIFICATE-----Generated at Mon Jul 6 19:16:23 2026 by rpki-client