$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: kYyuYx7wX0tCZD+h337ecjCP04t0LSiyWIabZubvfms= Subject key identifier: 18:A3:1A:0E:6F:67:93:3D:FD:73:37:28:23:7A:3D:AC:14:63:4A:47 Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 02CB Signing time: Mon 03 Aug 2026 02:08:31 +0000 Manifest this update: Mon 03 Aug 2026 02:08:31 +0000 Manifest next update: Mon 10 Aug 2026 02:08:31 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: RE8P/J9/sAqlrdKI9+2TlW/kZgF6w+Ew0UkNLfG6kHE=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: JEoXZriBqJJhzP1nkyHSHN9MJNXjkBusjNVR9oT/r4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 02:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: Aug 3 02:08:31 2026 GMT Not After : Aug 10 02:08:31 2026 GMT Subject: CN=6a6ff81f-037b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:37:9c:b4:7d:36:c8:02:ba:d5:60:a3:81: 5c:b6:ae:b8:d6:79:10:11:6d:6e:76:49:0d:ec:0b: 6d:53:62:a1:94:98:23:f6:7c:ef:0b:7a:01:77:d9: 21:af:82:0a:6c:e4:9d:65:66:9a:1b:ef:cc:14:a0: 7b:2c:c1:1e:e1:ce:1f:73:07:a5:1c:e1:40:78:a2: fd:89:fe:b8:dd:c7:20:6d:d8:78:1c:1d:e8:8a:f6: 1e:f4:44:a6:8e:7d:c9:91:8d:38:e9:33:b8:36:b0: f6:82:67:4f:63:2d:1e:25:cd:e0:e5:4a:91:5e:1d: 6d:3a:00:bc:81:1c:d6:67:ed:5e:c7:94:7e:dd:1b: 88:3b:c7:ec:8b:28:31:d5:61:ee:00:c3:b3:87:8e: 31:9a:30:4e:a0:d8:94:75:0d:98:3e:b2:4a:8e:9b: 34:f3:40:b4:78:6e:4f:b8:8a:d4:90:72:40:f4:aa: 02:52:25:69:28:59:1b:3e:f7:3c:c9:ef:f6:cb:97: 5b:1b:5a:a5:d0:95:40:be:5f:11:64:52:ef:48:3b: 82:1e:91:f7:6d:45:0a:80:2b:e0:c0:8c:94:d8:99: 51:76:35:2b:d8:42:8b:da:f0:87:59:e2:bf:24:42: 17:08:ed:d8:8d:64:5c:54:dc:b8:d1:50:4e:59:26: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A3:1A:0E:6F:67:93:3D:FD:73:37:28:23:7A:3D:AC:14:63:4A:47 X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:84:3a:cf:95:9a:25:6a:af:ab:b9:0d:3d:fa:da:2b:89:cb: 9c:d5:57:a4:d9:5d:47:bf:d3:87:8a:fa:a5:4b:b9:a7:8e:18: 5c:e0:f2:2a:7c:bf:15:3e:72:71:35:eb:96:15:2e:a7:1b:14: 39:a5:8f:b9:14:c1:31:b1:33:ac:7c:a3:d6:49:f4:19:8d:61: 48:4d:36:6c:ea:0c:96:58:2b:8d:40:c4:ac:66:f8:0c:9e:fa: e9:ab:11:5b:35:5b:c6:13:84:6f:ed:58:8e:d0:b3:4f:91:4a: 9a:21:05:64:af:b5:5f:30:5b:0a:7a:e9:29:f1:00:06:fe:99: 86:cb:46:81:3a:7e:f0:4d:1c:a7:79:7b:6c:7b:e1:d3:5d:b4: 9f:36:2c:96:ad:ef:27:a4:2e:ce:83:f6:1f:2a:6b:b7:a3:7b: a3:03:45:fd:76:3e:a9:14:d1:5f:53:7c:de:56:d1:87:93:1e: 80:fa:da:46:02:d4:a0:8b:22:84:be:1b:b5:d0:9a:d3:59:d8: f8:1d:54:8b:8d:59:8c:50:a8:4d:a1:69:d8:9f:0a:5f:78:15: 96:8b:36:91:f2:10:f8:82:f5:b4:ee:c6:3f:a8:e6:77:f5:13: d3:0c:ae:07:6a:35:1f:92:5a:8d:1a:27:90:88:0d:5e:3f:77: e4:b9:e2:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjYwODAzMDIwODMxWhcNMjYwODEwMDIwODMxWjAYMRYwFAYD VQQDEw02YTZmZjgxZi0wMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqI3nLR9NsgCutVgo4Fctq641nkQEW1udkkN7AttU2KhlJgj9nzvC3oBd9kh r4IKbOSdZWaaG+/MFKB7LMEe4c4fcwelHOFAeKL9if643ccgbdh4HB3oivYe9ESm jn3JkY046TO4NrD2gmdPYy0eJc3g5UqRXh1tOgC8gRzWZ+1ex5R+3RuIO8fsiygx 1WHuAMOzh44xmjBOoNiUdQ2YPrJKjps080C0eG5PuIrUkHJA9KoCUiVpKFkbPvc8 ye/2y5dbG1ql0JVAvl8RZFLvSDuCHpH3bUUKgCvgwIyU2JlRdjUr2EKL2vCHWeK/ JEIXCO3YjWRcVNy40VBOWSaxUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBijGg5v Z5M9/XM3KCN6PawUY0pHMB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu4Q6z5WaJWqvq7kNPfraK4nLnNVXpNldR7/Th4r6pUu5p44YXODyKny/FT5y cTXrlhUupxsUOaWPuRTBMbEzrHyj1kn0GY1hSE02bOoMllgrjUDErGb4DJ766asR WzVbxhOEb+1YjtCzT5FKmiEFZK+1XzBbCnrpKfEABv6ZhstGgTp+8E0cp3l7bHvh 0120nzYslq3vJ6QuzoP2Hyprt6N7owNF/XY+qRTRX1N83lbRh5MegPraRgLUoIsi hL4btdCa01nY+B1Ui41ZjFCoTaFp2J8KX3gVlos2kfIQ+IL1tO7GP6jmd/UT0wyu B2o1H5JajRonkIgNXj935Lniug== -----END CERTIFICATE-----Generated at Tue Aug 4 18:54:40 2026 by rpki-client