$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: 18GgyBap7lG4kNDToMXRZKi8zZc/LFVFbnFH3j7JHcU= Subject key identifier: 30:B1:11:13:C3:71:5B:38:6A:7B:34:C3:75:27:81:99:30:D5:55:20 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 041B Signing time: Wed 05 Aug 2026 01:03:01 +0000 Manifest this update: Wed 05 Aug 2026 01:03:00 +0000 Manifest next update: Wed 12 Aug 2026 01:03:00 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: TJViAlL7GGxMn/tpVEaXqI3rVAeUyiCUr6iBMOMLU4c=) 2: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: 61tgJT9JBQD7/LnZY8sWrhXGon+4jXIx8zzVzR+mcYo=) 3: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: eyLRbf8L5PNErwQTJOk07CgThPMQFGU585OgUmJtuNc=) 4: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: xh8ZzkScwUoVrKvZnOf/z0vy2KKYFXPO6zuhnInuTK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Aug 5 01:03:00 2026 GMT Not After : Aug 12 01:03:00 2026 GMT Subject: CN=6a728bc5-6f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:26:8f:35:85:65:e6:a9:f7:7f:0b:02:4c: 4b:00:32:d5:a5:fb:55:31:66:ea:db:b6:af:b3:33: 61:c4:63:e8:4d:4b:ae:46:0f:98:cd:80:8f:4f:a5: 33:7f:ac:8a:b8:27:31:8b:b3:b9:71:04:94:d5:84: 4d:01:4a:e9:a1:e7:af:5e:40:be:23:ae:c1:b9:34: be:a8:c3:20:ac:ed:46:6a:bf:27:5f:af:12:7f:8c: 7a:e4:23:83:bb:60:2e:ce:7e:c9:ef:bf:e0:c5:42: 9b:c5:f2:da:1f:6a:95:51:ec:14:dd:08:dc:a2:cd: 63:3e:21:19:74:c1:6c:9b:d3:49:dd:34:8b:6f:90: 88:45:31:39:f6:dd:13:28:f6:0e:db:19:3c:dc:18: bb:ae:3d:41:b4:58:50:33:43:e4:2c:b1:cf:16:c6: 33:98:cd:72:58:bd:83:04:b6:0c:91:54:05:db:ef: de:3e:a0:8e:94:7b:f5:9e:c3:b3:74:c0:2a:c6:be: 07:38:b3:5f:b8:9c:9a:66:42:af:20:22:cc:85:ed: 2d:ec:30:f5:71:c4:aa:9c:2b:57:bd:b3:77:eb:7d: 0f:e5:9b:91:ec:dd:59:05:0a:f7:f3:a0:48:81:62: 0a:8b:9c:5d:2d:fb:aa:78:96:44:b3:e7:82:53:15: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B1:11:13:C3:71:5B:38:6A:7B:34:C3:75:27:81:99:30:D5:55:20 X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e4:9b:06:d6:a8:25:0e:b4:9a:2c:0e:05:8b:d1:48:12:ff: a4:4c:54:ec:3a:40:9d:b1:e0:c7:57:d7:b6:3d:56:8d:27:e3: ef:38:9a:61:5e:a9:cf:c2:f8:3a:37:ae:12:e6:ad:c7:11:87: cc:42:93:80:20:c2:66:49:64:35:de:e4:37:c4:b6:95:48:7e: 0f:d3:c2:d2:09:42:5b:dc:46:56:6d:60:c6:c6:e7:26:09:04: d6:89:13:24:e9:43:fd:d2:35:7b:99:7f:09:fd:4e:11:b8:c2: 67:38:7d:7d:82:6d:ec:99:94:0e:67:71:68:52:4a:2d:63:82: 85:6c:63:5d:bd:ea:3a:ed:3e:bc:04:51:24:be:89:ef:3a:66: 72:9a:71:5f:9e:f6:eb:80:3f:15:28:b7:e4:8c:ed:8e:cf:7e: 20:99:31:4c:11:60:d0:2d:35:41:da:f3:b3:cb:c1:41:92:f9: 79:9f:43:1f:4c:9b:1e:1f:70:d0:ac:0a:80:59:15:ad:3e:19: ee:01:aa:7f:dc:07:27:ae:af:fc:20:94:cc:11:ba:78:93:05: 87:19:6c:31:3b:ef:f9:f8:ec:ee:b2:ec:75:cf:1c:d2:b3:62: 48:4a:12:8f:bb:23:0a:40:55:f4:7a:5d:0f:12:34:c1:7e:15: cf:67:12:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjYwODA1MDEwMzAwWhcNMjYwODEyMDEwMzAwWjAYMRYwFAYD VQQDEw02YTcyOGJjNS02ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOomjzWFZeap938LAkxLADLVpftVMWbq27avszNhxGPoTUuuRg+YzYCPT6Uz f6yKuCcxi7O5cQSU1YRNAUrpoeevXkC+I67BuTS+qMMgrO1Gar8nX68Sf4x65COD u2Auzn7J77/gxUKbxfLaH2qVUewU3Qjcos1jPiEZdMFsm9NJ3TSLb5CIRTE59t0T KPYO2xk83Bi7rj1BtFhQM0PkLLHPFsYzmM1yWL2DBLYMkVQF2+/ePqCOlHv1nsOz dMAqxr4HOLNfuJyaZkKvICLMhe0t7DD1ccSqnCtXvbN3630P5ZuR7N1ZBQr386BI gWIKi5xdLfuqeJZEs+eCUxUiqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCxERPD cVs4ans0w3UngZkw1VUgMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOSbBtaoJQ60miwOBYvRSBL/pExU7DpAnbHgx1fXtj1WjSfj7ziaYV6pz8L4 OjeuEuatxxGHzEKTgCDCZklkNd7kN8S2lUh+D9PC0glCW9xGVm1gxsbnJgkE1okT JOlD/dI1e5l/Cf1OEbjCZzh9fYJt7JmUDmdxaFJKLWOChWxjXb3qOu0+vARRJL6J 7zpmcppxX57264A/FSi35Iztjs9+IJkxTBFg0C01Qdrzs8vBQZL5eZ9DH0ybHh9w 0KwKgFkVrT4Z7gGqf9wHJ66v/CCUzBG6eJMFhxlsMTvv+fjs7rLsdc8c0rNiSEoS j7sjCkBV9HpdDxI0wX4Vz2cSnQ== -----END CERTIFICATE-----Generated at Wed Aug 5 03:27:19 2026 by rpki-client