$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft File: HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json) Hash identifier: TQFQjxhGoVWFm/2dAxlV/zeNEjwqxQ6iMExmMLHRmZY= Subject key identifier: D4:42:9A:66:5C:5A:5E:99:A3:B8:10:69:A7:DE:DB:41:FD:1B:27:89 Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft Manifest number: 08A8 Signing time: Mon 20 Jul 2026 21:13:19 +0000 Manifest this update: Mon 20 Jul 2026 21:13:18 +0000 Manifest next update: Mon 27 Jul 2026 21:13:18 +0000 Files and hashes: 1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: byl5AEnJh2UG/Whh9xG+Ez27HdHDkGrjh4pdfK7rvUY=) 2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: 08lz7b6szSEMQO1jrd2yTTyJym47lMNxqFGZhqAfyUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2 Validity Not Before: Jul 20 21:13:18 2026 GMT Not After : Jul 27 21:13:18 2026 GMT Subject: CN=6a5e8f6e-8428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:54:cc:0b:72:6f:33:ec:59:70:df:7b:f5: 28:d2:cc:39:b1:e9:8e:20:f3:aa:32:7c:99:fa:36: a5:81:1e:a0:80:f0:ea:ae:0a:a2:f8:19:e5:96:5b: 27:05:20:88:f8:6a:5b:1f:3a:77:20:b2:9f:29:51: 8b:80:c7:d3:6d:d8:a4:32:b9:62:d3:4b:2a:90:a3: 75:5e:90:b0:ee:5b:e9:d5:fa:50:78:8a:2f:04:37: 83:9d:00:30:26:22:e7:dd:a9:ac:6a:a4:cf:f5:46: 6e:7d:57:a5:1c:bd:fa:29:b7:c3:c8:c8:6b:e4:c2: 59:bd:05:6b:9a:a2:6d:d3:09:01:24:af:53:7f:dd: e5:01:97:cc:a6:ce:d8:ae:fe:e8:28:d4:c1:9a:93: 8b:62:de:d0:8b:3a:19:71:7f:3c:89:4d:08:b6:af: 55:a9:ce:14:38:78:93:c1:c4:dd:a8:69:82:e7:6f: d1:ef:4f:16:50:56:22:a9:bd:d4:fe:ee:5c:f7:0e: ba:ed:73:f5:e1:24:8e:35:53:a0:1f:f3:fd:93:9c: dd:f8:00:cc:48:fa:a6:61:97:4c:c5:33:42:49:3a: 5f:f4:c4:6b:a5:fc:4f:6a:f6:15:e3:c2:44:a3:12: 60:6b:8c:af:cf:7f:89:7f:d1:71:4a:fe:a4:f8:72: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:9A:66:5C:5A:5E:99:A3:B8:10:69:A7:DE:DB:41:FD:1B:27:89 X509v3 Authority Key Identifier: keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:06:e4:d0:82:38:f2:7f:d6:aa:75:b2:41:f2:ef:de:b7:f4: 56:c0:7b:6b:65:2a:3e:cd:d7:87:ca:20:fa:3e:dc:d0:48:af: e5:93:32:03:30:ea:21:cd:ef:02:d2:9c:9c:a9:01:18:9e:56: 0e:9d:28:f4:fc:46:39:66:d7:82:5f:db:c9:21:a3:9f:bb:67: 9d:4b:54:4c:92:59:e6:66:9e:3b:1c:25:fa:6b:3f:1b:ec:ee: f0:66:37:f7:b4:1a:ea:d9:c3:3e:6a:5b:45:24:e9:63:b6:38: 96:ec:75:ab:a9:12:72:1e:d2:cf:97:98:d2:21:55:17:7b:f1: 4d:f1:72:2a:04:a4:69:51:62:11:44:77:28:6c:fb:34:f8:be: 39:aa:7a:63:b4:1f:58:7c:5e:d8:9f:e3:ca:be:30:83:76:ed: e7:9b:15:6b:c9:66:ec:3e:2f:df:85:27:cc:f2:18:0b:8b:0f: 42:7b:4d:a3:ac:c0:2e:5f:71:59:83:ce:9f:fc:5f:72:e6:c3: b5:8e:9c:05:69:e9:cf:bb:f2:86:51:76:83:ac:cf:02:f2:5c: 99:77:7c:c6:fd:bc:74:72:86:7c:75:5b:e4:91:27:11:e6:20: 5f:b2:3b:9f:5f:10:5d:2f:a8:3a:58:1e:9d:59:74:b5:97:2b: fa:20:cf:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx NkRGMjZFQzIwHhcNMjYwNzIwMjExMzE4WhcNMjYwNzI3MjExMzE4WjAYMRYwFAYD VQQDEw02YTVlOGY2ZS04NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndZUzAtybzPsWXDfe/Uo0sw5semOIPOqMnyZ+jalgR6ggPDqrgqi+Bnlllsn BSCI+GpbHzp3ILKfKVGLgMfTbdikMrli00sqkKN1XpCw7lvp1fpQeIovBDeDnQAw JiLn3amsaqTP9UZufVelHL36KbfDyMhr5MJZvQVrmqJt0wkBJK9Tf93lAZfMps7Y rv7oKNTBmpOLYt7QizoZcX88iU0Itq9Vqc4UOHiTwcTdqGmC52/R708WUFYiqb3U /u5c9w667XP14SSONVOgH/P9k5zd+ADMSPqmYZdMxTNCSTpf9MRrpfxPavYV48JE oxJga4yvz3+Jf9FxSv6k+HJjBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRCmmZc Wl6Zo7gQaafe20H9GyeJMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1 cEtZdmVFemwtN0VXM3lic0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMgbk0II48n/WqnWyQfLv3rf0VsB7a2UqPs3Xh8og+j7c0Eiv5ZMyAzDqIc3v AtKcnKkBGJ5WDp0o9PxGOWbXgl/bySGjn7tnnUtUTJJZ5maeOxwl+ms/G+zu8GY3 97Qa6tnDPmpbRSTpY7Y4lux1q6kSch7Sz5eY0iFVF3vxTfFyKgSkaVFiEUR3KGz7 NPi+Oap6Y7QfWHxe2J/jyr4wg3bt55sVa8lm7D4v34UnzPIYC4sPQntNo6zALl9x WYPOn/xfcubDtY6cBWnpz7vyhlF2g6zPAvJcmXd8xv28dHKGfHVb5JEnEeYgX7I7 n18QXS+oOlgenVl0tZcr+iDPeg== -----END CERTIFICATE-----Generated at Wed Jul 22 00:21:59 2026 by rpki-client