$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json) Hash identifier: oghS4t2U8qf+xZr0oH8GxMm1CCKEMje3sIbRnwY6500= Subject key identifier: 02:E0:98:CC:13:86:42:64:EA:DC:6D:50:0E:B9:1D:EE:1B:0F:47:A2 Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft Manifest number: 7E Signing time: Tue 21 Jul 2026 09:36:01 +0000 Manifest this update: Tue 21 Jul 2026 09:36:01 +0000 Manifest next update: Tue 28 Jul 2026 09:36:01 +0000 Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: cRocZc0qa3qlvwz/C4agFBtmqtGdjGzMVAKUSz/4yMM=) 2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: C6n4CKTLus0le6GvOuMAOqp7CZSB754RPW+BsJBKvDo=) 3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: msyCQ/czlxVP4EfnOfA3beQPUOxdvP8PZzB1UIGuVjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 09:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Jul 21 09:36:01 2026 GMT Not After : Jul 28 09:36:01 2026 GMT Subject: CN=6a5f3d81-1a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:8a:a4:05:e1:e0:44:59:18:3c:14:03:c0: 82:a7:fb:c6:23:ea:2c:f3:29:71:8c:6d:5a:e4:35: 68:7d:9e:07:1f:7a:21:70:99:6f:7e:bc:8d:fe:9d: 74:d2:65:8f:b9:e2:be:11:b3:8c:58:cf:cf:ad:f1: ad:85:5f:97:8f:dc:2e:8e:09:bf:03:00:d6:23:d6: 6c:56:e8:62:21:ce:cf:cb:0f:98:23:ba:b3:d4:eb: ee:84:c5:8c:da:31:73:8b:50:55:3b:6d:0f:ae:28: ec:14:ff:8f:c2:d4:c3:ca:3f:e4:aa:20:5e:af:c6: bc:42:74:42:2d:c1:43:8f:e0:64:f0:0a:7b:63:9e: 88:bb:5f:f0:0c:1f:77:8e:96:27:90:d7:03:a3:ec: 36:c8:5e:5d:ab:00:64:d4:b3:a3:48:71:91:b8:d9: bc:6a:9e:18:5a:d1:43:6e:76:d4:6c:46:a0:60:67: 2d:b9:ee:ae:66:0c:07:65:09:e5:70:4e:f4:19:bc: 1c:8a:64:f8:7c:fe:60:2c:71:2b:5d:2b:b2:72:8f: d2:30:24:ec:55:1d:9a:b9:47:0c:a8:43:fe:a6:4b: 4c:56:5d:22:41:b2:06:64:73:a0:91:22:a8:52:b4: 3e:3c:1b:f9:b0:6a:a2:34:b6:70:e2:47:d8:f7:0b: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:98:CC:13:86:42:64:EA:DC:6D:50:0E:B9:1D:EE:1B:0F:47:A2 X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:5d:80:0d:16:e8:c0:cb:a3:1a:57:7b:16:9e:a0:e4:e9:8e: e6:79:03:f2:b4:2a:59:cf:ea:8c:31:be:d4:c9:0b:ff:a6:31: c8:b0:94:cb:33:7f:b3:72:21:01:bf:b6:b0:9c:51:e1:88:5b: 01:b0:91:22:cc:b8:d0:85:95:3a:d6:3e:06:6b:52:0e:88:16: 00:2b:f7:c5:10:43:3b:16:6f:83:d3:a3:86:24:f0:e7:62:5c: 44:5f:84:0b:47:cd:01:4f:8d:e5:f5:fd:c8:45:13:f9:0a:9e: 9f:33:74:aa:08:cf:d3:e0:f9:1b:54:46:e6:d0:74:93:00:36: 3d:5c:6a:07:1c:ce:ff:5b:62:96:e9:47:bb:b9:b8:e9:64:63: be:4d:f7:c7:e2:98:8b:c7:c7:f2:4e:d8:ab:7e:b6:f8:d0:df: 7a:55:67:7f:e1:58:ec:f4:fd:72:20:cd:9a:9b:0f:f6:18:d7: 8e:4c:2d:d9:8e:cf:8f:54:b7:e6:fd:79:f0:9e:ea:1e:be:f5: d6:1f:69:b4:e6:c0:eb:a0:c2:7e:07:34:93:e4:00:c9:7a:fe: ec:8d:9a:45:6e:d3:17:5f:d8:40:3b:32:ab:41:be:ff:7c:f5: 05:ab:13:40:e2:ba:67:39:83:02:92:2a:2a:c7:78:2b:30:29: f0:95:62:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdBQTBDOEFGQzc3 RjRGMEJCQjMwHhcNMjYwNzIxMDkzNjAxWhcNMjYwNzI4MDkzNjAxWjAYMRYwFAYD VQQDEw02YTVmM2Q4MS0xYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JmKpAXh4ERZGDwUA8CCp/vGI+os8ylxjG1a5DVofZ4HH3ohcJlvfryN/p10 0mWPueK+EbOMWM/PrfGthV+Xj9wujgm/AwDWI9ZsVuhiIc7Pyw+YI7qz1OvuhMWM 2jFzi1BVO20PrijsFP+PwtTDyj/kqiBer8a8QnRCLcFDj+Bk8Ap7Y56Iu1/wDB93 jpYnkNcDo+w2yF5dqwBk1LOjSHGRuNm8ap4YWtFDbnbUbEagYGctue6uZgwHZQnl cE70GbwcimT4fP5gLHErXSuyco/SMCTsVR2auUcMqEP+pktMVl0iQbIGZHOgkSKo UrQ+PBv5sGqiNLZw4kfY9wvbqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALgmMwT hkJk6txtUA65He4bD0eiMB8GA1UdIwQYMBaAFB5TD6n2YKjcFzjHqgyK/Hf08Luz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNS80MDBDNURFQ0Qw MTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FOd1hPTWVxRElyOGRfVHd1 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZaZ3FO d1hPTWVxRElyOGRfVHd1N00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzV2ADRbowMujGld7Fp6g5OmO5nkD8rQqWc/qjDG+1MkL/6YxyLCUyzN/s3Ih Ab+2sJxR4YhbAbCRIsy40IWVOtY+BmtSDogWACv3xRBDOxZvg9OjhiTw52JcRF+E C0fNAU+N5fX9yEUT+QqenzN0qgjP0+D5G1RG5tB0kwA2PVxqBxzO/1tilulHu7m4 6WRjvk33x+KYi8fH8k7Yq362+NDfelVnf+FY7PT9ciDNmpsP9hjXjkwt2Y7Pj1S3 5v158J7qHr711h9ptObA66DCfgc0k+QAyXr+7I2aRW7TF1/YQDsyq0G+/3z1BasT QOK6ZzmDApIqKsd4KzAp8JVieg== -----END CERTIFICATE-----Generated at Tue Jul 21 21:24:27 2026 by rpki-client