$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: jfjzkhRv6urJMyPEPkEXfLSvseQxkI05j0zZx9CMuGU= Subject key identifier: B8:D5:E1:E4:15:A0:C5:B4:F8:B9:EC:B5:15:07:F1:31:32:F9:FB:88 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0AE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0AD7 Signing time: Tue 18 Aug 2026 19:42:50 +0000 Manifest this update: Tue 18 Aug 2026 19:42:49 +0000 Manifest next update: Tue 25 Aug 2026 19:42:49 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: dGRC/DREZXfF3C6VF5qQl2myxKEsRJPl2+F5BfXzDxo=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: MObLxHg+0HyslwCyt5x1ibD8HWNnbjOCAqyl5AXJDCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Aug 18 19:42:49 2026 GMT Not After : Aug 25 19:42:49 2026 GMT Subject: CN=6a84b5ba-49f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:83:bd:1f:23:03:1a:1d:53:8f:68:75:31: db:0d:0f:78:08:23:b5:1e:13:78:44:24:e1:1c:56: 4f:f5:3e:31:0d:38:64:08:e2:18:c5:24:0b:c9:0d: 3e:dd:dc:24:e2:f1:05:95:fb:37:62:22:29:65:84: 8f:d8:12:5c:d8:5b:43:f6:c7:5c:8e:59:e1:07:2b: c3:42:32:49:f7:81:bf:e8:fd:6d:d5:93:0a:9b:14: e5:7d:f3:33:6f:d4:4f:c8:75:cb:09:b0:71:93:8f: c4:78:d8:82:f1:f8:ae:b5:ef:b7:f6:fb:0a:aa:b1: f1:a3:82:84:12:bc:24:72:4e:4e:7a:74:23:4a:da: da:c6:91:25:f6:1e:e2:cc:34:18:05:5a:32:1d:62: 10:88:cc:55:e1:d2:d4:37:46:a9:00:d2:93:01:6a: 57:37:41:38:25:08:26:dc:f9:39:9b:ca:d4:77:ec: b0:10:0a:76:7a:c9:45:c1:65:0b:4b:23:07:2b:93: 33:cb:7a:4e:83:4b:40:af:fe:c5:aa:d8:f2:b3:de: cc:5b:53:52:82:c8:17:b7:7a:bf:a0:3d:b7:d0:0e: f4:f0:b1:e0:2a:a7:d8:b8:e4:71:f0:94:db:15:85: 91:b9:33:14:27:d6:55:d5:f4:12:05:bb:0f:36:5a: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D5:E1:E4:15:A0:C5:B4:F8:B9:EC:B5:15:07:F1:31:32:F9:FB:88 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:77:8b:58:93:25:4b:8b:57:8f:6a:94:63:77:28:62:95: f0:c1:7e:d8:88:e3:c4:15:f9:87:6e:3d:16:6e:e1:fc:ce:a5: ce:d9:57:ed:80:d9:e7:e4:38:5d:b2:f0:9e:5c:7f:e0:5c:d9: f7:ef:f3:a1:2a:af:b5:87:4e:30:e2:63:3c:75:33:5b:ad:a5: 8a:c0:87:a9:88:9b:5a:4a:74:82:f6:6b:cf:01:22:1c:55:2f: 02:e8:91:ee:9f:a9:70:f6:e8:4e:df:af:c7:89:61:dd:8f:7b: ad:e2:00:15:0f:7f:09:00:7b:7c:94:50:1e:46:48:f4:ed:8f: 2b:02:86:59:82:0b:0b:d8:f7:1d:f0:3a:dc:b7:27:9a:3d:4a: c8:f4:f8:d6:22:6d:bc:22:6a:5c:d5:3f:15:23:de:65:88:81: 2c:d5:fb:ea:40:c4:b2:6b:f6:0c:37:e1:3a:34:8d:fe:98:8a: e4:00:59:71:05:7d:4c:e6:0f:10:2d:7a:87:81:45:d3:c7:12: 08:6e:53:0b:0c:d1:96:c5:68:13:0c:a6:5f:c2:e8:33:1c:1b: 22:cc:df:05:c7:00:d9:85:67:7f:47:cc:8c:01:d2:3c:f2:86: ff:38:02:47:82:7a:00:c0:01:ef:85:71:b0:32:53:f2:37:7c: 9a:86:45:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjYwODE4MTk0MjQ5WhcNMjYwODI1MTk0MjQ5WjAYMRYwFAYD VQQDEw02YTg0YjViYS00OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBSDvR8jAxodU49odTHbDQ94CCO1HhN4RCThHFZP9T4xDThkCOIYxSQLyQ0+ 3dwk4vEFlfs3YiIpZYSP2BJc2FtD9sdcjlnhByvDQjJJ94G/6P1t1ZMKmxTlffMz b9RPyHXLCbBxk4/EeNiC8fiute+39vsKqrHxo4KEErwkck5OenQjStraxpEl9h7i zDQYBVoyHWIQiMxV4dLUN0apANKTAWpXN0E4JQgm3Pk5m8rUd+ywEAp2eslFwWUL SyMHK5Mzy3pOg0tAr/7Fqtjys97MW1NSgsgXt3q/oD230A708LHgKqfYuORx8JTb FYWRuTMUJ9ZV1fQSBbsPNlo0twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjV4eQV oMW0+LnstRUH8TEy+fuIMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUs53i1iTJUuLV49qlGN3KGKV8MF+2IjjxBX5h249Fm7h/M6lztlX7YDZ5+Q4 XbLwnlx/4FzZ9+/zoSqvtYdOMOJjPHUzW62lisCHqYibWkp0gvZrzwEiHFUvAuiR 7p+pcPboTt+vx4lh3Y97reIAFQ9/CQB7fJRQHkZI9O2PKwKGWYILC9j3HfA63Lcn mj1KyPT41iJtvCJqXNU/FSPeZYiBLNX76kDEsmv2DDfhOjSN/piK5ABZcQV9TOYP EC16h4FF08cSCG5TCwzRlsVoEwymX8LoMxwbIszfBccA2YVnf0fMjAHSPPKG/zgC R4J6AMAB74VxsDJT8jd8moZFjQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:08 2026 by rpki-client