$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft File: HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json) Hash identifier: KvrreWZNNBJKBlsyidRMBN9OfGBo42CFgTMpMcxLG+s= Subject key identifier: 8A:A6:28:28:81:B3:A8:5B:39:28:4F:F2:7F:54:99:DF:44:B4:1C:56 Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft Manifest number: D9 Signing time: Tue 21 Jul 2026 08:21:58 +0000 Manifest this update: Tue 21 Jul 2026 08:21:57 +0000 Manifest next update: Tue 28 Jul 2026 08:21:57 +0000 Files and hashes: 1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: b7/XRjdutnTV6Bi1W1YJKseepZ5qX46OKO0TPDkOQIU=) 2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661 Validity Not Before: Jul 21 08:21:57 2026 GMT Not After : Jul 28 08:21:57 2026 GMT Subject: CN=6a5f2c26-c6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1b:61:9c:0a:76:e2:44:82:71:a5:e7:77:16: 82:c5:44:f5:5d:3e:f8:d2:c7:64:ad:de:a8:0e:c1: 5b:62:bd:ef:40:9f:b0:35:ba:83:3a:b8:12:60:3c: 3f:24:2e:fb:0f:7f:9f:65:73:e1:11:fe:f7:7c:3c: 21:4e:0e:06:8e:62:61:7e:0d:7c:b2:fa:27:1a:29: 34:3a:3b:86:df:28:c2:85:fe:03:bd:39:5b:80:71: 28:ba:60:d7:6b:b0:a4:b7:07:e5:73:75:34:1e:8e: b6:f5:7b:52:5a:c3:b8:40:c5:82:75:35:0e:a7:87: 28:5c:a0:f6:d8:eb:bb:59:64:b3:01:ef:b3:a2:8b: 1f:d7:5e:80:6d:32:18:19:1f:70:bb:b9:bf:80:d3: b5:b8:0c:42:14:be:b8:b7:32:6b:1f:4e:a3:7b:68: aa:f7:4f:3c:82:b6:f7:05:2a:8b:64:50:71:e7:b1: ff:18:8b:30:23:22:22:67:9f:f7:2d:0a:2d:fd:5f: 3f:87:46:c6:ab:35:ec:8b:30:85:b3:bf:03:7d:52: 10:84:67:73:1a:e4:ea:c6:f2:2f:f4:fe:12:05:d3: 57:83:9e:9b:76:92:41:b0:0c:13:b0:3a:d0:86:0c: 81:2b:ac:09:42:3c:31:17:d6:12:91:3c:4f:b9:e6: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A6:28:28:81:B3:A8:5B:39:28:4F:F2:7F:54:99:DF:44:B4:1C:56 X509v3 Authority Key Identifier: keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:ff:f0:1d:46:6d:63:84:46:e6:8e:ee:26:0c:ad:71:dc: 4a:5f:f8:65:68:74:f5:90:c6:f1:e4:8c:40:17:86:5a:74:7d: 2d:08:f6:27:cd:52:3a:2b:1d:62:6c:8a:a3:87:84:4e:c2:f3: 0e:b1:ff:9f:5e:f4:e3:77:95:b9:8d:f2:03:ec:a9:aa:38:b9: 61:25:c8:ec:41:12:dc:2a:28:aa:78:94:65:7d:cf:f1:4b:72: 94:26:51:f1:49:27:9c:4f:7a:9e:ef:3d:37:56:6c:cc:66:d4: 5d:2f:af:d9:8d:cf:48:07:6b:c4:95:09:d2:01:bb:6e:0c:5e: fd:93:e4:b0:a4:51:4d:e1:f8:83:38:04:80:23:e9:69:b7:22: b7:17:27:18:c6:55:5f:df:9a:0a:95:c2:cb:e3:05:82:1c:8e: ff:95:d9:28:af:46:5d:46:5b:ff:8f:e7:a5:6f:0c:06:af:40: fc:7f:31:73:a3:86:b1:0f:a3:66:3b:a2:fa:06:b4:01:a6:a3: d8:92:68:42:2d:1b:f5:35:99:07:6f:a5:a3:28:9a:87:b3:af: 22:66:5a:99:c9:e1:0d:d9:c3:33:1c:ba:51:c9:d2:e5:19:27: ac:43:e7:ed:d8:8b:9b:f5:dc:8b:a5:0e:a2:c7:3c:ff:17:69: a4:f5:10:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxNzcxMTAvBgNVBAUTKDFDRDJENEYzMjZBMTg0QTQ4N0JGMjJBQ0Q3OEFENUMw NjhGNDY2NjEwHhcNMjYwNzIxMDgyMTU3WhcNMjYwNzI4MDgyMTU3WjAYMRYwFAYD VQQDEw02YTVmMmMyNi1jNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RthnAp24kSCcaXndxaCxUT1XT740sdkrd6oDsFbYr3vQJ+wNbqDOrgSYDw/ JC77D3+fZXPhEf73fDwhTg4GjmJhfg18svonGik0OjuG3yjChf4DvTlbgHEoumDX a7Cktwflc3U0Ho629XtSWsO4QMWCdTUOp4coXKD22Ou7WWSzAe+zoosf116AbTIY GR9wu7m/gNO1uAxCFL64tzJrH06je2iq9088grb3BSqLZFBx57H/GIswIyIiZ5/3 LQot/V8/h0bGqzXsizCFs78DfVIQhGdzGuTqxvIv9P4SBdNXg56bdpJBsAwTsDrQ hgyBK6wJQjwxF9YSkTxPuea+0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqmKCiB s6hbOShP8n9Umd9EtBxWMB8GA1UdIwQYMBaAFBzS1PMmoYSkh78irNeK1cBo9GZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODE3Ny84QkEzRDhDNDNE REIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhLU0h2eUtzMTRyVndHajBa bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOTFU4eWFoaEtTSHZ5S3MxNHJWd0dqMFptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODE3Ny84QkEzRDhDNDNEREIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhL U0h2eUtzMTRyVndHajBabUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEkP/8B1GbWOERuaO7iYMrXHcSl/4ZWh09ZDG8eSMQBeGWnR9LQj2J81SOisd YmyKo4eETsLzDrH/n17043eVuY3yA+ypqji5YSXI7EES3CooqniUZX3P8UtylCZR 8UknnE96nu89N1ZszGbUXS+v2Y3PSAdrxJUJ0gG7bgxe/ZPksKRRTeH4gzgEgCPp abcitxcnGMZVX9+aCpXCy+MFghyO/5XZKK9GXUZb/4/npW8MBq9A/H8xc6OGsQ+j Zjui+ga0Aaaj2JJoQi0b9TWZB2+loyiah7OvImZamcnhDdnDMxy6UcnS5RknrEPn 7diLm/Xci6UOosc8/xdppPUQAQ== -----END CERTIFICATE-----Generated at Wed Jul 22 04:03:41 2026 by rpki-client