$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: lm3MF+MGo3iAR2NneovFGj3JdsFZ52zbKTrfqemfYHk= Subject key identifier: 59:1F:D5:BA:25:E6:0C:93:91:E2:63:6A:BE:AF:97:1E:39:AA:04:41 Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 35 Signing time: Thu 23 Jul 2026 10:37:44 +0000 Manifest this update: Thu 23 Jul 2026 10:37:43 +0000 Manifest next update: Thu 30 Jul 2026 10:37:43 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: itiq0EbIzaaHfzj3vPNFmxZMXwksN7d1RbuARTMqX7Y=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Jul 23 10:37:43 2026 GMT Not After : Jul 30 10:37:43 2026 GMT Subject: CN=6a61eef8-7d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:4e:d6:2c:1e:67:13:fe:3a:29:b1:5d:03: a8:3f:f1:cb:c9:96:38:ab:3e:28:13:3a:30:f4:2c: 75:3d:e4:96:18:cc:37:5d:ae:03:1a:d8:8a:02:11: d5:ec:4a:cd:3d:77:4e:79:16:8d:81:6e:01:b5:1f: 3c:37:bd:6c:56:08:a2:4d:08:8d:1b:11:27:b6:0b: 2e:dc:32:c2:30:f7:24:c8:10:b1:f5:19:49:59:f0: 71:9c:08:25:f1:e9:3b:3a:cc:c0:ad:6c:95:fa:a1: 81:a0:dd:8a:4d:4e:11:ab:4e:71:a4:2c:a0:3a:9a: b0:f2:3d:78:1e:16:61:fb:56:5c:26:ea:5f:3f:80: 5b:93:80:f2:b3:68:ff:b5:27:7a:bb:6d:75:82:af: 5b:cb:77:5f:b7:ec:fa:e5:2b:f6:da:d9:b6:6c:54: 42:79:ac:14:b4:c8:89:e2:f2:b5:e3:8e:dd:1f:5f: 1a:34:2d:07:f3:4c:30:ef:f5:14:e4:bb:53:82:58: ab:cf:1a:93:44:7b:14:49:e0:a3:2d:30:4c:10:13: b1:95:99:dc:6d:12:bf:9c:f0:5e:92:e1:1d:ae:e5: 78:9d:96:da:8c:42:50:14:8c:69:dc:84:e6:4b:7d: 93:ac:49:66:3f:a1:63:6a:07:86:9a:ca:4b:d5:2a: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1F:D5:BA:25:E6:0C:93:91:E2:63:6A:BE:AF:97:1E:39:AA:04:41 X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5b:88:44:8c:ee:9e:a4:2c:61:0a:b0:94:6f:2e:2f:4b:87: 8d:df:3d:9d:6d:c4:81:3b:7e:05:37:6f:bd:53:25:ed:b0:6d: 80:68:ef:0a:cf:18:47:0a:ff:c9:d9:7f:da:cf:21:65:74:39: 4a:34:8b:12:77:d6:c9:8c:95:36:e1:b9:66:8d:18:4d:28:6b: a8:0d:cf:d6:e7:2e:27:4e:78:2c:8c:4c:a4:18:ac:fe:27:7d: 32:76:d8:fa:0e:e0:75:c8:92:27:47:0d:1c:99:65:5b:71:a7: aa:af:8d:67:4c:80:5d:f0:75:94:44:8c:22:56:5b:8b:b5:82: cb:d8:eb:40:97:97:06:d0:f2:c3:fe:c5:0b:18:e4:93:b9:b3: 2e:3c:c0:f2:72:1f:2e:67:f1:4c:a1:ed:73:93:e3:19:5a:e6: e3:5a:04:da:36:8a:90:f6:b4:e6:bf:98:3d:c9:52:c7:f9:4b: 40:09:2c:f6:18:d5:72:5f:1d:77:eb:46:25:38:dd:08:05:82: f9:05:57:35:a4:f2:40:51:02:b3:88:8a:d8:4c:36:96:e8:1a: 84:9f:e3:de:a2:e1:2b:e1:f4:2b:6b:87:df:4b:55:c3:c3:f9: b8:f9:6e:a2:e8:fa:59:79:6f:6a:9f:3d:06:f1:53:34:50:1c: ef:f0:99:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA3MjMxMDM3NDNaFw0yNjA3MzAxMDM3NDNaMBgxFjAUBgNV BAMTDTZhNjFlZWY4LTdkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzoU7WLB5nE/46KbFdA6g/8cvJljirPigTOjD0LHU95JYYzDddrgMa2IoCEdXs Ss09d055Fo2BbgG1Hzw3vWxWCKJNCI0bESe2Cy7cMsIw9yTIELH1GUlZ8HGcCCXx 6Ts6zMCtbJX6oYGg3YpNThGrTnGkLKA6mrDyPXgeFmH7Vlwm6l8/gFuTgPKzaP+1 J3q7bXWCr1vLd1+37PrlK/ba2bZsVEJ5rBS0yIni8rXjjt0fXxo0LQfzTDDv9RTk u1OCWKvPGpNEexRJ4KMtMEwQE7GVmdxtEr+c8F6S4R2u5XidltqMQlAUjGnchOZL fZOsSWY/oWNqB4aaykvVKvK3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWR/VuiXm DJOR4mNqvq+XHjmqBEEwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyW4hEjO6epCxhCrCUby4vS4eN3z2dbcSBO34FN2+9UyXtsG2AaO8KzxhHCv/J 2X/azyFldDlKNIsSd9bJjJU24blmjRhNKGuoDc/W5y4nTngsjEykGKz+J30ydtj6 DuB1yJInRw0cmWVbcaeqr41nTIBd8HWURIwiVluLtYLL2OtAl5cG0PLD/sULGOST ubMuPMDych8uZ/FMoe1zk+MZWubjWgTaNoqQ9rTmv5g9yVLH+UtACSz2GNVyXx13 60YlON0IBYL5BVc1pPJAUQKziIrYTDaW6BqEn+PeouEr4fQra4ffS1XDw/m4+W6i 6PpZeW9qnz0G8VM0UBzv8Jkj -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:46 2026 by rpki-client