$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: g7JWOtbkQ007Z8ILY0lCcVT6+2eDbsMuy3AFAbS9pA0= Subject key identifier: 61:30:E1:D0:2B:F9:A0:68:AE:D1:D5:09:3A:AE:02:4D:79:03:06:69 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 8F Signing time: Thu 23 Jul 2026 09:22:45 +0000 Manifest this update: Thu 23 Jul 2026 09:22:44 +0000 Manifest next update: Thu 30 Jul 2026 09:22:44 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: SOvf2PPBXKEMFOl4tbHjj4YrOIr6JUPFsx7tE8Pk7mI=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: KXtLMxhNV80b7UVLzNEenAj/lw44i+8q+VpDj2RXMEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Jul 23 09:22:44 2026 GMT Not After : Jul 30 09:22:44 2026 GMT Subject: CN=6a61dd65-1ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:40:1a:54:2f:4d:55:d4:0f:90:7e:ea:71: 97:d0:85:fe:ed:ff:9e:d4:3b:a8:91:f4:bd:4a:a2: 4b:15:87:9a:50:9a:3f:5c:49:ad:01:51:ee:dd:c3: 2d:4d:35:0e:ea:79:37:31:90:70:b2:49:d6:ed:91: bf:55:b0:c9:d8:e3:ae:52:3c:b8:cc:63:b7:48:4d: 80:f9:ad:ca:0f:3c:ed:36:35:2f:28:0d:4e:ca:3d: b1:0b:e9:34:12:8c:72:5e:24:d9:ef:44:2e:d9:60: a6:fe:00:1e:38:e4:93:d1:c1:a3:ff:12:b1:1c:30: e7:0c:4c:32:05:df:4f:31:e7:2b:7a:2c:37:70:11: 7d:0c:0a:68:57:93:ad:59:f0:ee:41:84:88:58:38: b9:ea:2d:3f:f5:ff:d4:f6:20:86:df:84:37:b9:18: 19:a2:05:69:76:c6:fe:04:76:1c:b2:24:4d:c6:1b: 83:89:65:6d:0e:aa:cd:03:ce:06:c3:99:ad:fc:f1: dd:8a:aa:6b:b7:b6:c6:c1:64:58:fe:c2:2f:16:43: 00:e5:15:92:68:0f:50:67:f6:96:9b:5d:14:36:0e: 1a:a5:0b:cb:df:13:e7:0d:19:da:2d:33:e2:01:c3: 53:0c:4b:4d:b6:9e:50:a3:67:74:89:aa:56:d4:24: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:30:E1:D0:2B:F9:A0:68:AE:D1:D5:09:3A:AE:02:4D:79:03:06:69 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2c:1c:3a:1b:8d:6f:d1:1a:d6:2c:f5:c7:b9:ff:c3:ac:69: 16:f9:87:5d:44:2b:43:d6:90:b2:2d:22:22:f4:f8:68:05:05: 2a:3a:f2:55:a8:da:27:b6:eb:84:3f:79:0f:78:76:3c:ec:7a: 52:75:f8:fb:96:c3:3e:65:8e:94:9e:4e:b7:92:9a:b0:5f:e9: 10:e9:0d:a4:23:89:75:e6:d2:26:cc:87:27:e7:08:27:1a:c9: bd:bb:7a:4a:8b:c4:6c:ee:e7:3c:56:6e:c3:2c:d5:4a:34:52: 64:79:b7:3a:19:fa:67:4d:2f:92:7c:b5:bf:d5:70:7b:d2:69: 0d:94:71:b1:34:bb:f7:06:e0:21:a0:3e:11:26:7d:15:f4:67: 91:b6:a2:38:b3:40:26:43:7b:ee:b3:2b:13:43:e3:28:1b:c7: a6:e1:d1:62:c4:08:b1:f8:d3:f2:96:5e:f1:21:62:ad:c8:9a: cf:3c:f4:c7:b3:07:d7:47:52:c1:d8:47:c3:77:eb:0d:0a:a8: 56:4d:9e:c7:39:a6:55:1b:94:25:ce:01:b9:96:96:c1:86:85: 20:12:f2:43:14:ee:ba:d9:3b:e9:59:a9:1f:4d:69:33:7a:74: fc:a9:46:b7:af:be:25:9a:5d:35:01:67:6c:0c:8f:4a:bd:ce: d7:b9:1f:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNzYxMTAvBgNVBAUTKEE2MkZDRDY0NTRBNjhBMDg2NUY2Qjk1Q0MwRTg3NzQ0 OUVGM0VGQTkwHhcNMjYwNzIzMDkyMjQ0WhcNMjYwNzMwMDkyMjQ0WjAYMRYwFAYD VQQDEw02YTYxZGQ2NS0xZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc1AGlQvTVXUD5B+6nGX0IX+7f+e1DuokfS9SqJLFYeaUJo/XEmtAVHu3cMt TTUO6nk3MZBwsknW7ZG/VbDJ2OOuUjy4zGO3SE2A+a3KDzztNjUvKA1Oyj2xC+k0 EoxyXiTZ70Qu2WCm/gAeOOST0cGj/xKxHDDnDEwyBd9PMecreiw3cBF9DApoV5Ot WfDuQYSIWDi56i0/9f/U9iCG34Q3uRgZogVpdsb+BHYcsiRNxhuDiWVtDqrNA84G w5mt/PHdiqprt7bGwWRY/sIvFkMA5RWSaA9QZ/aWm10UNg4apQvL3xPnDRnaLTPi AcNTDEtNtp5Qo2d0iapW1CQciQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGEw4dAr +aBortHVCTquAk15AwZpMB8GA1UdIwQYMBaAFKYvzWRUpooIZfa5XMDod0Se8++p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE3Ni8wODdDQzdBMEIw QzAxMUYwQjY5RUEyNTZDNEY5QUUwMi9waV9OWkZTbWlnaGw5cmxjd09oM1JKN3o3 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE3Ni8wODdDQzdBMEIwQzAxMUYwQjY5RUEyNTZDNEY5QUUwMi9waV9OWkZTbWln aGw5cmxjd09oM1JKN3o3NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAriwcOhuNb9Ea1iz1x7n/w6xpFvmHXUQrQ9aQsi0iIvT4aAUFKjryVajaJ7br hD95D3h2POx6UnX4+5bDPmWOlJ5Ot5KasF/pEOkNpCOJdebSJsyHJ+cIJxrJvbt6 SovEbO7nPFZuwyzVSjRSZHm3Ohn6Z00vkny1v9Vwe9JpDZRxsTS79wbgIaA+ESZ9 FfRnkbaiOLNAJkN77rMrE0PjKBvHpuHRYsQIsfjT8pZe8SFirciazzz0x7MH10dS wdhHw3frDQqoVk2exzmmVRuUJc4BuZaWwYaFIBLyQxTuutk76VmpH01pM3p0/KlG t6++JZpdNQFnbAyPSr3O17kfDg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:43 2026 by rpki-client