$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: hcjh6Bta1uMdCXqWQxW0AxHIIgXDtjBI9dLu4jXV+nk= Subject key identifier: 8F:E3:BC:C3:95:70:65:9C:74:DF:D4:A6:BB:73:6D:C0:B1:62:88:91 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1EB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1EA1 Signing time: Thu 23 Jul 2026 23:39:35 +0000 Manifest this update: Thu 23 Jul 2026 23:39:34 +0000 Manifest next update: Thu 30 Jul 2026 23:39:34 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: ktUKOZhzyMoePXtpklNo0U1zysdA0UNlBGfl4mppk64=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) 3: C038B7FE86EF11F19E006003A7EE528E.roa (hash: ZEscxUiYOhY8wr30WKkD3cENQG8jr+C0jILnAClnhKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7858 (0x1eb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Jul 23 23:39:34 2026 GMT Not After : Jul 30 23:39:34 2026 GMT Subject: CN=6a62a637-e320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:9c:7f:24:e7:2b:39:20:9b:14:57:f1:8e: ab:97:e3:d6:f0:bd:98:97:f4:d8:64:f1:bf:a5:d0: 0c:73:b4:14:d5:53:9f:3a:3a:14:41:d9:a4:62:95: 3c:a0:ff:0b:9f:70:05:37:ce:80:84:37:00:e1:49: e4:57:2b:b5:30:fe:00:3d:01:0b:ef:de:4f:60:e4: 3d:10:c0:b6:47:e2:c4:a1:53:a6:f0:b2:b9:27:41: 69:c0:e9:7a:e5:64:dd:2f:9e:3c:83:6d:8a:d5:60: ce:8d:d5:55:d7:2e:78:7d:ba:7d:b9:49:17:1c:fd: 75:36:67:59:d2:7a:73:06:77:df:2f:d4:5c:76:97: 88:0b:45:d7:84:e4:63:e3:27:ce:76:e5:2a:30:53: 85:78:24:d4:97:f3:1d:bc:08:0b:13:3a:b1:60:d8: 0f:cd:c5:3b:4e:7b:6b:68:fb:d9:94:3a:ac:e4:ab: e0:61:64:0e:00:7b:60:e8:84:97:a6:da:11:67:80: 35:aa:1d:71:30:72:a0:f7:62:20:91:1e:67:e7:bb: cf:79:1d:76:41:2e:66:6b:6c:73:55:92:26:4b:ef: 7a:49:56:2a:ca:6e:2c:a0:c0:d1:94:70:56:44:41: 3e:62:87:cd:75:9e:7d:93:cf:53:a4:0a:d3:85:f6: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:BC:C3:95:70:65:9C:74:DF:D4:A6:BB:73:6D:C0:B1:62:88:91 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:3e:3a:42:76:12:44:2c:58:cf:ba:6e:6f:f2:20:83:d8: 75:3a:3b:8a:80:58:ea:2d:9e:28:18:74:0f:37:99:09:d4:af: ff:4a:5b:a0:f1:42:28:6f:52:63:4b:cf:2b:49:66:aa:3a:5f: 67:fc:25:b6:14:d4:06:d8:c0:de:2c:cc:ff:9e:27:34:46:29: ad:42:18:0c:93:d9:02:c9:ea:fc:74:25:2c:b7:30:41:8b:25: 5e:06:f6:0f:08:98:8e:62:c2:82:12:e9:b7:46:6b:c7:8f:6f: 85:c8:e7:1b:5c:78:e7:f8:46:24:4f:66:2d:36:7f:b0:b0:01: 6c:ee:a2:f7:66:3d:4e:78:f6:37:85:80:62:79:18:9f:56:2b: c2:1a:e0:25:15:1b:24:d7:f5:62:0e:31:64:0d:c2:d2:87:fb: 60:87:34:53:75:e0:f1:06:86:c4:e9:5d:8e:a5:92:9a:2c:db: 29:94:b4:fa:e6:c4:67:f0:53:8e:c4:d3:9e:ba:d2:da:f8:d2: b8:c0:c2:f3:ee:2f:4e:10:89:7b:96:eb:2d:bb:b6:78:4a:25: da:a0:96:2d:12:ff:fd:b0:0c:2a:6a:4b:63:53:60:96:c4:63: 5d:2e:2e:46:8e:99:50:ad:51:6d:dd:71:19:c3:86:81:05:90: de:52:59:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjYwNzIzMjMzOTM0WhcNMjYwNzMwMjMzOTM0WjAYMRYwFAYD VQQDEw02YTYyYTYzNy1lMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOGcfyTnKzkgmxRX8Y6rl+PW8L2Yl/TYZPG/pdAMc7QU1VOfOjoUQdmkYpU8 oP8Ln3AFN86AhDcA4UnkVyu1MP4APQEL795PYOQ9EMC2R+LEoVOm8LK5J0FpwOl6 5WTdL548g22K1WDOjdVV1y54fbp9uUkXHP11NmdZ0npzBnffL9RcdpeIC0XXhORj 4yfOduUqMFOFeCTUl/MdvAgLEzqxYNgPzcU7TntraPvZlDqs5KvgYWQOAHtg6ISX ptoRZ4A1qh1xMHKg92IgkR5n57vPeR12QS5ma2xzVZImS+96SVYqym4soMDRlHBW REE+YofNdZ59k89TpArThfbB8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/jvMOV cGWcdN/UprtzbcCxYoiRMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAddk+OkJ2EkQsWM+6bm/yIIPYdTo7ioBY6i2eKBh0DzeZCdSv/0pboPFCKG9S Y0vPK0lmqjpfZ/wlthTUBtjA3izM/54nNEYprUIYDJPZAsnq/HQlLLcwQYslXgb2 DwiYjmLCghLpt0Zrx49vhcjnG1x45/hGJE9mLTZ/sLABbO6i92Y9Tnj2N4WAYnkY n1YrwhrgJRUbJNf1Yg4xZA3C0of7YIc0U3Xg8QaGxOldjqWSmizbKZS0+ubEZ/BT jsTTnrrS2vjSuMDC8+4vThCJe5brLbu2eEol2qCWLRL//bAMKmpLY1NglsRjXS4u Ro6ZUK1Rbd1xGcOGgQWQ3lJZ5w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:52:10 2026 by rpki-client