$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: anpXE9RzDujjgroDGI+rWY7ySTQbhSzxF+3CCm46rBw= Subject key identifier: EF:2F:E7:FD:43:B8:BA:52:1F:39:50:04:20:32:29:80:50:EA:BE:56 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0324 Signing time: Thu 23 Jul 2026 02:04:28 +0000 Manifest this update: Thu 23 Jul 2026 02:04:27 +0000 Manifest next update: Thu 30 Jul 2026 02:04:27 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: Lr0/5udA57n0YKw4QQEHH28nvHQmJKAvM/JVsJ+M2qU=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: attv9ecZrF5kZRZeQ+lyJkiW+JXwe94b0M/AiRCsF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Jul 23 02:04:27 2026 GMT Not After : Jul 30 02:04:27 2026 GMT Subject: CN=6a6176ac-5d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:6d:0a:ed:05:73:60:17:0b:b5:04:47:64: 1f:21:24:91:89:13:2b:a6:07:ce:e8:0d:c3:eb:7f: 2d:bc:1c:cc:b3:bc:1e:3c:90:ef:1b:17:60:aa:02: 0f:17:87:9f:b8:2e:0f:32:8e:01:45:81:c5:e4:a8: 8e:fb:cd:ff:f4:43:19:49:a0:66:7f:1b:95:46:46: 32:f4:a8:7e:79:ee:64:a9:73:0b:3d:a5:9f:0d:49: 56:96:6c:37:d8:0b:4a:3e:a1:e5:17:86:fb:eb:08: ad:4b:70:d7:79:cc:eb:ad:4c:b5:fe:fb:97:8f:4b: bf:27:6d:46:6d:9a:fb:b9:f2:7e:f4:f0:19:a1:f7: c5:cc:c2:06:71:24:b3:78:cb:73:24:c0:a4:a0:19: 83:2e:d4:93:a3:1c:21:c1:22:7e:1a:ea:f0:ed:87: e1:31:ae:33:58:d5:8a:9c:08:bd:ed:75:bc:39:92: 4e:66:ed:7f:1d:c7:46:03:89:f2:63:76:fe:c8:11: 43:78:23:0f:e0:77:22:13:eb:28:a4:54:5b:b3:09: 6a:6d:63:a8:d7:91:8f:d4:78:5d:72:f3:6d:71:c5: 24:46:9c:1e:71:ea:5b:2d:26:d1:5c:78:ba:ba:b2: 39:2f:1c:8a:f0:eb:57:4c:9c:24:19:1c:3a:86:44: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2F:E7:FD:43:B8:BA:52:1F:39:50:04:20:32:29:80:50:EA:BE:56 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6a:75:7d:56:4a:e0:54:12:31:4d:ea:bd:14:cc:37:c6:99: 7d:fb:21:88:99:ac:f7:45:9d:49:42:51:eb:fc:01:7e:b0:7c: 68:19:63:ed:99:20:52:5c:33:a3:9f:b8:31:fb:fd:b9:6d:ba: 4e:87:29:c5:54:1f:cd:11:c9:8d:cb:eb:6f:3a:6e:64:bc:79: 73:36:26:b7:00:5a:f5:e3:b4:f3:90:e9:61:e0:a0:43:5a:6b: a4:ac:af:22:e6:83:d5:f2:a5:49:5e:e2:7a:b4:86:13:e4:a3: 5b:a0:bf:28:d2:df:12:14:af:89:9c:37:ec:35:82:58:a8:ec: 57:e9:2b:14:94:29:a9:ec:2a:d3:63:53:90:b9:9a:65:14:4f: fd:b5:39:f3:11:07:58:46:f5:32:3d:0b:48:b6:1b:5a:37:ce: 98:2c:5d:96:de:67:1e:1e:10:ce:5b:5d:58:69:36:b1:8b:9b: fd:e5:e7:fe:06:65:01:51:2c:e7:81:2c:8d:a3:9a:08:50:1b: 8a:36:99:00:99:ef:74:38:fb:b7:8f:e5:b6:49:e8:13:e4:b7: c3:be:b6:0c:bb:d4:54:ca:04:45:4d:47:e5:c0:41:c2:8f:fd: 52:c5:61:e7:06:77:f3:82:11:b3:10:98:9c:5f:51:7e:f4:61: 09:90:bd:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYwNzIzMDIwNDI3WhcNMjYwNzMwMDIwNDI3WjAYMRYwFAYD VQQDEw02YTYxNzZhYy01ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8ptCu0Fc2AXC7UER2QfISSRiRMrpgfO6A3D638tvBzMs7wePJDvGxdgqgIP F4efuC4PMo4BRYHF5KiO+83/9EMZSaBmfxuVRkYy9Kh+ee5kqXMLPaWfDUlWlmw3 2AtKPqHlF4b76witS3DXeczrrUy1/vuXj0u/J21GbZr7ufJ+9PAZoffFzMIGcSSz eMtzJMCkoBmDLtSToxwhwSJ+Gurw7YfhMa4zWNWKnAi97XW8OZJOZu1/HcdGA4ny Y3b+yBFDeCMP4HciE+sopFRbswlqbWOo15GP1HhdcvNtccUkRpwecepbLSbRXHi6 urI5LxyK8OtXTJwkGRw6hkSsVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8v5/1D uLpSHzlQBCAyKYBQ6r5WMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqGp1fVZK4FQSMU3qvRTMN8aZffshiJms90WdSUJR6/wBfrB8aBlj7ZkgUlwz o5+4Mfv9uW26TocpxVQfzRHJjcvrbzpuZLx5czYmtwBa9eO085DpYeCgQ1prpKyv IuaD1fKlSV7ierSGE+SjW6C/KNLfEhSviZw37DWCWKjsV+krFJQpqewq02NTkLma ZRRP/bU58xEHWEb1Mj0LSLYbWjfOmCxdlt5nHh4QzltdWGk2sYub/eXn/gZlAVEs 54EsjaOaCFAbijaZAJnvdDj7t4/ltknoE+S3w762DLvUVMoERU1H5cBBwo/9UsVh 5wZ384IRsxCYnF9RfvRhCZC9Ew== -----END CERTIFICATE-----Generated at Fri Jul 24 15:49:20 2026 by rpki-client