$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: /E3zFXzSRCcQz6niZWpUkz+Ownjd4sDEtWy4ne1tQT8= Subject key identifier: 92:FA:24:02:00:2B:FB:60:A4:16:CF:E0:E0:23:1B:9B:41:2A:30:23 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 038B Signing time: Thu 23 Jul 2026 01:40:59 +0000 Manifest this update: Thu 23 Jul 2026 01:40:59 +0000 Manifest next update: Thu 30 Jul 2026 01:40:59 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: NLXXtrqNlviZNNNbktheyB8iGWjFh4NySh78eTINPJI=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: QwQkgtoePZKxFtkm4cXFgAdorKM4wsMJHhlleIVTFws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Jul 23 01:40:59 2026 GMT Not After : Jul 30 01:40:59 2026 GMT Subject: CN=6a61712b-088e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:9b:4c:68:5f:f6:84:a1:29:db:7d:eb:af: ff:4d:dc:d8:e5:1e:38:79:4b:22:05:39:ca:ff:57: 5d:6b:4a:58:fb:4c:0b:d7:89:07:6b:5c:d4:e2:3f: 60:5e:a8:2c:df:32:1f:4c:4d:f9:d2:c9:ff:62:28: bd:8a:f2:ad:84:ec:0f:8f:c4:0d:36:a3:0c:35:c5: a7:c0:0e:71:a4:bb:58:fb:75:07:04:4d:a4:6a:ee: e9:ec:1b:25:b5:e2:8d:73:0e:1e:b4:0c:16:6a:f6: 93:28:30:a5:f0:4b:ef:f5:28:4f:77:1d:e0:ed:cc: 0e:0c:03:de:56:fb:79:46:da:25:c1:a4:de:02:d7: 44:de:ed:be:93:2d:3c:72:54:f0:fb:29:16:e4:1f: 21:79:b4:bf:d2:d9:c1:56:70:28:84:32:10:cf:95: 3e:7e:0f:a7:66:08:86:bd:55:26:1c:eb:0d:a0:cb: ea:5b:77:cc:5f:ad:9f:66:50:82:07:d1:b0:02:7d: 19:ed:50:2c:2e:25:03:b4:71:a0:5f:dc:fe:8f:7e: a8:d8:c2:29:c2:7c:4b:c5:61:fa:e4:7f:86:ed:49: 82:bf:c6:39:a3:18:43:81:a0:28:1d:fb:87:7a:ee: 63:9b:37:b6:4d:d3:85:0f:61:01:89:76:42:42:d2: e6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:24:02:00:2B:FB:60:A4:16:CF:E0:E0:23:1B:9B:41:2A:30:23 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0f:d2:84:56:9c:c5:9f:e8:60:9f:1b:e4:06:b9:bc:ee:9d: 20:e8:3d:22:1d:73:36:ad:02:b5:ef:c2:d0:51:0e:79:f6:d0: e5:f1:93:40:21:fc:96:77:89:eb:88:4d:77:f4:a9:15:c1:d6: a1:13:88:12:f0:89:a5:4f:05:a9:33:5b:2d:06:23:a0:bb:3d: fe:14:4b:4d:24:71:c4:38:16:ac:88:8d:4e:38:25:48:8a:05: b3:30:a2:aa:6b:16:f2:f1:80:64:6a:b0:9d:de:50:e0:7f:8f: e8:27:db:9e:69:28:96:a8:ad:1f:08:ba:78:d6:06:ea:da:af: 36:c9:37:01:16:02:50:03:a7:05:68:26:51:c0:a4:26:0c:f3: 7a:4e:be:04:fe:34:12:26:03:9b:a7:c4:90:1b:d8:5f:34:66: ff:92:7b:44:95:8a:3f:db:da:ed:d3:09:b8:f6:8b:7e:67:9b: d3:3a:69:e0:e3:d2:71:4a:9b:8d:10:6d:de:01:33:6a:09:53: 86:c6:8b:58:e9:d5:a3:59:2b:5a:7b:b2:b6:11:44:ac:b8:98: c1:4d:ae:12:1a:fa:63:4a:76:19:73:4f:ea:3d:91:47:7e:4a: f7:62:d8:af:50:02:e8:ba:30:c0:77:21:8d:aa:c9:90:5a:47: c9:6f:e1:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYwNzIzMDE0MDU5WhcNMjYwNzMwMDE0MDU5WjAYMRYwFAYD VQQDEw02YTYxNzEyYi0wODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOGbTGhf9oShKdt966//TdzY5R44eUsiBTnK/1dda0pY+0wL14kHa1zU4j9g Xqgs3zIfTE350sn/Yii9ivKthOwPj8QNNqMMNcWnwA5xpLtY+3UHBE2kau7p7Bsl teKNcw4etAwWavaTKDCl8Evv9ShPdx3g7cwODAPeVvt5RtolwaTeAtdE3u2+ky08 clTw+ykW5B8hebS/0tnBVnAohDIQz5U+fg+nZgiGvVUmHOsNoMvqW3fMX62fZlCC B9GwAn0Z7VAsLiUDtHGgX9z+j36o2MIpwnxLxWH65H+G7UmCv8Y5oxhDgaAoHfuH eu5jmze2TdOFD2EBiXZCQtLm0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJL6JAIA K/tgpBbP4OAjG5tBKjAjMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuA/ShFacxZ/oYJ8b5Aa5vO6dIOg9Ih1zNq0Cte/C0FEOefbQ5fGTQCH8lneJ 64hNd/SpFcHWoROIEvCJpU8FqTNbLQYjoLs9/hRLTSRxxDgWrIiNTjglSIoFszCi qmsW8vGAZGqwnd5Q4H+P6CfbnmkolqitHwi6eNYG6tqvNsk3ARYCUAOnBWgmUcCk Jgzzek6+BP40EiYDm6fEkBvYXzRm/5J7RJWKP9va7dMJuPaLfmeb0zpp4OPScUqb jRBt3gEzaglThsaLWOnVo1krWnuythFErLiYwU2uEhr6Y0p2GXNP6j2RR35K92LY r1AC6LowwHchjarJkFpHyW/hug== -----END CERTIFICATE-----Generated at Thu Jul 23 23:00:25 2026 by rpki-client