$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: OvIs1JNq//2kbBngCw9mHBorP14eGQSraxOvxa9hcqs= Subject key identifier: 7A:BA:27:F3:AD:66:EB:F6:B1:54:E3:F5:67:BD:2C:F4:74:5A:8F:EC Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2B29 Signing time: Wed 22 Jul 2026 15:37:18 +0000 Manifest this update: Wed 22 Jul 2026 15:37:18 +0000 Manifest next update: Wed 29 Jul 2026 15:37:18 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 096K2etHA9areS9ZfS0LJIsTFJW1Dsi/nBqchSzoOxA=) 2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) 3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11117 (0x2b6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Jul 22 15:37:18 2026 GMT Not After : Jul 29 15:37:18 2026 GMT Subject: CN=6a60e3ae-c6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:49:9e:1e:a8:97:6f:eb:8e:49:6d:e5:d0: ef:32:16:6d:33:21:de:8d:61:e0:c2:1d:94:d1:2c: 57:21:04:28:91:5c:50:de:f4:85:e8:54:ce:5d:27: d6:70:1c:08:5e:ed:7e:80:5c:5b:48:0c:58:c0:75: d4:48:11:18:af:2e:1d:01:dd:66:1e:3e:4d:e1:e5: e0:5c:fc:34:8b:1d:e1:45:56:99:10:aa:41:62:53: 8b:7b:8e:de:9b:8f:c8:dd:d7:10:1a:3f:6b:2c:59: cd:62:e9:24:4f:11:8a:f5:20:93:37:97:be:f7:59: d6:fd:fd:f1:a5:71:b7:44:36:be:df:5e:f8:1b:b8: fe:ad:c5:7d:33:03:03:70:22:79:28:07:c8:b4:1d: ba:b8:a5:2d:2d:4c:fa:e4:3f:79:8d:fa:4c:d2:14: 6a:0e:4a:d5:4c:e5:99:6a:e2:b3:6a:f5:29:51:8d: e7:07:c6:12:c7:8d:c6:1a:5f:bd:f9:ed:36:f8:33: 10:dd:4f:db:36:11:c3:3f:aa:0e:b7:a9:94:da:8e: d5:74:26:1f:98:26:60:72:01:49:63:50:a3:c9:ab: 6c:bf:44:48:96:3b:9a:28:2f:98:f2:fc:e7:92:7c: 02:21:c6:3f:b1:ed:7a:e8:a0:03:63:69:4c:2f:7c: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:27:F3:AD:66:EB:F6:B1:54:E3:F5:67:BD:2C:F4:74:5A:8F:EC X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:82:c6:7e:17:c2:40:4a:6f:db:bf:c5:95:2c:cb:92:a5:95: 9b:d6:75:73:70:0c:c8:0f:7b:be:29:62:47:51:a9:78:ba:29: 2c:af:e8:dd:ef:26:3b:30:a6:2a:a0:72:f8:9e:6e:d1:f6:e8: cd:84:37:a3:b1:55:62:58:0b:78:46:71:04:a2:34:07:61:16: 68:01:16:ca:29:d7:dc:0f:c4:ec:30:03:a3:bd:50:50:e2:cd: 7d:11:6b:f4:da:f7:27:f9:e8:28:63:e7:ef:7c:b7:ad:57:83: bd:24:d7:59:77:67:27:d3:af:7d:23:78:f6:41:79:a6:85:d2: 14:02:36:a1:a8:af:da:73:41:6f:6d:8c:f6:72:bb:d8:cc:8d: 59:e9:15:91:cc:19:52:a9:1d:47:b4:72:d0:7b:10:b5:2b:4c: 59:5b:ee:2b:62:5b:0b:d1:fa:e2:1c:0d:a9:84:b9:5d:2e:f6: 82:10:b1:b5:50:36:ee:8b:87:5f:28:32:65:68:0f:d1:44:3a: 39:5e:79:bc:bd:bd:2a:fe:df:f3:14:0f:90:bc:b8:22:fe:60: 26:5f:f3:ff:88:e9:ba:c3:c7:1a:2b:78:09:b9:87:f8:a0:07: f6:26:06:6d:a3:7c:10:0f:ff:64:ae:80:70:ee:0e:a4:4b:6e: 15:5a:34:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwNzIyMTUzNzE4WhcNMjYwNzI5MTUzNzE4WjAYMRYwFAYD VQQDEw02YTYwZTNhZS1jNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo9Jnh6ol2/rjklt5dDvMhZtMyHejWHgwh2U0SxXIQQokVxQ3vSF6FTOXSfW cBwIXu1+gFxbSAxYwHXUSBEYry4dAd1mHj5N4eXgXPw0ix3hRVaZEKpBYlOLe47e m4/I3dcQGj9rLFnNYukkTxGK9SCTN5e+91nW/f3xpXG3RDa+3174G7j+rcV9MwMD cCJ5KAfItB26uKUtLUz65D95jfpM0hRqDkrVTOWZauKzavUpUY3nB8YSx43GGl+9 +e02+DMQ3U/bNhHDP6oOt6mU2o7VdCYfmCZgcgFJY1Cjyatsv0RIljuaKC+Y8vzn knwCIcY/se166KADY2lML3yF4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHq6J/Ot Zuv2sVTj9We9LPR0Wo/sMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbYLGfhfCQEpv27/FlSzLkqWVm9Z1c3AMyA97viliR1GpeLopLK/o3e8mOzCm KqBy+J5u0fbozYQ3o7FVYlgLeEZxBKI0B2EWaAEWyinX3A/E7DADo71QUOLNfRFr 9Nr3J/noKGPn73y3rVeDvSTXWXdnJ9OvfSN49kF5poXSFAI2oaiv2nNBb22M9nK7 2MyNWekVkcwZUqkdR7Ry0HsQtStMWVvuK2JbC9H64hwNqYS5XS72ghCxtVA27ouH XygyZWgP0UQ6OV55vL29Kv7f8xQPkLy4Iv5gJl/z/4jpusPHGit4CbmH+KAH9iYG baN8EA//ZK6AcO4OpEtuFVo06Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:31:13 2026 by rpki-client