$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: OQIj1/I6ijRGvFvIzw1QdFXgeEpOo6bo+WMh8D2dEwA= Subject key identifier: 3F:D2:D1:17:4C:63:32:76:49:DA:C4:BE:AD:6C:D9:C1:30:FC:45:36 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0AD9 Signing time: Wed 22 Jul 2026 19:50:10 +0000 Manifest this update: Wed 22 Jul 2026 19:50:10 +0000 Manifest next update: Wed 29 Jul 2026 19:50:10 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: 8Dc1//vYNE5w4AohcvKsAzpyqgRlrp00HB6VCk20Iig=) 2: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=) 3: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Jul 22 19:50:10 2026 GMT Not After : Jul 29 19:50:10 2026 GMT Subject: CN=6a611ef2-f8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:ef:f8:d3:b1:47:ee:95:ad:93:83:e7:91: 4a:56:a9:f8:dd:0a:68:a3:dc:a6:88:a3:39:dd:2e: 79:36:34:36:f2:64:2b:b6:03:22:96:2d:3a:c5:18: e3:2e:5c:35:ea:ec:3a:b8:de:c2:8a:64:0a:9d:85: f8:83:87:e5:de:a0:36:2c:d8:61:13:12:fd:6a:d2: e0:c2:f2:cb:86:61:54:1e:5b:77:ee:5f:56:dc:68: e9:ad:e4:0e:ec:0f:94:07:2f:d6:d1:6f:13:e8:5d: 2a:cd:dd:fa:1c:ed:a3:2e:b8:88:4f:ec:2b:da:8c: cf:d7:83:4c:3a:2f:a3:de:c7:2c:d0:52:1d:6b:a8: 35:6e:f5:d8:2b:e5:0d:8f:81:41:bf:90:d2:a2:af: 20:d0:b4:53:97:61:66:cb:99:e3:83:04:fe:20:0d: 5d:17:a6:f4:c3:25:14:29:05:3d:e0:ba:2e:68:e6: 2d:59:5f:95:75:e6:4e:e6:a1:a4:93:25:de:4b:03: 15:15:ef:f2:a6:c8:6c:c5:92:ae:43:25:3b:ef:21: 28:2a:36:f7:c9:c8:12:47:08:84:9d:6e:50:63:5d: a9:b7:95:4f:e3:b3:47:b4:cc:09:99:6a:21:c2:2c: 95:f3:41:7d:97:38:49:ba:06:ba:4d:1a:47:05:13: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:D1:17:4C:63:32:76:49:DA:C4:BE:AD:6C:D9:C1:30:FC:45:36 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3f:5d:2c:ce:99:51:e9:8d:b6:0d:31:58:56:1e:90:31:6b: 3e:1d:67:d1:f7:98:2b:f9:aa:07:7a:44:9f:52:b0:fb:21:0f: 41:e5:20:4a:a7:ce:ca:55:0b:2f:70:db:f2:3e:77:73:52:76: d7:d7:ca:6e:b4:4e:4b:67:5a:f1:8d:8d:92:50:a0:ce:fe:c8: 3e:0d:62:1c:46:47:c8:bd:d0:59:28:84:ba:4e:3b:a5:18:9c: 84:84:cf:0e:f1:bf:50:18:c3:79:7a:12:11:b9:f8:13:6b:00: bb:37:4e:24:3c:89:41:c1:dc:d5:7b:6e:c3:2d:a4:5d:1b:82: 95:b5:4c:ab:67:8c:5c:de:95:33:94:56:e1:36:ac:66:97:92: d0:b7:9b:b4:f0:be:f7:ff:d4:a0:ba:ae:3e:f2:85:68:6b:e6: 24:55:76:d0:7a:7e:96:84:86:e0:7e:58:6f:d7:9d:c6:78:2c: 45:41:fb:87:71:da:a4:46:2b:c1:2e:e6:ac:9c:99:69:21:31: 9b:01:f2:b8:70:f1:b9:3c:e1:a4:48:93:ef:76:da:26:38:e5: 2b:ef:25:e4:40:b6:31:c7:30:b0:47:e2:06:7a:83:20:b8:6f: 04:26:b8:ed:0d:d9:5a:6c:c9:bc:12:1f:49:85:65:bb:81:97: 8c:78:ee:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjYwNzIyMTk1MDEwWhcNMjYwNzI5MTk1MDEwWjAYMRYwFAYD VQQDEw02YTYxMWVmMi1mOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lvv+NOxR+6VrZOD55FKVqn43Qpoo9ymiKM53S55NjQ28mQrtgMili06xRjj Llw16uw6uN7CimQKnYX4g4fl3qA2LNhhExL9atLgwvLLhmFUHlt37l9W3GjpreQO 7A+UBy/W0W8T6F0qzd36HO2jLriIT+wr2ozP14NMOi+j3scs0FIda6g1bvXYK+UN j4FBv5DSoq8g0LRTl2Fmy5njgwT+IA1dF6b0wyUUKQU94LouaOYtWV+VdeZO5qGk kyXeSwMVFe/ypshsxZKuQyU77yEoKjb3ycgSRwiEnW5QY12pt5VP47NHtMwJmWoh wiyV80F9lzhJuga6TRpHBRPDiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/S0RdM YzJ2SdrEvq1s2cEw/EU2MB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqT9dLM6ZUemNtg0xWFYekDFrPh1n0feYK/mqB3pEn1Kw+yEPQeUgSqfOylUL L3Db8j53c1J219fKbrROS2da8Y2NklCgzv7IPg1iHEZHyL3QWSiEuk47pRichITP DvG/UBjDeXoSEbn4E2sAuzdOJDyJQcHc1Xtuwy2kXRuClbVMq2eMXN6VM5RW4Tas ZpeS0LebtPC+9//UoLquPvKFaGvmJFV20Hp+loSG4H5Yb9edxngsRUH7h3HapEYr wS7mrJyZaSExmwHyuHDxuTzhpEiT73baJjjlK+8l5EC2MccwsEfiBnqDILhvBCa4 7Q3ZWmzJvBIfSYVlu4GXjHjuwQ== -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:24 2026 by rpki-client