$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: rltEzj7r0dqUsi57Mt4jabKQaij4fs1OI8DUz81IkMY= Subject key identifier: 31:16:64:DC:49:99:E6:B6:57:B7:A9:C6:04:0F:F7:F2:6D:9E:F7:6A Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 026E Signing time: Wed 22 Jul 2026 17:07:01 +0000 Manifest this update: Wed 22 Jul 2026 17:07:00 +0000 Manifest next update: Wed 29 Jul 2026 17:07:00 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: JBW51z1KhOR+jDx7r6IXwtAQjGSOUlJf8VGFAoFuqbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Jul 22 17:07:00 2026 GMT Not After : Jul 29 17:07:00 2026 GMT Subject: CN=6a60f8b5-7bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:bf:45:0c:ad:cd:9a:55:65:06:2f:18:34: d3:08:1b:78:29:e4:78:ae:69:93:ae:34:cd:87:ce: 1e:53:c8:0d:b2:44:af:01:58:6c:a6:90:31:39:ce: d2:a2:49:ed:4f:70:4d:da:ab:c5:1e:c4:11:03:af: c6:c4:b7:ca:a2:6e:92:44:8c:3a:e4:f0:4a:39:af: c5:b2:a1:20:47:f5:40:90:36:30:ef:aa:85:03:b3: 01:e2:75:29:c5:11:b8:60:9d:c1:92:34:cc:7c:3f: 29:a2:ae:c8:05:fb:4d:83:06:ff:f8:98:4c:81:65: 59:43:29:1d:2e:72:dd:3c:a9:6a:16:bd:88:30:66: 03:19:33:d7:0d:ea:6f:23:01:07:a8:b9:83:a3:72: cf:a9:fb:52:1f:6b:2d:11:4b:e4:99:0a:1c:a1:ae: 40:8f:4e:aa:51:1a:e4:3f:32:52:c8:f9:b8:18:03: 1d:78:c8:14:f6:cd:ef:bf:5f:33:4e:d6:23:35:81: 5b:cd:19:47:28:d6:8e:bc:f6:8a:bf:56:6d:0b:d5: e1:74:e1:01:b6:75:be:5b:34:c7:e1:9d:5c:ab:11: c3:5e:7d:18:6d:a4:3a:05:ce:bb:03:c5:b1:ed:1b: 7c:b8:44:9b:5d:f7:b5:4b:6c:c0:9d:0f:2d:28:fb: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:16:64:DC:49:99:E6:B6:57:B7:A9:C6:04:0F:F7:F2:6D:9E:F7:6A X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b1:b4:9c:1e:16:f7:ae:89:4b:0b:60:5c:62:b0:5f:84:f9: a3:b2:d0:7d:4a:00:47:27:5f:aa:7d:f8:f5:1a:31:01:b5:dd: 24:c7:50:d4:01:87:71:be:ed:e3:e8:a1:4e:d5:c1:10:0f:f6: 2f:7c:9e:b2:a4:9d:2d:cb:7d:08:7a:5d:1c:8a:96:8a:d3:8a: 4b:e3:32:82:ae:64:42:85:61:9c:ee:2d:5a:cd:27:80:37:96: ca:28:7a:b2:cb:af:29:cf:67:aa:ba:3f:54:91:df:2e:91:51: 6a:45:59:2d:51:ca:67:69:6c:ef:d4:e2:bc:47:18:19:6f:dc: a2:7d:9d:c2:e6:03:c5:33:32:d0:94:0c:6a:76:05:56:da:60: 22:4d:ff:d7:38:6b:22:3a:ba:47:e0:42:98:29:7a:65:30:68: d5:30:9a:41:2a:dd:fb:76:be:3e:2d:3c:31:a8:4a:1d:b0:0d: 38:28:86:b7:0f:ca:5c:9e:4e:ab:7b:19:f4:72:2f:53:21:2b: 85:5b:2f:4e:3f:5b:96:f1:bd:48:14:aa:1b:14:c9:54:9c:d9: 03:1a:78:4c:1a:72:30:c7:e4:a3:ae:5c:c6:c7:3a:2d:ba:e4: f5:a6:a8:20:12:57:9a:70:96:48:90:3e:a6:cf:85:8e:9b:08: 63:0e:f5:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjYwNzIyMTcwNzAwWhcNMjYwNzI5MTcwNzAwWjAYMRYwFAYD VQQDEw02YTYwZjhiNS03YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOq/RQytzZpVZQYvGDTTCBt4KeR4rmmTrjTNh84eU8gNskSvAVhsppAxOc7S okntT3BN2qvFHsQRA6/GxLfKom6SRIw65PBKOa/FsqEgR/VAkDYw76qFA7MB4nUp xRG4YJ3BkjTMfD8poq7IBftNgwb/+JhMgWVZQykdLnLdPKlqFr2IMGYDGTPXDepv IwEHqLmDo3LPqftSH2stEUvkmQocoa5Aj06qURrkPzJSyPm4GAMdeMgU9s3vv18z TtYjNYFbzRlHKNaOvPaKv1ZtC9XhdOEBtnW+WzTH4Z1cqxHDXn0YbaQ6Bc67A8Wx 7Rt8uESbXfe1S2zAnQ8tKPt8dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEWZNxJ mea2V7epxgQP9/JtnvdqMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLG0nB4W966JSwtgXGKwX4T5o7LQfUoARydfqn349RoxAbXdJMdQ1AGHcb7t 4+ihTtXBEA/2L3yesqSdLct9CHpdHIqWitOKS+Mygq5kQoVhnO4tWs0ngDeWyih6 ssuvKc9nqro/VJHfLpFRakVZLVHKZ2ls79TivEcYGW/con2dwuYDxTMy0JQManYF VtpgIk3/1zhrIjq6R+BCmCl6ZTBo1TCaQSrd+3a+Pi08MahKHbANOCiGtw/KXJ5O q3sZ9HIvUyErhVsvTj9blvG9SBSqGxTJVJzZAxp4TBpyMMfko65cxsc6Lbrk9aao IBJXmnCWSJA+ps+FjpsIYw71Lg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:26 2026 by rpki-client