$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: FxFNrULPoolxhOgeqn/LR7n3FXyz0ksZ5gFb7dWDNjE= Subject key identifier: B6:25:37:B7:B4:3F:A1:F1:E4:77:A6:FA:7B:4B:7E:2A:99:5C:D0:1D Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 086D Signing time: Wed 22 Jul 2026 21:25:46 +0000 Manifest this update: Wed 22 Jul 2026 21:25:45 +0000 Manifest next update: Wed 29 Jul 2026 21:25:45 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: Vct6vc7jzQI7kK8KwFrv36liD0k7vKyOlFhcznPmDO4=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Jul 22 21:25:45 2026 GMT Not After : Jul 29 21:25:45 2026 GMT Subject: CN=6a613559-e1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:3c:2e:00:34:5f:66:04:d7:08:0f:2b:28: 46:08:b1:c5:b1:ed:a0:7d:f7:d9:37:d6:30:0c:ac: 15:8d:bb:25:9c:20:bb:28:bd:e4:7f:0c:20:86:b7: 04:84:45:e9:ac:3a:49:4f:42:3a:9b:6e:fa:ae:65: 67:39:e8:cf:0b:2b:b2:e4:74:93:fb:58:c9:bb:10: c4:ba:5b:8d:c3:14:61:7f:dc:e7:f5:f9:a5:3c:14: d7:c1:89:f5:01:58:e0:61:03:78:0a:27:36:eb:b8: 99:6b:ac:95:c0:6f:57:bf:49:05:8b:65:f1:b5:2b: 6e:08:18:04:88:cd:91:85:19:96:16:dc:cb:bf:15: 1c:ac:45:a5:38:62:dd:c3:32:f7:0b:4e:ff:bb:8d: 01:3f:67:e8:40:a7:d1:3a:0c:8c:7e:b2:2a:47:93: 4b:c8:2c:0b:36:90:ac:89:2b:8d:ba:86:18:c5:d9: 38:ee:c8:99:89:82:64:64:7b:b4:53:fa:49:43:67: 24:59:2e:f8:ce:2c:b8:d8:df:b6:80:b5:57:86:37: 50:54:55:82:46:72:d8:73:c4:23:fd:1c:f3:cb:e2: 56:54:79:9c:32:9a:48:73:2b:25:ff:ec:01:6a:65: 65:a4:7e:93:c3:9e:eb:e1:7a:e2:20:ef:f0:29:71: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:25:37:B7:B4:3F:A1:F1:E4:77:A6:FA:7B:4B:7E:2A:99:5C:D0:1D X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:2c:de:6d:6d:27:01:e0:a1:ed:2a:2b:71:61:c7:a2:59: 0d:1e:bf:6b:28:35:80:aa:3c:0c:c0:3a:26:8d:22:23:df:df: 12:7e:3f:08:fa:9c:79:81:e3:b8:78:6e:e7:37:cc:ac:59:a6: e7:16:53:63:7d:41:46:a5:0d:35:b0:39:10:a7:9c:12:41:d6: fe:fd:bc:97:d9:c6:93:f9:57:a4:76:eb:c5:1c:f4:de:58:3a: cf:f5:c2:f3:10:df:6c:47:70:45:6f:6a:2f:35:55:f1:75:6f: 5b:84:3d:bd:b6:50:3d:3e:5c:50:02:de:d3:4e:0b:3e:12:47: f6:57:c2:61:66:b6:fa:ee:c2:ee:2b:9a:ea:bc:4e:08:2c:c1: aa:46:d3:18:5e:6c:53:43:cd:9b:5b:39:85:16:6f:09:25:4c: cd:83:65:20:48:c5:f0:b1:0d:27:e1:46:30:b4:9b:d1:32:b9: 96:88:9c:ae:41:64:01:09:90:65:7b:cd:23:39:82:74:aa:39: 34:3d:48:62:4c:ce:9b:03:0b:20:4d:7b:53:d6:bb:2f:40:70: ec:26:f6:0d:7e:08:3d:3e:33:b7:11:c0:19:cb:08:f7:d3:a1: 3a:30:28:5d:b4:4f:9f:41:0f:2c:19:ca:5c:49:04:a7:bb:1b: f8:89:46:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjYwNzIyMjEyNTQ1WhcNMjYwNzI5MjEyNTQ1WjAYMRYwFAYD VQQDEw02YTYxMzU1OS1lMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHs8LgA0X2YE1wgPKyhGCLHFse2gfffZN9YwDKwVjbslnCC7KL3kfwwghrcE hEXprDpJT0I6m276rmVnOejPCyuy5HST+1jJuxDEuluNwxRhf9zn9fmlPBTXwYn1 AVjgYQN4Cic267iZa6yVwG9Xv0kFi2XxtStuCBgEiM2RhRmWFtzLvxUcrEWlOGLd wzL3C07/u40BP2foQKfROgyMfrIqR5NLyCwLNpCsiSuNuoYYxdk47siZiYJkZHu0 U/pJQ2ckWS74ziy42N+2gLVXhjdQVFWCRnLYc8Qj/Rzzy+JWVHmcMppIcysl/+wB amVlpH6Tw57r4XriIO/wKXEcywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYlN7e0 P6Hx5Hem+ntLfiqZXNAdMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM1Qs3m1tJwHgoe0qK3Fhx6JZDR6/ayg1gKo8DMA6Jo0iI9/fEn4/CPqceYHj uHhu5zfMrFmm5xZTY31BRqUNNbA5EKecEkHW/v28l9nGk/lXpHbrxRz03lg6z/XC 8xDfbEdwRW9qLzVV8XVvW4Q9vbZQPT5cUALe004LPhJH9lfCYWa2+u7C7iua6rxO CCzBqkbTGF5sU0PNm1s5hRZvCSVMzYNlIEjF8LENJ+FGMLSb0TK5loicrkFkAQmQ ZXvNIzmCdKo5ND1IYkzOmwMLIE17U9a7L0Bw7Cb2DX4IPT4ztxHAGcsI99OhOjAo XbRPn0EPLBnKXEkEp7sb+IlGKw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:33:29 2026 by rpki-client