$ rpki-client -vvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft File: NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft (raw, json) Hash identifier: /GA8MGi8EAkewl6g/eUyqeOf9wqW4ver3irPVSTCgV0= Subject key identifier: D9:53:0C:6D:0C:11:99:3D:C0:87:C4:B5:62:53:90:D6:64:30:B8:E4 Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 Certificate issuer: /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft Manifest number: 01C4 Signing time: Thu 23 Jul 2026 05:19:18 +0000 Manifest this update: Thu 23 Jul 2026 05:19:18 +0000 Manifest next update: Thu 30 Jul 2026 05:19:18 +0000 Files and hashes: 1: NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl (hash: kUwUqQDne1bUz8cy661bhIh02zk8/XfO2/EqWAfiGIM=) 2: 8109B4CA9DF211F0B1ED220FC4F9AE02.roa (hash: 3F15rH6YOfm7yUgvAU7B83xmF5fOsfIgjewKISbkfSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166AFF, serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Validity Not Before: Jul 23 05:19:18 2026 GMT Not After : Jul 30 05:19:18 2026 GMT Subject: CN=6a61a456-b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:61:2a:bf:51:34:58:44:eb:ac:da:40:52: fa:10:8f:e6:e7:97:80:48:31:e1:d5:cd:2a:c8:61: 91:be:ab:29:90:cc:69:48:e9:b5:3c:69:f5:ab:8d: ef:da:d4:25:f8:1b:23:1f:73:e8:d6:75:08:8c:6a: ee:8e:73:27:ef:94:5a:55:cf:21:d3:fe:cd:8d:72: e3:49:f8:9a:13:f6:a1:49:c8:8f:aa:93:61:49:79: 7f:9e:7d:04:45:be:7b:40:72:38:4d:5f:41:3f:9e: 9a:5c:34:e0:c1:8b:40:8d:a7:49:ed:84:1a:71:2c: 72:6e:bd:36:60:d1:44:3d:b5:bd:de:ef:97:6c:4c: a4:29:c7:0d:b9:e2:67:a5:c2:f6:67:59:dc:57:cc: d7:58:ef:50:34:52:9b:da:25:80:68:e2:22:77:9d: 1a:f8:a1:52:5e:13:5e:db:4b:ab:61:d4:46:a9:f4: 58:6e:45:24:20:2c:64:4e:69:97:a6:6a:2b:06:9c: 15:63:4d:0d:d6:dd:85:5e:74:08:d4:13:ec:05:39: 27:1e:5a:7c:b0:3e:d1:48:30:8d:9b:d4:07:33:1f: 5b:7c:7e:9e:9e:ed:ec:43:20:4a:34:ea:5c:47:e7: 45:a8:8b:5a:31:78:df:a0:a4:28:b6:02:aa:00:bf: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:0C:6D:0C:11:99:3D:C0:87:C4:B5:62:53:90:D6:64:30:B8:E4 X509v3 Authority Key Identifier: keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:97:2e:1a:9c:71:a4:2a:b0:74:fd:1f:cb:48:c8:a0:c1: 63:32:7e:00:e1:81:8a:9a:0c:cb:1e:21:0f:56:a5:bb:67:ce: 32:9e:96:0b:52:11:2e:24:13:60:8f:b9:16:14:b2:0a:05:0f: 22:5d:31:07:3c:81:9e:37:36:58:bb:83:ff:de:9d:22:3c:38: f1:6d:28:06:3e:60:4a:42:28:69:03:4b:2c:63:7b:d3:04:eb: c7:61:52:c0:9c:68:b0:ab:e3:6d:ed:29:e0:75:6c:db:ae:c1: 08:78:de:8f:dc:e2:24:73:b2:57:b4:cc:a2:10:a9:55:be:e8: 4d:52:62:65:93:9a:20:6f:d9:92:e1:83:3d:89:02:44:30:02: 42:41:cd:a7:f2:04:cc:9e:76:89:8a:01:ae:44:2d:f0:7c:ce: 30:27:0b:62:5f:75:09:7e:d7:13:ae:68:38:7e:42:58:9e:e5: 97:28:12:4d:77:6c:53:7c:75:89:36:ba:30:fe:54:ae:83:5c: 60:37:02:67:23:a2:2b:23:f8:52:87:24:ab:ec:94:42:c1:60: 68:f2:ff:70:83:dd:1e:d6:0d:75:31:db:ec:87:0c:5e:37:10: 9f:25:7a:b7:19:0b:57:e0:4d:f8:d7:d6:c2:a4:e8:b1:c0:48: 52:e7:99:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZBRkYxMTAvBgNVBAUTKDM1N0ExNzlDREQwQUY5QTNGQjAzRTE3N0Q2QTQzRkI4 QTU3NzU0RTAwHhcNMjYwNzIzMDUxOTE4WhcNMjYwNzMwMDUxOTE4WjAYMRYwFAYD VQQDEw02YTYxYTQ1Ni1iOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VlhKr9RNFhE66zaQFL6EI/m55eASDHh1c0qyGGRvqspkMxpSOm1PGn1q43v 2tQl+BsjH3Po1nUIjGrujnMn75RaVc8h0/7NjXLjSfiaE/ahSciPqpNhSXl/nn0E Rb57QHI4TV9BP56aXDTgwYtAjadJ7YQacSxybr02YNFEPbW93u+XbEykKccNueJn pcL2Z1ncV8zXWO9QNFKb2iWAaOIid50a+KFSXhNe20urYdRGqfRYbkUkICxkTmmX pmorBpwVY00N1t2FXnQI1BPsBTknHlp8sD7RSDCNm9QHMx9bfH6enu3sQyBKNOpc R+dFqItaMXjfoKQotgKqAL+fVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlTDG0M EZk9wIfEtWJTkNZkMLjkMB8GA1UdIwQYMBaAFDV6F5zdCvmj+wPhd9akP7ild1Tg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkFGRi80MENEMUI1NEU1 MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1hUDdBLUYzMXFRX3VLVjNW T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkFGRi80MENEMUI1NEU1MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1h UDdBLUYzMXFRX3VLVjNWT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANK6XLhqccaQqsHT9H8tIyKDBYzJ+AOGBipoMyx4hD1alu2fOMp6WC1IRLiQT YI+5FhSyCgUPIl0xBzyBnjc2WLuD/96dIjw48W0oBj5gSkIoaQNLLGN70wTrx2FS wJxosKvjbe0p4HVs267BCHjej9ziJHOyV7TMohCpVb7oTVJiZZOaIG/ZkuGDPYkC RDACQkHNp/IEzJ52iYoBrkQt8HzOMCcLYl91CX7XE65oOH5CWJ7llygSTXdsU3x1 iTa6MP5UroNcYDcCZyOiKyP4Uockq+yUQsFgaPL/cIPdHtYNdTHb7IcMXjcQnyV6 txkLV+BN+NfWwqToscBIUueZtw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:15:56 2026 by rpki-client