$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: o17mUI/wl91igG8YG4Uxb2f3ZkgD3F+lU0xkB+0zC/E= Subject key identifier: 3B:A4:91:9E:25:38:CE:21:65:AB:77:23:2E:37:D5:FB:B6:A6:C1:B3 Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 0B Signing time: Thu 23 Jul 2026 11:14:26 +0000 Manifest this update: Thu 23 Jul 2026 11:14:26 +0000 Manifest next update: Thu 30 Jul 2026 11:14:26 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: jzXxqTwrn6oprQ1DjjlK3V/iB0bNuUCPQ3oWawxlPRg=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Jul 23 11:14:26 2026 GMT Not After : Jul 30 11:14:26 2026 GMT Subject: CN=6a61f792-878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:94:c6:db:63:8f:ec:81:7a:4a:7c:86:b3: be:e5:65:a5:7c:ae:ff:46:59:97:cc:7e:b0:cf:35: a6:f6:63:b5:96:67:90:2c:74:33:65:34:d5:d6:34: f9:47:c7:97:e9:d7:e1:78:bb:66:43:d7:ca:f9:b7: 48:80:09:4f:71:41:27:6e:a4:42:b2:a1:bd:6f:2f: 90:79:6a:5c:6f:1c:8f:34:a7:01:e5:a3:29:be:32: af:07:3f:d1:1a:00:c4:a7:a4:fb:62:1c:fb:6c:ed: e7:7f:66:4e:c8:de:df:3d:0f:b3:f2:00:d5:c6:bb: ca:dc:3d:06:31:c9:a2:b3:9d:bc:fc:b7:b8:4f:a9: e7:c1:06:07:ad:41:80:43:73:3f:22:67:32:44:cb: 5e:4c:b1:b3:95:ca:a7:34:f6:19:0f:aa:b1:d7:23: 11:76:90:8f:0f:e7:db:e0:2a:03:f5:fe:30:c6:d4: 11:d1:15:6b:03:7f:b2:b7:ef:19:a2:9b:25:0d:8b: cc:9b:49:4e:09:0e:a9:c1:50:06:f4:23:7c:27:51: 4c:9c:5d:38:a0:c9:7c:06:73:ec:7d:ec:10:ed:8a: 80:69:6c:50:bb:78:14:b2:f7:3e:09:09:e0:a2:2d: 1d:b0:83:ee:33:6d:4d:03:43:25:41:a8:3f:ec:0c: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A4:91:9E:25:38:CE:21:65:AB:77:23:2E:37:D5:FB:B6:A6:C1:B3 X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5d:a6:99:2f:a7:53:f8:1a:86:33:1a:df:40:8a:69:40:a8: 9c:be:69:39:2f:75:7a:d2:c4:e4:e6:be:92:f9:48:bd:aa:3d: 27:4f:1a:5c:7f:dc:1e:ca:31:00:86:ce:d3:48:37:c6:e8:6c: 86:a7:08:35:d7:ee:46:42:42:6b:98:a9:c4:7b:43:a8:19:0d: 14:3c:35:06:f1:36:b1:01:58:34:d0:53:3b:d8:3a:77:c4:8a: f0:ac:8a:f1:b1:bc:1a:f2:e7:12:a1:69:1c:d4:e5:51:76:17: 1c:a1:dd:73:19:fa:10:d1:77:13:8f:b1:5d:cf:bd:74:84:90: e8:5d:76:9d:dc:5f:d5:37:fb:fc:f9:b8:6b:f7:ea:09:99:6f: 0d:00:6f:09:23:f0:51:e0:a3:a4:50:78:6f:93:e9:47:90:36: c2:a0:24:3e:60:fb:f0:06:3d:e1:b2:da:dd:bf:96:6d:8a:50: d1:70:ff:46:6f:f6:b2:61:ee:a1:89:51:0a:d7:c9:e5:34:06: 64:27:6d:98:6f:36:85:9f:0a:f6:d8:13:7b:0d:8b:b5:e2:c7: 4f:28:f1:34:86:5f:a2:5a:b4:d1:fc:b5:2f:78:ed:ea:1a:0d: 13:6f:b9:ea:17:e3:65:76:fb:5f:2f:be:8e:0a:f8:d1:89:f1: d4:86:b8:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjA3MjMxMTE0MjZaFw0yNjA3MzAxMTE0MjZaMBgxFjAUBgNV BAMTDTZhNjFmNzkyLTg3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCicZTG22OP7IF6SnyGs77lZaV8rv9GWZfMfrDPNab2Y7WWZ5AsdDNlNNXWNPlH x5fp1+F4u2ZD18r5t0iACU9xQSdupEKyob1vL5B5alxvHI80pwHloym+Mq8HP9Ea AMSnpPtiHPts7ed/Zk7I3t89D7PyANXGu8rcPQYxyaKznbz8t7hPqefBBgetQYBD cz8iZzJEy15MsbOVyqc09hkPqrHXIxF2kI8P59vgKgP1/jDG1BHRFWsDf7K37xmi myUNi8ybSU4JDqnBUAb0I3wnUUycXTigyXwGc+x97BDtioBpbFC7eBSy9z4JCeCi LR2wg+4zbU0DQyVBqD/sDMPVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO6SRniU4 ziFlq3cjLjfV+7amwbMwHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMXaaZL6dT+BqGMxrfQIppQKicvmk5L3V60sTk5r6S+Ui9qj0nTxpcf9weyjEA hs7TSDfG6GyGpwg11+5GQkJrmKnEe0OoGQ0UPDUG8TaxAVg00FM72Dp3xIrwrIrx sbwa8ucSoWkc1OVRdhccod1zGfoQ0XcTj7Fdz710hJDoXXad3F/VN/v8+bhr9+oJ mW8NAG8JI/BR4KOkUHhvk+lHkDbCoCQ+YPvwBj3hstrdv5ZtilDRcP9Gb/ayYe6h iVEK18nlNAZkJ22YbzaFnwr22BN7DYu14sdPKPE0hl+iWrTR/LUveO3qGg0Tb7nq F+NldvtfL76OCvjRifHUhrij -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:45 2026 by rpki-client