$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: mQt+m9h5exjFyoBYfs+MSSN/22aSMcGtT/7GuHRRArI= Subject key identifier: E1:87:CD:6E:23:D6:DA:BC:43:15:AC:C6:F3:DD:AA:DA:D3:F0:4B:2D Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 0137 Signing time: Thu 23 Jul 2026 07:14:51 +0000 Manifest this update: Thu 23 Jul 2026 07:14:51 +0000 Manifest next update: Thu 30 Jul 2026 07:14:51 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: Za1PoOTrUyRGQUBMxlcs2r9/FgsyxR0Vmg00GI4SgUQ=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jul 23 07:14:51 2026 GMT Not After : Jul 30 07:14:51 2026 GMT Subject: CN=6a61bf6b-27ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:cb:de:b8:d5:04:6a:00:d0:a5:15:4e:03: b2:77:47:3f:c5:bf:b9:e0:8c:50:a5:3f:40:25:50: c7:96:15:9f:c5:cd:72:16:cd:bb:30:ab:bb:bd:fa: 49:81:71:e6:18:75:5e:6d:d2:ef:1d:0d:56:d6:34: b0:3f:e3:93:91:ac:3f:77:c7:7a:cb:61:b6:94:70: 46:8f:45:1a:66:19:30:e0:5d:30:9e:c3:c9:10:e0: f1:0c:13:23:6e:af:e9:6c:df:aa:bf:d4:98:a6:bb: f4:37:56:3c:b0:ab:70:c9:ad:b7:2a:ad:53:1e:af: b5:26:d8:9d:26:51:aa:f4:0a:91:ff:4c:26:79:74: 45:a3:9c:a7:51:51:63:d5:9b:8a:9a:d2:db:c5:4a: 49:da:85:f4:cc:b3:f2:b5:04:fd:b3:9f:a1:e1:26: 78:ca:6a:97:d0:8d:9d:8a:c8:15:ab:cf:4c:6d:a2: 22:1e:fe:54:7a:33:b8:eb:bc:7e:29:da:dd:84:1a: a7:57:d9:34:05:98:76:d4:30:48:91:1c:8c:01:b7: dd:fe:8c:90:5c:01:35:73:78:fa:9b:dc:95:7f:25: 8e:09:62:87:39:53:b4:88:3c:82:51:e3:fc:f3:a9: b2:29:8f:5a:91:43:87:00:01:39:77:29:6a:8b:10: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:CD:6E:23:D6:DA:BC:43:15:AC:C6:F3:DD:AA:DA:D3:F0:4B:2D X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:29:c0:55:07:95:4f:43:e5:3e:c5:c3:a5:ac:9a:e2:ef:e2: d4:01:ec:c3:77:d2:8d:51:33:a3:d0:e3:eb:04:0f:e9:08:7d: a1:51:d4:1b:00:c2:09:a5:58:43:96:f4:0f:11:f3:88:2d:cf: 35:43:c0:ca:1c:e1:48:08:93:44:ec:29:95:57:6c:70:ff:ce: 03:55:c1:d2:91:a4:ef:3c:01:02:b6:04:9e:96:93:02:a7:b4: 69:91:52:d2:b8:21:65:af:b0:d9:0a:90:c0:41:ac:dd:ab:d6: 18:41:4a:03:ee:f0:3d:ad:aa:b3:6c:ac:1d:02:11:9b:2d:a2: ce:c3:73:e5:35:71:1a:9f:34:2c:90:e0:b3:29:51:14:43:92: 3f:c1:97:6a:5a:5e:f7:7c:ef:d7:f0:4b:95:f0:24:9e:11:d9: 07:9e:38:74:ec:d7:65:96:ee:8a:4f:9e:2c:cb:64:7f:f5:5f: 91:1a:76:c3:23:a4:a4:15:d1:5c:21:32:ef:48:04:b8:cc:51: 93:1b:73:06:65:d6:29:71:08:c7:1e:64:cc:64:ae:be:60:d8: f5:a7:f0:f9:3e:c5:c1:04:e1:84:77:69:06:2f:e5:75:85:58: 7e:2a:f8:82:e7:11:75:66:6f:22:cb:ea:a6:a9:24:bf:ba:57: f3:73:ef:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjYwNzIzMDcxNDUxWhcNMjYwNzMwMDcxNDUxWjAYMRYwFAYD VQQDEw02YTYxYmY2Yi0yN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvbL3rjVBGoA0KUVTgOyd0c/xb+54IxQpT9AJVDHlhWfxc1yFs27MKu7vfpJ gXHmGHVebdLvHQ1W1jSwP+OTkaw/d8d6y2G2lHBGj0UaZhkw4F0wnsPJEODxDBMj bq/pbN+qv9SYprv0N1Y8sKtwya23Kq1THq+1JtidJlGq9AqR/0wmeXRFo5ynUVFj 1ZuKmtLbxUpJ2oX0zLPytQT9s5+h4SZ4ymqX0I2disgVq89MbaIiHv5UejO467x+ KdrdhBqnV9k0BZh21DBIkRyMAbfd/oyQXAE1c3j6m9yVfyWOCWKHOVO0iDyCUeP8 86myKY9akUOHAAE5dylqixAnawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGHzW4j 1tq8QxWsxvPdqtrT8EstMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACCnAVQeVT0PlPsXDpaya4u/i1AHsw3fSjVEzo9Dj6wQP6Qh9oVHUGwDCCaVY Q5b0DxHziC3PNUPAyhzhSAiTROwplVdscP/OA1XB0pGk7zwBArYEnpaTAqe0aZFS 0rghZa+w2QqQwEGs3avWGEFKA+7wPa2qs2ysHQIRmy2izsNz5TVxGp80LJDgsylR FEOSP8GXalpe93zv1/BLlfAknhHZB544dOzXZZbuik+eLMtkf/VfkRp2wyOkpBXR XCEy70gEuMxRkxtzBmXWKXEIxx5kzGSuvmDY9afw+T7FwQThhHdpBi/ldYVYfir4 gucRdWZvIsvqpqkkv7pX83PvRQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:03:04 2026 by rpki-client