$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: +dICHdg0sB4UYErJhg/ZBX7zvEmPkvzaEa5jX2/3t/4= Subject key identifier: B3:D3:F8:7B:B2:12:AF:70:E0:4E:A6:DA:F1:E0:1F:50:83:43:2D:E7 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 0135 Signing time: Thu 23 Jul 2026 07:15:15 +0000 Manifest this update: Thu 23 Jul 2026 07:15:15 +0000 Manifest next update: Thu 30 Jul 2026 07:15:15 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: wy67syouzz/ODX3sZHQF4vFl29yCB4i+l+kvsYpDdT4=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 5VO9AYfUls793WW6aylahYoLQQVtZJJZe9EelPOo2yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Jul 23 07:15:15 2026 GMT Not After : Jul 30 07:15:15 2026 GMT Subject: CN=6a61bf83-95dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:fe:cf:80:82:e4:12:ba:c3:3f:b1:bb:54: 27:2f:04:e2:cd:58:b2:18:47:1f:4f:f9:cb:23:01: 6e:b4:a8:4f:95:c9:ac:34:b9:4b:12:ad:48:5f:e5: de:a6:c8:b2:e7:9a:c9:91:e7:e1:d8:79:72:35:94: 88:4e:68:0c:fe:15:8c:1d:77:9b:76:d0:e5:c5:e5: 3b:5b:37:a3:5a:0c:4a:0f:d8:6f:f9:87:59:70:d7: 64:b8:ec:5f:25:65:3a:72:7a:fa:b1:96:ee:af:49: 95:75:77:9e:bb:63:6b:51:4e:aa:13:c7:77:7f:e2: 3c:25:d7:3c:f1:c8:ec:f5:a5:16:79:94:5e:84:1a: 72:66:34:6a:82:b5:3e:0f:0f:a4:26:18:05:ca:1a: 6a:ff:b8:00:41:e5:88:ba:ba:42:a0:e5:db:4e:ca: 21:6c:01:99:95:9a:ca:5a:7d:a3:36:7c:e7:46:f7: cf:0d:78:f7:a3:9a:be:3a:a1:18:f8:62:c4:35:9c: d5:2d:59:93:e4:ed:fb:92:f0:67:29:ce:d8:2d:ec: 9b:23:6d:26:57:40:b4:c2:09:14:3d:f8:90:9b:09: ea:d3:da:c0:02:54:c5:c0:6c:3a:14:a7:95:cf:c0: 1a:d3:58:d9:b1:2d:5d:d2:7a:e0:28:08:ea:bd:1d: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D3:F8:7B:B2:12:AF:70:E0:4E:A6:DA:F1:E0:1F:50:83:43:2D:E7 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:9d:fd:2b:ef:6d:b8:ae:06:d8:29:94:bb:d4:9a:b7:fb: 76:06:39:c4:e7:19:fe:b3:37:08:80:af:df:44:7b:05:03:e3: d5:5c:8c:ad:38:12:e7:ec:38:ac:bf:21:f5:a7:74:10:4a:fb: 72:54:b6:68:ed:be:82:7b:a6:15:30:cd:77:1e:83:5a:84:36: 55:57:c3:94:4e:59:89:94:60:d9:0a:20:59:0e:3e:95:ba:47: 82:c5:c6:5a:72:2f:38:b6:76:5c:e2:4a:83:2a:ad:30:0f:a1: aa:95:00:11:58:4b:c9:bb:ff:d8:62:67:6b:af:59:8b:b2:b6: 91:13:17:55:a0:18:a7:54:8a:93:08:1c:22:d6:64:d8:12:6b: 7b:6d:7d:f5:fa:15:63:42:9a:54:67:55:61:14:fa:9f:c5:54: 41:cf:75:94:29:d0:e7:88:70:ae:f3:49:da:38:0e:ba:c4:64: 0e:a7:b8:d5:ff:77:aa:5c:dd:18:f9:0c:59:81:66:ba:67:0e: 99:c7:cb:5e:65:c2:76:3e:1d:44:40:d6:f4:e2:df:40:e1:ab: 29:8a:25:03:f4:b7:56:ca:ec:e2:15:b2:43:30:3e:24:4a:c9: b1:d6:24:11:73:7b:4e:94:a9:6b:a6:13:65:37:a5:d8:2b:75: d7:ca:ee:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjYwNzIzMDcxNTE1WhcNMjYwNzMwMDcxNTE1WjAYMRYwFAYD VQQDEw02YTYxYmY4My05NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooz+z4CC5BK6wz+xu1QnLwTizViyGEcfT/nLIwFutKhPlcmsNLlLEq1IX+Xe psiy55rJkefh2HlyNZSITmgM/hWMHXebdtDlxeU7WzejWgxKD9hv+YdZcNdkuOxf JWU6cnr6sZbur0mVdXeeu2NrUU6qE8d3f+I8Jdc88cjs9aUWeZRehBpyZjRqgrU+ Dw+kJhgFyhpq/7gAQeWIurpCoOXbTsohbAGZlZrKWn2jNnznRvfPDXj3o5q+OqEY +GLENZzVLVmT5O37kvBnKc7YLeybI20mV0C0wgkUPfiQmwnq09rAAlTFwGw6FKeV z8Aa01jZsS1d0nrgKAjqvR3ySQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPT+Huy Eq9w4E6m2vHgH1CDQy3nMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEx6d/SvvbbiuBtgplLvUmrf7dgY5xOcZ/rM3CICv30R7BQPj1VyMrTgS5+w4 rL8h9ad0EEr7clS2aO2+gnumFTDNdx6DWoQ2VVfDlE5ZiZRg2QogWQ4+lbpHgsXG WnIvOLZ2XOJKgyqtMA+hqpUAEVhLybv/2GJna69Zi7K2kRMXVaAYp1SKkwgcItZk 2BJre2199foVY0KaVGdVYRT6n8VUQc91lCnQ54hwrvNJ2jgOusRkDqe41f93qlzd GPkMWYFmumcOmcfLXmXCdj4dREDW9OLfQOGrKYolA/S3Vsrs4hWyQzA+JErJsdYk EXN7TpSpa6YTZTel2Ct118ruWA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:25:53 2026 by rpki-client