$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: htZ9MBrzcyU1BcSQIwNf1tSitxRVcf3GAgdeLDtVxvw= Subject key identifier: 6C:EF:68:B4:1B:3A:BD:E3:0A:54:E9:6A:B9:24:AD:3A:73:66:44:FF Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 0208 Signing time: Thu 23 Jul 2026 04:23:57 +0000 Manifest this update: Thu 23 Jul 2026 04:23:57 +0000 Manifest next update: Thu 30 Jul 2026 04:23:57 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: FsbvPTYhCr7QaNdeq73H+YvW+s7Eg/bckCrIXcTmSRA=) 2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=) 3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Jul 23 04:23:57 2026 GMT Not After : Jul 30 04:23:57 2026 GMT Subject: CN=6a61975d-5319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:e2:91:ad:88:33:18:d6:d6:63:8f:d3:af: ea:84:ea:99:74:17:5b:c3:b7:85:60:c0:bf:63:17: 5f:62:a2:e4:31:72:99:fb:1e:f6:14:02:0c:a1:f6: cd:77:5d:be:11:39:5a:55:b5:7f:ce:31:77:e5:10: 23:ea:29:6b:30:ae:d3:32:c5:8b:f8:24:6a:ec:65: 18:72:92:1b:99:58:4e:ab:12:eb:b8:02:a7:d1:20: aa:ec:45:a6:57:4c:0f:6d:8a:36:64:ca:03:3a:4d: 3b:e2:a4:5a:90:d4:a3:bd:9f:e1:58:29:5c:39:7c: 8f:01:c5:25:fe:25:8b:64:5c:1c:14:07:69:96:80: 23:e9:75:1f:80:da:b5:6a:76:8e:31:51:10:98:d8: 66:34:56:7c:4f:2b:c2:de:f4:b9:a1:95:2f:d3:91: 18:cc:6f:f1:95:05:f6:ca:20:0f:3b:c0:bf:ed:3d: 5c:02:a2:9d:9e:7e:82:c6:14:c3:6f:0b:5e:b8:68: d6:20:48:7f:ef:dc:b3:38:7b:5e:3d:34:82:84:f9: 56:a4:57:81:b6:7b:bc:7b:a7:3c:d0:f8:ae:07:f8: 2c:64:f2:17:3c:3d:8f:41:d1:ec:09:bf:7d:a5:f2: 13:a6:ac:f0:da:85:d1:fb:2f:20:ef:49:d3:6b:31: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:68:B4:1B:3A:BD:E3:0A:54:E9:6A:B9:24:AD:3A:73:66:44:FF X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:0f:e7:14:ff:9f:24:ef:48:bf:78:51:92:c8:7c:cc:1b: ee:8d:21:1f:7c:30:ea:ee:91:6f:c9:fa:33:08:5e:01:8a:b7: e7:80:cc:ab:81:b4:1e:2f:d7:20:d4:26:fa:ae:59:7d:51:72: 67:7a:c4:96:41:de:b6:5a:7c:7d:00:cb:44:be:26:e1:f9:56: 1d:33:a8:6e:60:c6:27:ad:57:33:33:58:b5:61:10:36:54:7f: d1:59:be:10:4a:0b:db:37:a7:59:9b:3a:97:51:2b:e9:c7:1a: be:64:9c:ef:7b:45:8b:9e:54:ef:91:04:2e:2a:16:84:20:c3: ef:a6:1f:e6:d0:6f:51:b4:4e:1c:60:2e:3e:60:13:01:43:bc: f2:52:5d:44:12:47:55:1f:04:12:3f:80:7c:43:b2:ea:41:eb: 6d:dd:d2:2e:85:c4:5d:7a:b5:d9:6c:b7:d5:10:36:fc:8b:08: 55:49:b5:ae:26:d1:a0:00:89:13:34:17:b5:df:d0:51:34:85: c6:bc:25:d9:08:17:e2:e8:80:93:70:ae:40:1b:0d:8e:e9:08: 85:4a:a5:a1:cb:57:e7:e7:dc:fc:00:2e:e1:78:38:2c:d9:14: d3:7c:c8:85:9e:12:f1:62:b3:7f:fd:07:24:19:77:f1:1a:5f: a0:44:f7:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjYwNzIzMDQyMzU3WhcNMjYwNzMwMDQyMzU3WjAYMRYwFAYD VQQDEw02YTYxOTc1ZC01MzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoLika2IMxjW1mOP06/qhOqZdBdbw7eFYMC/YxdfYqLkMXKZ+x72FAIMofbN d12+ETlaVbV/zjF35RAj6ilrMK7TMsWL+CRq7GUYcpIbmVhOqxLruAKn0SCq7EWm V0wPbYo2ZMoDOk074qRakNSjvZ/hWClcOXyPAcUl/iWLZFwcFAdploAj6XUfgNq1 anaOMVEQmNhmNFZ8TyvC3vS5oZUv05EYzG/xlQX2yiAPO8C/7T1cAqKdnn6CxhTD bwteuGjWIEh/79yzOHtePTSChPlWpFeBtnu8e6c80PiuB/gsZPIXPD2PQdHsCb99 pfITpqzw2oXR+y8g70nTazGMkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzvaLQb Or3jClTparkkrTpzZkT/MB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYpQP5xT/nyTvSL94UZLIfMwb7o0hH3ww6u6Rb8n6MwheAYq354DMq4G0Hi/X INQm+q5ZfVFyZ3rElkHetlp8fQDLRL4m4flWHTOobmDGJ61XMzNYtWEQNlR/0Vm+ EEoL2zenWZs6l1Er6ccavmSc73tFi55U75EELioWhCDD76Yf5tBvUbROHGAuPmAT AUO88lJdRBJHVR8EEj+AfEOy6kHrbd3SLoXEXXq12Wy31RA2/IsIVUm1ribRoACJ EzQXtd/QUTSFxrwl2QgX4uiAk3CuQBsNjukIhUqloctX5+fc/AAu4Xg4LNkU03zI hZ4S8WKzf/0HJBl38RpfoET3ig== -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:42 2026 by rpki-client