$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft File: NakpRAWKu-k3TFV7sIThgTRARH8.mft (raw, json) Hash identifier: XY0DBXgT6pKedXfCt0bsTBOniAEuY22X86opeRZczo0= Subject key identifier: AF:17:35:E1:82:73:6D:9C:21:4E:26:7E:30:24:9D:64:41:68:AA:A1 Authority key identifier: 35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F Certificate issuer: /CN=A91923E8/serialNumber=35A92944058ABBE9374C557BB084E1813440447F Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft Manifest number: 20 Signing time: Thu 23 Jul 2026 10:57:05 +0000 Manifest this update: Thu 23 Jul 2026 10:57:05 +0000 Manifest next update: Thu 30 Jul 2026 10:57:05 +0000 Files and hashes: 1: NakpRAWKu-k3TFV7sIThgTRARH8.crl (hash: 8/t3bpWuXQ1adBJBSSP/t/6bZM1i2mN0s3ivcaRvGGY=) 2: 1257DEDE54F511F18BFCC077A2833773.roa (hash: DZsp3kp44FtbJD7jaWrhsQw5V2T437I/DrbmUoEFoeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E8, serialNumber=35A92944058ABBE9374C557BB084E1813440447F Validity Not Before: Jul 23 10:57:05 2026 GMT Not After : Jul 30 10:57:05 2026 GMT Subject: CN=6a61f381-d137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:1b:49:82:82:9a:6c:3c:31:cb:da:52:f2: 57:a6:72:d5:ae:59:75:51:68:3c:51:ec:76:69:d5: b1:fa:6f:77:b4:45:bc:0a:56:c0:67:cf:3a:b9:17: 06:73:59:5c:6b:e1:ad:6b:d9:f7:03:95:7c:0c:8d: af:89:19:00:58:0f:af:0d:a4:68:fd:a2:03:21:22: fb:b1:db:22:c1:b4:7f:e7:2f:91:19:10:d5:a5:f2: 18:72:3a:84:3b:b2:15:92:6b:7e:94:cf:ee:cc:af: e3:2c:ae:fa:7e:46:44:ad:39:e2:0c:48:aa:94:70: ec:15:cc:d5:cc:30:bf:cf:fe:44:5f:42:f0:85:dc: da:e2:c0:ff:6a:35:9f:eb:b3:2e:33:03:d8:dd:fb: 5f:43:a8:31:28:77:56:af:94:4f:30:b0:62:c2:a4: 90:ba:65:a3:9b:34:ba:4d:82:59:bf:0b:78:37:6a: f2:7b:22:3f:5d:17:4f:ff:c9:cf:47:a1:4c:f9:c9: 61:a2:5d:96:20:c0:85:75:1f:20:07:d8:06:bd:9b: 4d:b7:6f:15:0d:7a:1d:8a:1f:88:48:0d:01:bb:09: 8e:9c:5d:20:d3:b8:6e:b2:ca:f3:14:f5:a1:6d:89: 70:27:b6:e2:4b:80:b0:70:86:9d:5d:cc:0a:fc:29: 4c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:17:35:E1:82:73:6D:9C:21:4E:26:7E:30:24:9D:64:41:68:AA:A1 X509v3 Authority Key Identifier: keyid:35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d8:b3:6e:59:36:0e:9e:c9:b8:a7:e1:c1:77:e1:c6:22:3e: ee:2d:78:db:7f:7d:b2:87:e3:94:41:11:e2:1e:f6:72:6d:41: 34:af:45:b5:77:35:3e:e5:7e:6e:6e:26:1a:4b:f9:a7:c6:78: 84:a2:7b:e0:90:aa:26:b4:f9:5f:b4:bb:d2:53:44:32:d1:cf: 46:0b:c1:90:93:85:3f:49:a6:0a:f9:b6:4a:be:a1:41:40:28: c0:90:52:5d:96:99:cb:ad:5a:34:99:28:f9:56:95:7f:e2:99: 9c:7b:01:dc:a1:76:dd:75:1f:75:90:91:91:3f:ec:e6:88:11: 95:7c:82:87:03:05:8f:cd:1a:ee:bf:54:0f:59:72:82:c2:42: 1e:2e:95:5b:d0:b4:0b:b7:6f:ca:bd:ab:b2:d7:46:e8:a4:9f: 6e:0a:0a:20:d0:29:e5:85:df:3b:b4:81:c8:5a:5a:bb:fc:cf: f6:f6:53:12:e5:8c:f6:dc:0a:70:21:86:b6:e3:d9:0c:ce:cd: 67:b4:ff:fb:e8:a6:5a:d2:97:26:08:93:71:2d:45:59:fc:a3: 72:23:0e:34:d5:0f:8b:b3:30:78:20:96:8a:67:65:5d:6d:47: f4:58:9d:1e:01:de:80:cf:cb:c3:c6:ab:e7:c4:c3:28:a0:3e: 49:63:0b:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjNFODExMC8GA1UEBRMoMzVBOTI5NDQwNThBQkJFOTM3NEM1NTdCQjA4NEUxODEz NDQwNDQ3RjAeFw0yNjA3MjMxMDU3MDVaFw0yNjA3MzAxMDU3MDVaMBgxFjAUBgNV BAMTDTZhNjFmMzgxLWQxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyXhtJgoKabDwxy9pS8lemctWuWXVRaDxR7HZp1bH6b3e0RbwKVsBnzzq5FwZz WVxr4a1r2fcDlXwMja+JGQBYD68NpGj9ogMhIvux2yLBtH/nL5EZENWl8hhyOoQ7 shWSa36Uz+7Mr+Msrvp+RkStOeIMSKqUcOwVzNXMML/P/kRfQvCF3NriwP9qNZ/r sy4zA9jd+19DqDEod1avlE8wsGLCpJC6ZaObNLpNglm/C3g3avJ7Ij9dF0//yc9H oUz5yWGiXZYgwIV1HyAH2Aa9m023bxUNeh2KH4hIDQG7CY6cXSDTuG6yyvMU9aFt iXAntuJLgLBwhp1dzAr8KUx7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrxc14YJz bZwhTiZ+MCSdZEFoqqEwHwYDVR0jBBgwFoAUNakpRAWKu+k3TFV7sIThgTRARH8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyM0U4L0FDQzRGQkNFNTRG NDExRjFCRDFGMkNFREExODMzNzczL05ha3BSQVdLdS1rM1RGVjdzSVRoZ1RSQVJI OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFrcFJBV0t1LWszVEZWN3NJVGhnVFJBUkg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky M0U4L0FDQzRGQkNFNTRGNDExRjFCRDFGMkNFREExODMzNzczL05ha3BSQVdLdS1r M1RGVjdzSVRoZ1RSQVJIOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAL2LNuWTYOnsm4p+HBd+HGIj7uLXjbf32yh+OUQRHiHvZybUE0r0W1dzU+5X5u biYaS/mnxniEonvgkKomtPlftLvSU0Qy0c9GC8GQk4U/SaYK+bZKvqFBQCjAkFJd lpnLrVo0mSj5VpV/4pmcewHcoXbddR91kJGRP+zmiBGVfIKHAwWPzRruv1QPWXKC wkIeLpVb0LQLt2/Kvauy10bopJ9uCgog0Cnlhd87tIHIWlq7/M/29lMS5Yz23Apw IYa249kMzs1ntP/76KZa0pcmCJNxLUVZ/KNyIw401Q+LszB4IJaKZ2VdbUf0WJ0e Ad6Az8vDxqvnxMMooD5JYwtP -----END CERTIFICATE-----Generated at Fri Jul 24 00:40:36 2026 by rpki-client