$ rpki-client -vvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: VrT/pIhAputh/ZX3oNBR/Wnl5iwIb6BYEqhSSMSvKjE= Subject key identifier: 20:A8:FD:D6:B0:08:E2:BC:96:07:E0:7F:D0:CE:5D:B2:6F:8C:06:AA Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 34 Signing time: Thu 23 Jul 2026 10:40:19 +0000 Manifest this update: Thu 23 Jul 2026 10:40:19 +0000 Manifest next update: Thu 30 Jul 2026 10:40:19 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: 0rrhyYZXSwFun7CLZjr+qci5cK4fict1g0EZYuZwePM=) 2: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) 3: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: Jul 23 10:40:19 2026 GMT Not After : Jul 30 10:40:19 2026 GMT Subject: CN=6a61ef93-a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:ac:62:9e:02:8f:7d:9c:cb:24:c5:9f:a5: 7b:27:31:1d:2b:ac:1e:f8:1a:8a:85:41:bd:e1:6c: 12:85:4c:59:bd:79:c3:d8:ed:97:15:1c:6e:fc:71: 8e:5a:4e:a1:f0:f6:f8:d3:46:ff:23:6a:7e:9e:4e: 27:d4:cd:25:ce:d5:96:b4:2d:f4:3f:a6:cd:1d:3e: d9:30:99:d4:b9:9c:d3:fb:3a:38:21:18:e1:5e:e6: 6c:3d:c1:8d:23:59:6a:e6:91:20:b7:23:94:c9:84: 6a:35:b4:67:b3:ef:a5:86:45:94:4d:5e:4c:f9:bb: 4a:3f:99:f4:30:aa:ae:d9:e7:a9:ae:97:23:cf:0f: 9a:4d:b6:87:2d:e9:85:23:1a:33:64:19:fd:b7:a2: 81:39:6b:d2:57:69:be:d9:7a:4d:11:bd:c9:86:1a: cb:02:40:2e:27:3b:26:2a:4d:30:55:7c:f5:b7:5e: 36:37:ed:84:33:83:ed:fe:46:40:4a:e0:82:00:7d: 55:7b:79:6f:3d:aa:1d:a3:da:e7:dc:fe:6a:cd:5c: f8:d6:18:d8:0a:63:a9:93:af:87:ec:4a:5f:fb:f0: 29:8b:cd:c4:e9:05:98:b8:fc:32:61:72:22:6f:aa: aa:5e:fa:1e:2c:2d:b0:f7:e3:31:7a:b6:63:50:46: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A8:FD:D6:B0:08:E2:BC:96:07:E0:7F:D0:CE:5D:B2:6F:8C:06:AA X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:17:fc:5d:c3:e2:c2:2b:5b:eb:63:70:6c:dd:af:e5:61: b1:52:1b:01:26:79:f7:16:35:ed:fe:53:04:93:8c:be:60:56: 34:e2:66:7d:f0:0e:59:5d:a8:ad:c5:a6:3e:d0:2b:8b:f9:b4: af:5e:bc:55:20:e5:94:e8:15:02:be:dc:64:80:da:40:ce:7e: 6f:85:78:c0:53:9c:dc:be:7e:89:3d:e4:c0:f4:e4:ea:7e:66: 48:8f:24:d9:81:0d:69:9d:7a:d4:06:eb:de:66:13:7a:a8:c8: d7:33:44:17:ab:97:b5:1d:7b:3a:f2:95:d9:55:c5:06:b7:56: 10:5b:2f:72:4f:88:db:f3:a3:93:d7:35:40:f3:4a:78:53:22: df:d0:88:d6:fa:95:9d:2b:57:5d:41:6c:e4:a7:5c:6f:b8:ff: df:ff:fc:f8:54:fe:ca:6f:5d:f3:c0:2c:e2:8b:f6:fe:58:a4: ce:a2:61:55:a9:8b:0c:9c:c4:6e:32:d4:fb:ff:91:e6:a4:41: 2a:88:a1:83:f0:a3:f2:c5:b0:dc:94:f8:89:3b:08:30:92:65: 62:61:51:9f:1f:89:9b:0e:70:c8:d0:c1:46:a7:97:8b:53:e0: d3:40:37:98:fc:3b:6b:29:78:c8:7c:3b:53:b0:2b:ca:63:60: 3d:4d:e7:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjA3MjMxMDQwMTlaFw0yNjA3MzAxMDQwMTlaMBgxFjAUBgNV BAMTDTZhNjFlZjkzLWExMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa9axingKPfZzLJMWfpXsnMR0rrB74GoqFQb3hbBKFTFm9ecPY7ZcVHG78cY5a TqHw9vjTRv8jan6eTifUzSXO1Za0LfQ/ps0dPtkwmdS5nNP7OjghGOFe5mw9wY0j WWrmkSC3I5TJhGo1tGez76WGRZRNXkz5u0o/mfQwqq7Z56mulyPPD5pNtoct6YUj GjNkGf23ooE5a9JXab7Zek0RvcmGGssCQC4nOyYqTTBVfPW3XjY37YQzg+3+RkBK 4IIAfVV7eW89qh2j2ufc/mrNXPjWGNgKY6mTr4fsSl/78CmLzcTpBZi4/DJhciJv qqpe+h4sLbD34zF6tmNQRmlvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIKj91rAI 4ryWB+B/0M5dsm+MBqowHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAf9Rf8XcPiwitb62NwbN2v5WGxUhsBJnn3FjXt/lMEk4y+YFY04mZ98A5ZXait xaY+0CuL+bSvXrxVIOWU6BUCvtxkgNpAzn5vhXjAU5zcvn6JPeTA9OTqfmZIjyTZ gQ1pnXrUBuveZhN6qMjXM0QXq5e1HXs68pXZVcUGt1YQWy9yT4jb86OT1zVA80p4 UyLf0IjW+pWdK1ddQWzkp1xvuP/f//z4VP7Kb13zwCzii/b+WKTOomFVqYsMnMRu MtT7/5HmpEEqiKGD8KPyxbDclPiJOwgwkmViYVGfH4mbDnDI0MFGp5eLU+DTQDeY /DtrKXjIfDtTsCvKY2A9Tefh -----END CERTIFICATE-----Generated at Fri Jul 24 06:38:28 2026 by rpki-client