$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: /qn/WkrEcbSrjnJX/t1eCd/hsIN609D14xAuxYzF//M= Subject key identifier: 9B:18:92:B6:51:AE:55:FA:0B:CC:3E:FB:D9:F3:B9:F7:59:13:71:6D Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 0567 Signing time: Thu 23 Jul 2026 00:09:35 +0000 Manifest this update: Thu 23 Jul 2026 00:09:35 +0000 Manifest next update: Thu 30 Jul 2026 00:09:35 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: s/BEFbiw3PXj3PcukrUPMbvmx5KdyBHDLt527YraFgE=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: VBhINs5cQkmB0vT6IDkxsJJHUIA6YcH1FDGQn1efeGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Jul 23 00:09:35 2026 GMT Not After : Jul 30 00:09:35 2026 GMT Subject: CN=6a615bbf-a2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:ac:4f:3c:8f:ad:ce:80:af:84:93:9c:aa: 85:d7:95:15:0f:32:d4:c7:ad:40:c4:07:e4:41:0d: 57:fc:5d:76:64:3e:93:fd:76:b5:17:0f:43:89:84: 9d:f2:d6:4c:b0:cd:b9:07:f9:19:02:5c:87:7b:d2: ca:03:3e:57:26:3b:be:d4:cd:f1:9f:d5:1c:81:5f: 3a:8c:6e:9c:2c:0f:f8:a5:be:fb:7c:96:7e:25:49: 3c:de:09:a9:44:1b:b5:3e:cc:dc:a1:e6:e2:cf:9a: 77:c3:a0:c0:0b:2d:8a:62:f9:ff:5c:cb:e9:29:8c: 85:d2:5a:f3:41:e6:c0:22:48:17:b6:e8:7c:c3:87: e6:63:4b:65:90:ca:90:e1:f2:54:8a:a7:d0:3c:ee: 13:1c:71:89:00:05:c3:b8:16:27:86:d4:c6:de:77: e0:2c:15:16:8f:2c:0a:01:70:3f:ad:93:fd:2b:b3: 54:47:c0:d5:c2:7a:af:f3:e1:08:a5:a0:62:59:a0: cc:10:63:91:8c:05:f5:c0:37:07:6f:45:3e:c9:15: f5:75:6f:9f:90:a1:f4:7b:6d:ed:c0:71:80:bf:f8: 4b:ca:4a:76:bf:76:39:28:de:c0:23:0a:b7:d5:ec: a3:dc:b1:66:ab:48:24:75:41:60:d1:d5:17:2e:dc: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:18:92:B6:51:AE:55:FA:0B:CC:3E:FB:D9:F3:B9:F7:59:13:71:6D X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:24:fc:e7:a3:67:20:91:78:9e:9c:27:dd:ca:2d:01:3e:0b: 04:64:08:b9:49:c0:dd:9f:ed:1c:14:76:15:5b:c8:78:47:07: 81:ec:8a:c6:2c:f5:e0:7e:e1:83:23:24:47:f5:42:35:f7:19: 5f:0a:5a:ee:ba:6c:6b:18:f0:aa:f5:73:85:fa:4e:1e:2f:39: ad:60:6e:ea:68:dd:a3:c5:ac:4d:d0:89:cf:fe:35:8f:04:bb: 6b:94:90:74:73:87:34:d3:bb:aa:0f:2f:c2:ce:2f:88:1d:ea: a4:09:87:5c:e4:80:28:f4:5c:23:8b:6b:b2:9a:7d:1a:ec:f1: c1:ca:09:2d:b2:77:a2:7c:0c:07:c9:69:54:0f:b5:4c:20:c3: 49:af:db:fd:d0:c8:38:e2:7e:8d:7d:88:dc:0a:4b:62:2c:59: 92:75:1b:ef:5a:1e:9f:59:ce:93:2c:60:38:7f:53:2c:ef:a7: 3c:e3:7a:fd:03:3e:be:2d:39:d9:3d:c1:8f:b5:69:4c:47:b5: 22:ed:7d:06:e2:0d:e1:ce:95:4d:f0:45:8d:cb:a1:66:fb:36: a3:42:e2:e6:95:1f:b3:49:40:50:49:2f:50:89:4e:c1:aa:06: b5:57:c6:bb:d6:a8:e8:bf:07:cb:d1:51:ef:d0:ba:50:a9:8e: 28:95:8e:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjYwNzIzMDAwOTM1WhcNMjYwNzMwMDAwOTM1WjAYMRYwFAYD VQQDEw02YTYxNWJiZi1hMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQasTzyPrc6Ar4STnKqF15UVDzLUx61AxAfkQQ1X/F12ZD6T/Xa1Fw9DiYSd 8tZMsM25B/kZAlyHe9LKAz5XJju+1M3xn9UcgV86jG6cLA/4pb77fJZ+JUk83gmp RBu1Pszcoebiz5p3w6DACy2KYvn/XMvpKYyF0lrzQebAIkgXtuh8w4fmY0tlkMqQ 4fJUiqfQPO4THHGJAAXDuBYnhtTG3nfgLBUWjywKAXA/rZP9K7NUR8DVwnqv8+EI paBiWaDMEGORjAX1wDcHb0U+yRX1dW+fkKH0e23twHGAv/hLykp2v3Y5KN7AIwq3 1eyj3LFmq0gkdUFg0dUXLty+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsYkrZR rlX6C8w++9nzufdZE3FtMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOCT856NnIJF4npwn3cotAT4LBGQIuUnA3Z/tHBR2FVvIeEcHgeyKxiz14H7h gyMkR/VCNfcZXwpa7rpsaxjwqvVzhfpOHi85rWBu6mjdo8WsTdCJz/41jwS7a5SQ dHOHNNO7qg8vws4viB3qpAmHXOSAKPRcI4trspp9GuzxwcoJLbJ3onwMB8lpVA+1 TCDDSa/b/dDIOOJ+jX2I3ApLYixZknUb71oen1nOkyxgOH9TLO+nPON6/QM+vi05 2T3Bj7VpTEe1Iu19BuIN4c6VTfBFjcuhZvs2o0Li5pUfs0lAUEkvUIlOwaoGtVfG u9ao6L8Hy9FR79C6UKmOKJWOlQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:18:36 2026 by rpki-client