$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: xhsN6qaUVFCdZRr6ddJFoWDeh5JLdh4THoBrNHQtky8= Subject key identifier: 26:63:56:01:CD:52:BE:66:C0:D8:F2:7D:F6:0A:DD:22:79:4B:8E:92 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 0284 Signing time: Thu 23 Jul 2026 02:57:32 +0000 Manifest this update: Thu 23 Jul 2026 02:57:32 +0000 Manifest next update: Thu 30 Jul 2026 02:57:32 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: NKY/4tUbAcIWyeIKztO9bE0sg+Qz+9pK5HeCGeo6/r0=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Jul 23 02:57:32 2026 GMT Not After : Jul 30 02:57:32 2026 GMT Subject: CN=6a61831c-97b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:c1:55:49:f3:9c:73:e6:49:57:50:49:59: f4:4b:12:64:25:76:4a:16:38:3d:a2:00:b6:ba:8a: d0:49:01:6a:4a:08:43:a6:88:b9:c4:53:f0:ed:ec: 5b:82:97:3e:37:b4:1d:31:bd:cf:5f:9c:05:32:a6: 0e:bc:03:12:6f:ef:0f:c1:2f:e4:79:4c:e1:15:22: e1:f9:01:a7:9b:b2:9f:b6:aa:a0:44:b5:d6:7d:c3: 22:91:f2:fb:ae:dd:0c:02:11:cc:88:e1:d3:83:a4: 17:e5:ed:c4:7b:57:d1:90:72:13:d0:4f:36:8d:dd: 18:98:09:a1:3c:7b:21:cd:8c:0d:fd:ec:27:f5:3f: d5:50:8e:70:5e:2e:9f:0b:b3:c3:3e:46:63:9e:c2: 5f:61:e5:54:ca:99:8a:23:6e:12:3b:53:1f:f6:6b: 17:91:85:70:e1:e1:81:af:d4:99:f2:0c:34:a9:63: db:ca:1a:df:45:f1:00:da:e5:f9:e6:6e:1c:00:2c: 65:b4:c7:ae:ff:16:16:cf:65:8a:3a:42:6b:e8:7e: 88:7c:06:1f:c2:3e:d8:81:49:c1:08:a4:db:2b:ea: 75:31:c8:15:73:20:41:8d:00:ca:d0:9f:84:aa:f1: 54:2d:39:11:bf:68:e3:cf:b8:84:32:34:c2:76:c3: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:63:56:01:CD:52:BE:66:C0:D8:F2:7D:F6:0A:DD:22:79:4B:8E:92 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:db:7a:30:cc:84:eb:85:38:b1:a2:aa:df:d2:d4:c4:0a: ee:a5:79:45:95:54:be:f2:69:c7:05:51:06:eb:f5:78:b1:4f: 7b:2c:a8:8b:fe:dd:fa:52:f6:af:d3:22:ed:f7:06:89:d5:ef: 75:ea:fd:7a:5c:8a:ac:27:4c:d2:9f:0a:1a:a1:ed:82:70:58: de:4e:e3:2c:d5:3e:e4:13:35:b1:a6:a0:18:5c:27:d6:86:c6: 4f:a5:8c:ad:5f:3b:49:c3:33:26:51:e7:e8:0a:ab:8a:3f:16: ca:01:ec:f6:a6:ac:bd:77:e4:25:46:5d:23:97:94:59:0e:c2: 4f:aa:a5:7c:05:f5:56:dc:b8:70:7c:55:85:aa:13:41:ba:f4: 6c:b4:b8:06:83:89:11:ef:0f:a6:89:38:e2:17:5a:5b:48:ad: 21:06:a2:4b:72:0d:c2:3a:7a:d4:e6:82:c3:85:e9:ab:aa:a0: 58:f0:01:44:7a:dc:47:79:fc:94:aa:e4:25:d3:01:d9:ef:25: 21:fd:c1:03:77:9f:7a:5d:c5:6c:a8:be:45:77:b6:f3:91:3a: 84:ce:89:2e:20:8d:02:23:70:f1:f3:db:03:79:be:b7:0b:3d: 61:67:4c:ea:a8:9f:e9:eb:d6:5a:79:05:d3:c8:0d:ba:f2:c2: 6f:c3:b5:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjYwNzIzMDI1NzMyWhcNMjYwNzMwMDI1NzMyWjAYMRYwFAYD VQQDEw02YTYxODMxYy05N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zjBVUnznHPmSVdQSVn0SxJkJXZKFjg9ogC2uorQSQFqSghDpoi5xFPw7exb gpc+N7QdMb3PX5wFMqYOvAMSb+8PwS/keUzhFSLh+QGnm7KftqqgRLXWfcMikfL7 rt0MAhHMiOHTg6QX5e3Ee1fRkHIT0E82jd0YmAmhPHshzYwN/ewn9T/VUI5wXi6f C7PDPkZjnsJfYeVUypmKI24SO1Mf9msXkYVw4eGBr9SZ8gw0qWPbyhrfRfEA2uX5 5m4cACxltMeu/xYWz2WKOkJr6H6IfAYfwj7YgUnBCKTbK+p1McgVcyBBjQDK0J+E qvFULTkRv2jjz7iEMjTCdsMdrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZjVgHN Ur5mwNjyffYK3SJ5S46SMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibnbejDMhOuFOLGiqt/S1MQK7qV5RZVUvvJpxwVRBuv1eLFPeyyoi/7d+lL2 r9Mi7fcGidXvder9elyKrCdM0p8KGqHtgnBY3k7jLNU+5BM1saagGFwn1obGT6WM rV87ScMzJlHn6Aqrij8WygHs9qasvXfkJUZdI5eUWQ7CT6qlfAX1Vty4cHxVhaoT Qbr0bLS4BoOJEe8Ppok44hdaW0itIQaiS3INwjp61OaCw4Xpq6qgWPABRHrcR3n8 lKrkJdMB2e8lIf3BA3efel3FbKi+RXe285E6hM6JLiCNAiNw8fPbA3m+tws9YWdM 6qif6evWWnkF08gNuvLCb8O1WQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:23:18 2026 by rpki-client