$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft File: nMJa0Q0U5nMm84672jnBK4x95YM.mft (raw, json) Hash identifier: 9jfd6v7FF4hRlGq6NQjn3LVqtE3UpM3HbhitmzWkFcs= Subject key identifier: A1:32:A9:29:E5:B4:C0:75:41:91:C9:8B:C1:1E:DC:C0:5B:A5:54:95 Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft Manifest number: 14 Signing time: Thu 23 Jul 2026 11:06:49 +0000 Manifest this update: Thu 23 Jul 2026 11:06:48 +0000 Manifest next update: Thu 30 Jul 2026 11:06:48 +0000 Files and hashes: 1: nMJa0Q0U5nMm84672jnBK4x95YM.crl (hash: DliiSAjexfpBumVKq+i+7BqRJ+oyyiI+L6xln7RKWE8=) 2: 375CD0C4687B11F18B8955F26647A888.roa (hash: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Validity Not Before: Jul 23 11:06:48 2026 GMT Not After : Jul 30 11:06:48 2026 GMT Subject: CN=6a61f5c9-faad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:31:84:40:67:51:bb:ab:19:db:00:b1:a1: 1a:0e:d0:eb:da:23:62:10:87:83:62:92:48:d6:aa: b9:ea:ee:8b:52:7d:e1:d7:3e:ac:6c:88:63:a6:73: a0:b1:f9:37:e3:72:96:fd:b8:b6:d8:30:11:c0:5b: 64:38:86:59:54:cd:cc:53:6a:c6:f4:09:c3:7f:d7: 17:35:7e:db:de:e0:f4:77:b4:03:d0:ba:4c:89:67: ac:d7:fd:25:ca:eb:01:12:5a:11:a9:a9:29:4e:be: 1c:65:ce:09:cc:83:5b:7b:08:b3:15:e2:0d:6d:4b: 19:c6:fb:65:7c:3c:ab:33:8f:57:56:ca:1b:21:4a: f9:bd:45:41:3b:c6:74:f6:86:03:c4:fc:9d:59:60: e2:05:76:bf:fc:80:05:f6:6d:b0:3d:ec:b1:08:5e: da:13:69:31:53:90:67:40:17:f7:77:9f:ff:5f:98: 71:26:45:aa:50:eb:59:bc:14:e8:00:bc:02:13:37: 3d:0b:43:f8:37:11:c4:8a:bd:26:69:ca:68:bc:3b: f3:88:d2:98:b1:1b:ae:22:8f:34:e3:39:72:95:c1: 03:68:1c:e9:53:0f:bf:83:40:7b:40:db:40:65:7e: 36:a7:55:92:0e:e6:e9:c3:45:2a:43:58:6c:c5:4f: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:A9:29:E5:B4:C0:75:41:91:C9:8B:C1:1E:DC:C0:5B:A5:54:95 X509v3 Authority Key Identifier: keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bb:97:c0:36:f7:33:c5:c7:26:17:ee:72:30:26:57:b3:88: 3d:cb:6b:a9:e3:a2:5e:1a:e6:e9:42:b8:42:e6:d7:de:71:59: 97:09:79:ae:e8:6b:f5:e9:59:b0:7c:0d:fb:90:9d:a3:43:a7: 11:d0:fa:d5:a3:f5:a7:80:e8:20:0d:e1:b2:8e:04:d1:c9:21: 7d:e4:1a:73:a6:0e:7c:1a:2a:c6:69:fd:1f:47:22:bc:26:24: 92:80:0d:c3:0a:95:79:42:72:9b:00:1c:f4:82:9f:48:aa:ce: 3c:10:38:da:6c:54:0e:75:72:60:80:7f:54:d4:31:81:82:15: df:5d:da:90:08:31:f3:53:bb:fd:ba:5d:6d:8e:c2:b9:1f:b6: 34:9a:a1:76:8a:bb:34:2b:7f:53:9c:0d:26:de:51:36:f1:32: 95:71:e9:45:b0:d3:ab:63:86:67:71:90:43:e5:0c:21:29:cc: 70:54:5d:10:c2:24:d0:3e:2c:57:40:be:b5:d3:f3:dd:ee:ad: 43:b3:93:7a:ef:64:d9:c1:b7:d7:12:4d:7e:e0:ac:b8:c0:9f: 1c:2f:be:89:99:42:7e:21:c1:77:84:bc:79:92:7a:d1:1c:38: 02:f3:4b:98:6c:aa:d4:bb:b8:fc:a7:74:4a:4c:d9:85:0f:11: af:9d:17:82 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTFGOTExMC8GA1UEBRMoOUNDMjVBRDEwRDE0RTY3MzI2RjM4RUJCREEzOUMxMkI4 QzdERTU4MzAeFw0yNjA3MjMxMTA2NDhaFw0yNjA3MzAxMTA2NDhaMBgxFjAUBgNV BAMTDTZhNjFmNWM5LWZhYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClQjGEQGdRu6sZ2wCxoRoO0OvaI2IQh4NikkjWqrnq7otSfeHXPqxsiGOmc6Cx +Tfjcpb9uLbYMBHAW2Q4hllUzcxTasb0CcN/1xc1ftve4PR3tAPQukyJZ6zX/SXK 6wESWhGpqSlOvhxlzgnMg1t7CLMV4g1tSxnG+2V8PKszj1dWyhshSvm9RUE7xnT2 hgPE/J1ZYOIFdr/8gAX2bbA97LEIXtoTaTFTkGdAF/d3n/9fmHEmRapQ61m8FOgA vAITNz0LQ/g3EcSKvSZpymi8O/OI0pixG64ijzTjOXKVwQNoHOlTD7+DQHtA20Bl fjanVZIO5unDRSpDWGzFT+aBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoTKpKeW0 wHVBkcmLwR7cwFulVJUwHwYDVR0jBBgwFoAUnMJa0Q0U5nMm84672jnBK4x95YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBMUY5L0M4MDRDRUEyNjg3 QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5NbTg0Njcyam5CSzR4OTVZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk1KYTBRMFU1bk1tODQ2NzJqbkJLNHg5NVlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB MUY5L0M4MDRDRUEyNjg3QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5N bTg0Njcyam5CSzR4OTVZTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOu5fANvczxccmF+5yMCZXs4g9y2up46JeGubpQrhC5tfecVmXCXmu6Gv16Vmw fA37kJ2jQ6cR0PrVo/WngOggDeGyjgTRySF95Bpzpg58GirGaf0fRyK8JiSSgA3D CpV5QnKbABz0gp9Iqs48EDjabFQOdXJggH9U1DGBghXfXdqQCDHzU7v9ul1tjsK5 H7Y0mqF2irs0K39TnA0m3lE28TKVcelFsNOrY4ZncZBD5QwhKcxwVF0QwiTQPixX QL610/Pd7q1Ds5N672TZwbfXEk1+4Ky4wJ8cL76JmUJ+IcF3hLx5knrRHDgC80uY bKrUu7j8p3RKTNmFDxGvnReC -----END CERTIFICATE-----Generated at Fri Jul 24 13:02:32 2026 by rpki-client