$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: gQlgoM+ZZXCAFtgtvtdVLfJQ5flQa53LwsLkIWIK3jQ= Subject key identifier: B9:A7:68:FC:33:F7:DB:3B:1F:BB:E4:86:13:4E:D3:57:EE:75:70:6A Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0C17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0C04 Signing time: Wed 22 Jul 2026 19:09:22 +0000 Manifest this update: Wed 22 Jul 2026 19:09:22 +0000 Manifest next update: Wed 29 Jul 2026 19:09:22 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: 3cIgwWkQw9M1VYOw1AqhLfkfTZwv0qXd8JSF8qSDkqo=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3095 (0xc17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Jul 22 19:09:22 2026 GMT Not After : Jul 29 19:09:22 2026 GMT Subject: CN=6a611562-d9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:ca:dd:2f:a3:e4:31:ad:ca:9e:85:c6:2c: a1:04:84:c6:52:f0:b9:f8:e4:ff:6c:22:d4:b8:f7: b4:32:10:cc:02:b4:4d:87:8c:f9:03:83:21:01:a9: 30:70:cf:73:92:c4:61:6c:ba:06:c2:8e:cf:a4:17: 45:fe:33:31:bd:36:73:8b:9d:8d:95:96:9f:8f:24: 46:74:18:d9:d4:b6:fd:ab:d3:a3:7b:72:5d:3f:f0: dd:8b:c9:c1:0b:e9:ab:82:b7:bc:a6:c9:f9:7d:8c: 63:e0:30:97:bc:85:ca:37:f8:0e:e8:23:31:f3:83: 4f:0c:17:c3:16:92:8f:c4:d0:19:76:4a:38:86:4a: 6a:58:a1:1b:ab:fd:e5:9d:b7:43:c3:e0:9e:ab:a3: fd:5d:52:d2:a6:e6:a2:10:1e:9c:c8:f3:60:35:09: f0:a2:b4:be:0b:99:52:2e:5c:a7:2b:b7:3c:14:e2: 51:e6:88:32:fc:78:17:56:31:a0:a9:13:11:0e:91: af:0d:a5:8d:9e:2d:e3:4d:a4:ef:4e:f2:05:2e:6e: 65:5b:d8:e5:4f:8e:9a:26:6c:97:ce:f7:2d:8f:4d: 57:af:30:db:f3:ed:56:5a:5b:6c:5f:17:da:2b:c2: 44:18:36:bf:0b:b1:69:4e:22:94:6a:1f:d0:80:86: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A7:68:FC:33:F7:DB:3B:1F:BB:E4:86:13:4E:D3:57:EE:75:70:6A X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:37:46:fc:29:f7:3d:69:53:03:cb:26:1c:4d:fb:33:33:7d: 7e:68:7d:bd:df:6a:7d:90:08:28:8b:50:00:9a:f8:cc:cf:86: dd:55:33:6c:b7:2a:f1:02:da:b4:2c:d1:79:12:eb:2e:aa:40: 5c:e9:49:07:b7:79:44:f2:0e:71:35:e9:98:d0:95:32:e4:6f: 3a:06:54:02:06:47:28:d6:7a:c3:87:a4:df:d1:39:ba:ad:d6: 27:8c:68:b1:d6:4a:5a:bf:08:6a:d8:99:26:c8:e9:98:54:e2: 7c:ca:bd:e7:c1:b8:07:e8:7b:32:3c:f5:10:06:07:44:ab:f5: e3:65:63:f5:f0:48:a8:bf:ab:0b:e0:6a:b2:94:5d:5e:27:12: b2:98:99:9c:cc:46:49:87:e5:4e:13:1d:a7:4d:d9:4b:c1:25: 69:85:bb:25:0f:8f:df:86:6e:55:2b:82:42:95:94:0e:44:9c: 8a:06:fd:ca:17:e5:06:cd:5a:e0:67:f1:3e:58:1f:7d:cd:28: 5f:5d:78:c0:fd:2c:06:0b:0a:c6:35:ee:fb:2f:a7:37:07:5f: 29:aa:30:6b:f5:1b:de:3b:72:14:93:5e:4a:b4:ad:cf:3a:66: 2e:81:98:7c:5a:e6:2f:19:7e:cb:eb:bb:66:e3:34:0d:f1:ec: e4:13:fe:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwNzIyMTkwOTIyWhcNMjYwNzI5MTkwOTIyWjAYMRYwFAYD VQQDEw02YTYxMTU2Mi1kOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz/K3S+j5DGtyp6FxiyhBITGUvC5+OT/bCLUuPe0MhDMArRNh4z5A4MhAakw cM9zksRhbLoGwo7PpBdF/jMxvTZzi52NlZafjyRGdBjZ1Lb9q9Oje3JdP/Ddi8nB C+mrgre8psn5fYxj4DCXvIXKN/gO6CMx84NPDBfDFpKPxNAZdko4hkpqWKEbq/3l nbdDw+Ceq6P9XVLSpuaiEB6cyPNgNQnworS+C5lSLlynK7c8FOJR5ogy/HgXVjGg qRMRDpGvDaWNni3jTaTvTvIFLm5lW9jlT46aJmyXzvctj01XrzDb8+1WWltsXxfa K8JEGDa/C7FpTiKUah/QgIYi8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmnaPwz 99s7H7vkhhNO01fudXBqMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjdG/Cn3PWlTA8smHE37MzN9fmh9vd9qfZAIKItQAJr4zM+G3VUzbLcq8QLa tCzReRLrLqpAXOlJB7d5RPIOcTXpmNCVMuRvOgZUAgZHKNZ6w4ek39E5uq3WJ4xo sdZKWr8IatiZJsjpmFTifMq958G4B+h7Mjz1EAYHRKv142Vj9fBIqL+rC+BqspRd XicSspiZnMxGSYflThMdp03ZS8ElaYW7JQ+P34ZuVSuCQpWUDkScigb9yhflBs1a 4GfxPlgffc0oX114wP0sBgsKxjXu+y+nNwdfKaowa/Ub3jtyFJNeSrStzzpmLoGY fFrmLxl+y+u7ZuM0DfHs5BP+aQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:32:04 2026 by rpki-client