$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: GLc2BuAXLuCIyl3/7gQmRFHRgRpBQtE9R74upkHIXvg= Subject key identifier: B1:B1:7B:B9:58:71:2F:2E:16:AB:9C:E5:91:82:30:BB:51:FB:D2:71 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 0D Signing time: Thu 23 Jul 2026 11:12:35 +0000 Manifest this update: Thu 23 Jul 2026 11:12:35 +0000 Manifest next update: Thu 30 Jul 2026 11:12:35 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: 2K+CImICVCG3x+Oz/xsc9/+3i+i1+VimYL9/BU4Emdc=) 2: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) 3: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) 4: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Jul 23 11:12:35 2026 GMT Not After : Jul 30 11:12:35 2026 GMT Subject: CN=6a61f723-e93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:1f:10:93:3f:eb:56:0b:c8:ff:a8:8c:26: d8:1a:f4:7d:f2:d9:ea:4c:27:79:25:60:dd:22:6f: 48:55:2e:fa:4f:46:85:f9:2e:5a:1a:f4:5b:79:2b: 40:0b:6d:19:35:fa:77:2f:ab:17:80:27:41:b8:d0: ed:68:e9:05:c7:ba:8c:7a:dc:82:e7:67:4c:8a:9c: 31:d5:b3:e8:3d:e9:56:f8:de:d6:34:49:bb:6e:ab: bf:a5:b7:38:17:e5:a3:3b:95:01:e2:f1:bc:ba:9c: 29:d8:9e:ae:65:ec:16:1e:6e:74:42:47:d0:aa:c7: 47:d9:f1:7e:77:04:42:91:56:68:22:e3:9c:d6:5b: 70:6c:17:cc:42:c1:b1:5b:cf:0b:59:e6:4c:49:3e: d3:8d:0e:78:4d:b5:66:b0:f5:8a:e2:fc:9f:42:30: 48:90:d6:1b:9f:65:5b:9f:5c:2d:e9:86:58:a7:3b: dc:a3:b3:70:3a:44:7d:66:71:4c:e8:f1:bc:e2:dd: 68:b4:ae:c2:15:9f:6f:c4:39:a3:d9:d3:90:c3:59: e1:c6:68:57:8c:70:bc:eb:c7:f3:c7:36:bc:e6:c8: 5e:5f:d6:1c:69:e9:1c:75:0f:37:52:f2:72:86:2d: 97:d9:ea:80:a5:7c:17:e4:4a:48:d9:f9:66:1f:6c: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:7B:B9:58:71:2F:2E:16:AB:9C:E5:91:82:30:BB:51:FB:D2:71 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:cb:8b:ef:10:62:5d:5f:f4:fc:c0:4d:64:34:69:56:5a:bd: fd:0c:a3:07:a5:2a:d3:a2:bb:cc:78:1f:7f:ca:a9:dd:f0:1f: 77:28:fe:6d:4e:3b:9d:f0:28:14:6b:56:2e:21:54:aa:e0:63: 3c:a3:52:70:76:b7:36:b4:2c:f1:09:5b:8a:b0:b2:8e:22:5f: 4f:f0:f6:bf:30:78:c3:00:90:84:10:81:88:7a:e3:d3:69:e3: cb:fb:bd:ec:8f:d6:6c:0d:73:b6:60:21:48:89:bf:aa:53:56: 5e:b1:a0:02:9c:df:ee:09:19:75:20:56:8a:66:03:5a:c9:3e: 2f:b9:3f:53:27:6b:e3:91:02:46:15:a2:3b:39:4b:0c:8a:f2: 05:31:d0:34:14:4a:ab:3c:39:fc:aa:d6:5d:bd:6a:3e:6b:ca: 43:c3:b3:a7:37:d1:bf:ab:b0:d2:f9:8b:5e:67:a9:85:95:99: 04:77:0d:82:b7:e8:5d:ae:84:18:9b:65:81:20:36:e6:1e:24: ad:c1:0c:08:4f:98:31:3b:73:2c:eb:4b:3f:c4:72:b0:c0:3c: 95:f6:7b:d8:a7:22:56:3b:ef:f7:a9:16:0a:9e:ec:c1:dc:8c: 67:43:61:90:8f:e5:99:2d:2a:17:c1:64:91:5a:70:1f:6c:86: b2:54:c8:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA3MjMxMTEyMzVaFw0yNjA3MzAxMTEyMzVaMBgxFjAUBgNV BAMTDTZhNjFmNzIzLWU5M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPBh8Qkz/rVgvI/6iMJtga9H3y2epMJ3klYN0ib0hVLvpPRoX5Lloa9Ft5K0AL bRk1+ncvqxeAJ0G40O1o6QXHuox63ILnZ0yKnDHVs+g96Vb43tY0Sbtuq7+ltzgX 5aM7lQHi8by6nCnYnq5l7BYebnRCR9Cqx0fZ8X53BEKRVmgi45zWW3BsF8xCwbFb zwtZ5kxJPtONDnhNtWaw9Yri/J9CMEiQ1hufZVufXC3phlinO9yjs3A6RH1mcUzo 8bzi3Wi0rsIVn2/EOaPZ05DDWeHGaFeMcLzrx/PHNrzmyF5f1hxp6Rx1DzdS8nKG LZfZ6oClfBfkSkjZ+WYfbN7ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsbF7uVhx Ly4Wq5zlkYIwu1H70nEwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+y4vvEGJdX/T8wE1kNGlWWr39DKMHpSrTorvMeB9/yqnd8B93KP5tTjud8CgU a1YuIVSq4GM8o1Jwdrc2tCzxCVuKsLKOIl9P8Pa/MHjDAJCEEIGIeuPTaePL+73s j9ZsDXO2YCFIib+qU1ZesaACnN/uCRl1IFaKZgNayT4vuT9TJ2vjkQJGFaI7OUsM ivIFMdA0FEqrPDn8qtZdvWo+a8pDw7OnN9G/q7DS+YteZ6mFlZkEdw2Ct+hdroQY m2WBIDbmHiStwQwIT5gxO3Ms60s/xHKwwDyV9nvYpyJWO+/3qRYKnuzB3IxnQ2GQ j+WZLSoXwWSRWnAfbIayVMin -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:04 2026 by rpki-client