$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: LmI3i9vfYguMOZBp2lY8oWDBfKfVsTYuD8YnqaHnVLQ= Subject key identifier: A2:16:17:5B:5D:96:60:AA:76:1C:15:72:BA:9F:FF:B3:C1:B2:D1:29 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 01E3 Signing time: Thu 23 Jul 2026 04:57:24 +0000 Manifest this update: Thu 23 Jul 2026 04:57:24 +0000 Manifest next update: Thu 30 Jul 2026 04:57:24 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: YB7dXLQEePChBMk7Pc+A9Y/sKBjCLs5qQw3eQ84khzU=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jul 23 04:57:24 2026 GMT Not After : Jul 30 04:57:24 2026 GMT Subject: CN=6a619f34-b282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:71:1f:d9:c2:85:00:05:ba:93:d4:be:d1: c1:9c:7c:9b:d5:4d:25:6d:42:13:9b:90:42:aa:71: 34:e1:17:bc:59:2a:4b:10:00:ae:75:e8:2a:21:61: b1:d2:a0:c1:c4:fc:c0:c8:27:d0:12:7c:2c:06:69: 44:31:97:19:80:62:ff:53:dd:a8:72:08:4d:90:3d: a1:41:4a:21:2e:d1:c5:c7:e8:bd:19:70:95:dc:11: 41:64:62:ae:c6:13:38:b4:f5:80:bf:e1:78:9b:4c: 7e:25:b9:d5:45:a6:1c:94:51:78:ba:bd:64:41:98: 95:81:57:8b:a8:f7:8c:9a:3a:21:57:86:ba:49:b7: 57:c5:f8:96:30:43:f6:e4:88:76:15:6d:01:b8:c4: b5:11:35:77:0e:ae:28:ba:c7:ab:4d:83:c4:35:91: e3:13:ef:31:d6:04:a8:dd:ac:4b:ce:c2:ef:51:2b: ba:51:64:c1:df:8a:da:dd:51:55:e7:38:64:38:05: f0:e2:8d:39:5e:36:cb:3e:78:a6:a9:38:9d:60:5c: e8:59:48:53:ed:02:08:9b:a0:7e:e5:20:ab:4b:34: f7:82:c8:d0:b7:25:07:22:77:45:fb:42:48:99:46: 7c:67:cb:6c:ff:c7:15:c1:86:35:b2:89:20:d0:80: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:17:5B:5D:96:60:AA:76:1C:15:72:BA:9F:FF:B3:C1:B2:D1:29 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e2:07:41:41:9e:69:d5:5d:dd:d1:9a:9d:5a:c4:b8:87:a9: 99:58:7c:47:f6:e9:2a:32:79:12:0a:64:8c:bf:2d:2c:58:91: 88:c5:b8:a6:b8:d8:0a:96:6a:db:96:c5:ee:10:17:6b:dd:83: 22:f2:6f:07:7e:dc:4f:03:b5:58:ff:08:68:31:a5:e0:f9:e1: 72:de:01:8e:e4:36:ef:40:14:22:bd:42:02:d9:c8:27:a5:7d: 8a:d5:ff:90:63:17:f0:c8:10:5b:a1:e8:94:24:22:1f:65:f7: a9:2b:26:23:7f:25:ee:b4:31:a2:c4:05:54:f7:68:b1:6a:74: d3:79:07:3c:20:1b:53:3f:37:53:d6:25:b0:ea:64:07:2c:c6: 87:1f:6a:24:b8:06:f1:4e:29:e2:a2:b2:2e:d3:20:d0:c2:fa: 87:1e:4f:43:41:0a:2a:20:15:e2:0b:86:d6:7c:ac:19:47:f4: d0:2b:c8:64:0c:86:8c:06:4a:8b:aa:2a:52:f6:9f:96:58:84: 60:05:bd:26:65:de:aa:6b:29:65:a0:67:0c:8d:b1:af:87:31: 01:ba:14:d7:ad:00:d2:16:21:99:13:78:8b:f2:fe:f1:66:55: b8:49:cc:17:fa:fd:73:de:10:22:62:5c:cd:e0:9b:22:63:90: a5:89:6d:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYwNzIzMDQ1NzI0WhcNMjYwNzMwMDQ1NzI0WjAYMRYwFAYD VQQDEw02YTYxOWYzNC1iMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo21xH9nChQAFupPUvtHBnHyb1U0lbUITm5BCqnE04Re8WSpLEACudegqIWGx 0qDBxPzAyCfQEnwsBmlEMZcZgGL/U92ocghNkD2hQUohLtHFx+i9GXCV3BFBZGKu xhM4tPWAv+F4m0x+JbnVRaYclFF4ur1kQZiVgVeLqPeMmjohV4a6SbdXxfiWMEP2 5Ih2FW0BuMS1ETV3Dq4ouserTYPENZHjE+8x1gSo3axLzsLvUSu6UWTB34ra3VFV 5zhkOAXw4o05XjbLPnimqTidYFzoWUhT7QIIm6B+5SCrSzT3gsjQtyUHIndF+0JI mUZ8Z8ts/8cVwYY1sokg0IC+gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIWF1td lmCqdhwVcrqf/7PBstEpMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASOIHQUGeadVd3dGanVrEuIepmVh8R/bpKjJ5EgpkjL8tLFiRiMW4prjYCpZq 25bF7hAXa92DIvJvB37cTwO1WP8IaDGl4Pnhct4BjuQ270AUIr1CAtnIJ6V9itX/ kGMX8MgQW6HolCQiH2X3qSsmI38l7rQxosQFVPdosWp003kHPCAbUz83U9YlsOpk ByzGhx9qJLgG8U4p4qKyLtMg0ML6hx5PQ0EKKiAV4guG1nysGUf00CvIZAyGjAZK i6oqUvaflliEYAW9JmXeqmspZaBnDI2xr4cxAboU160A0hYhmRN4i/L+8WZVuEnM F/r9c94QImJczeCbImOQpYltpQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:19:24 2026 by rpki-client