$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft File: pNgA2xjHwseXEbNfyLfSF9x9TG4.mft (raw, json) Hash identifier: 9o+KYMahbJ3FoEBdAxMajUmzL8OH/HZHakDfmGyrA9E= Subject key identifier: 0B:4D:CA:9D:AA:E4:2B:36:F3:94:5D:51:C2:CD:1B:66:DD:18:2A:60 Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft Manifest number: 3F Signing time: Thu 23 Jul 2026 10:34:04 +0000 Manifest this update: Thu 23 Jul 2026 10:34:04 +0000 Manifest next update: Thu 30 Jul 2026 10:34:04 +0000 Files and hashes: 1: pNgA2xjHwseXEbNfyLfSF9x9TG4.crl (hash: y5Goa4VEMKJblbBc/asKZSK4icG+7w1LZ42OAJbJ2Z4=) 2: NSpCLAyaqxg6bT860Rysuj4wuCY.asa (hash: WOGZUMqAI6V+V+s9p+A2La8WI5R/wW97V+UXiE4SGSA=) 3: B7E7EF7C2C2511F1AC709C159C833773.roa (hash: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=) 4: E1B6596E447211F188990C259B833773.roa (hash: BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Validity Not Before: Jul 23 10:34:04 2026 GMT Not After : Jul 30 10:34:04 2026 GMT Subject: CN=6a61ee1c-d936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:7e:91:15:84:b6:99:be:5d:90:55:2c:19: 7e:c3:99:44:2e:8c:1a:19:55:87:de:72:3e:99:f9: aa:cd:b5:74:43:3d:d5:22:01:78:cd:65:b1:39:e6: ac:43:b3:a6:c6:1b:19:b6:5e:2b:67:96:66:24:a3: 7c:2e:85:e2:f5:5e:22:52:77:5a:16:cf:d7:43:7b: 97:b5:5b:54:2e:aa:23:43:54:3e:22:9f:b0:63:a5: f2:93:40:11:f4:55:29:d2:cd:13:51:cf:2b:73:9d: 8d:45:d5:eb:ad:86:a5:47:62:c1:43:59:4c:1b:b9: 36:00:02:c0:70:85:de:bd:c9:48:7b:55:b0:e7:0d: 02:26:9b:a5:8a:47:d2:7d:4d:52:da:bc:b0:ee:3d: 35:5b:07:8e:7d:a7:f2:d2:8d:31:ce:56:ae:f5:00: f9:2e:9e:19:e8:4d:83:d6:36:91:15:e1:fb:ab:65: cb:dc:d2:38:cc:d7:5c:cb:c6:4d:69:cf:9e:87:e5: a4:3e:aa:9d:21:fe:d2:de:36:53:2e:f9:1f:25:12: f3:44:c6:b2:03:cb:b1:25:90:d7:ce:c0:aa:ee:c4: 41:07:8f:b6:c4:2a:c4:8e:70:f7:92:4b:5d:e5:5c: dd:00:d7:fa:4b:d8:c4:ea:cd:4f:b1:f8:15:df:f5: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4D:CA:9D:AA:E4:2B:36:F3:94:5D:51:C2:CD:1B:66:DD:18:2A:60 X509v3 Authority Key Identifier: keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f0:e3:a4:e9:cf:c6:6d:76:1f:79:94:85:41:ab:62:5a:29: b7:73:83:80:e1:b7:b4:f7:2f:ea:23:8c:67:14:8c:9d:81:d5: f1:82:58:c6:fa:90:84:5a:1a:58:4d:a4:ae:2e:c7:1f:2d:c2: 1a:52:b5:a5:ce:ee:9b:eb:e5:d7:6b:94:d2:67:41:7b:da:d7: 01:e3:5e:56:94:be:74:66:f2:b1:c7:22:24:4f:6f:07:f3:34: a9:7c:e1:a0:9a:92:ba:36:9a:2a:17:ee:66:03:57:fa:4e:33: 54:1e:c7:ed:b7:fe:57:a7:ab:14:1f:b3:82:e8:27:6c:2c:b1: be:cb:fa:6c:ff:7f:87:7f:12:dc:d3:96:fa:20:73:df:eb:7e: b1:16:4f:73:c3:a0:aa:4c:6a:6f:99:fa:a7:4e:df:54:d2:85: 52:33:bf:b8:23:3d:54:b0:c9:44:ca:d1:b6:4e:e0:da:f2:65: 22:dd:29:ab:55:73:d9:36:3b:68:35:2e:1c:61:1c:fa:3e:7a: ac:d3:7f:60:95:03:9d:72:cd:a2:ea:fe:17:97:5e:fb:a4:68: 2b:9d:6d:d7:de:ad:8e:96:f9:12:e8:c3:19:dd:3c:b2:f8:fa: 21:d4:df:9a:ef:bd:22:b2:b5:69:25:3a:63:9c:3a:c3:0f:a7: 7d:77:d0:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE QzdENEM2RTAeFw0yNjA3MjMxMDM0MDRaFw0yNjA3MzAxMDM0MDRaMBgxFjAUBgNV BAMTDTZhNjFlZTFjLWQ5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJEH6RFYS2mb5dkFUsGX7DmUQujBoZVYfecj6Z+arNtXRDPdUiAXjNZbE55qxD s6bGGxm2XitnlmYko3wuheL1XiJSd1oWz9dDe5e1W1QuqiNDVD4in7BjpfKTQBH0 VSnSzRNRzytznY1F1euthqVHYsFDWUwbuTYAAsBwhd69yUh7VbDnDQImm6WKR9J9 TVLavLDuPTVbB459p/LSjTHOVq71APkunhnoTYPWNpEV4furZcvc0jjM11zLxk1p z56H5aQ+qp0h/tLeNlMu+R8lEvNExrIDy7ElkNfOwKruxEEHj7bEKsSOcPeSS13l XN0A1/pL2MTqzU+x+BXf9bnlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC03Knark KzbzlF1Rws0bZt0YKmAwHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RjAwLzBCQjFFNEIwMkMyNTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3Nl WEViTmZ5TGZTRjl4OVRHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQ8OOk6c/GbXYfeZSFQatiWim3c4OA4be09y/qI4xnFIydgdXxgljG+pCEWhpY TaSuLscfLcIaUrWlzu6b6+XXa5TSZ0F72tcB415WlL50ZvKxxyIkT28H8zSpfOGg mpK6NpoqF+5mA1f6TjNUHsftt/5Xp6sUH7OC6CdsLLG+y/ps/3+HfxLc05b6IHPf 636xFk9zw6CqTGpvmfqnTt9U0oVSM7+4Iz1UsMlEytG2TuDa8mUi3SmrVXPZNjto NS4cYRz6Pnqs039glQOdcs2i6v4Xl177pGgrnW3X3q2OlvkS6MMZ3Tyy+Poh1N+a 770isrVpJTpjnDrDD6d9d9CT -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:27 2026 by rpki-client