$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: xbsffAH2w78dwkew31KKpuJz8lId7gCYILRRt4ednlM= Subject key identifier: 15:9C:91:27:EA:B5:D6:F5:9E:89:36:F0:C5:4E:25:AA:AD:A3:81:52 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01B2 Signing time: Thu 23 Jul 2026 05:42:49 +0000 Manifest this update: Thu 23 Jul 2026 05:42:49 +0000 Manifest next update: Thu 30 Jul 2026 05:42:49 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: XFpA6AZjNB8L2II2TpgCHnYPXqUGGSxKM+HyT4+mDyw=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jul 23 05:42:49 2026 GMT Not After : Jul 30 05:42:49 2026 GMT Subject: CN=6a61a9d9-f5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:62:4a:49:7c:33:45:b4:7a:21:d4:40:6d: 85:b1:0f:29:cd:07:8c:47:75:16:fd:83:aa:b7:9c: 44:b8:fb:53:8c:78:08:55:1d:5d:60:11:e2:7d:34: c9:2c:33:2f:9b:3a:12:e0:86:b6:b6:4e:0c:11:7b: 8b:35:46:97:e1:28:14:da:9d:c2:c7:3e:fe:ac:a0: 04:84:9c:27:c8:82:8b:5a:6c:ff:81:a9:63:f4:ec: 3e:9b:a7:6a:71:d1:21:4b:52:60:c2:fe:a2:c0:58: 0e:ee:28:88:94:ba:1e:41:79:7e:c6:cb:df:2b:a2: b0:ad:50:79:74:74:fe:b8:79:52:87:ca:be:e9:fd: 83:d9:c8:a3:c9:6f:32:6f:3e:3b:9c:6b:6e:98:52: c4:1d:a9:76:d0:23:1f:57:75:05:0b:33:25:97:8a: 39:3f:11:e5:e9:4f:9a:cc:2a:c0:47:06:29:34:b8: 84:fb:3c:ff:00:2f:66:0f:51:ab:b6:31:20:11:d3: 7e:3d:47:7d:3a:16:ad:eb:17:b2:db:e5:de:14:34: 0e:cc:6e:2a:3c:86:d7:17:b5:ea:2e:81:ae:01:3b: 77:e1:5e:e1:fb:6d:79:9a:dc:b3:1a:f1:7c:ec:8f: 8d:54:2d:54:4c:0d:d3:ab:85:27:47:8f:c3:3b:19: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9C:91:27:EA:B5:D6:F5:9E:89:36:F0:C5:4E:25:AA:AD:A3:81:52 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:66:66:fc:ac:7c:e4:f8:a6:4a:3f:cc:a3:9a:d1:bb:80: 87:64:5e:92:ed:7f:34:f0:79:25:ac:8e:2d:9c:86:d8:bb:7a: 6c:6b:bb:cb:e3:ab:de:5c:30:8a:63:5a:eb:54:25:9f:e1:90: 47:32:0c:39:7d:83:84:c0:d4:e0:66:11:6b:5f:15:e1:cc:26: c3:b7:3b:f8:13:88:21:a2:8a:8e:32:bf:c7:38:36:37:3c:c2: dc:3e:cd:c6:c8:43:a6:fa:35:22:f1:04:ad:77:ba:4d:f1:1b: 6e:72:4b:66:4f:b6:e9:a3:9d:17:a5:32:89:7f:10:1e:2a:31: 6b:79:f7:b2:45:df:4b:32:5e:fc:81:27:19:93:8f:8d:7a:6f: c9:bb:72:df:9e:4e:2c:64:64:97:3a:75:1a:04:f0:23:73:c1: eb:f1:88:1c:5c:80:1a:6a:3b:75:29:53:73:96:13:e3:dc:59: 17:14:20:85:4e:35:4e:7a:dd:59:f5:17:24:9b:37:cb:bd:91: 41:d1:e7:40:a9:06:69:5b:2b:ea:f2:39:fa:9d:8c:f5:26:e1: 3f:11:55:8c:06:d8:54:a6:e5:c9:20:7b:c2:23:22:ab:91:23: f5:1a:54:0e:2a:0d:17:43:65:7e:19:6f:f4:f1:24:fc:80:c3: 46:69:3e:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwNzIzMDU0MjQ5WhcNMjYwNzMwMDU0MjQ5WjAYMRYwFAYD VQQDEw02YTYxYTlkOS1mNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx9iSkl8M0W0eiHUQG2FsQ8pzQeMR3UW/YOqt5xEuPtTjHgIVR1dYBHifTTJ LDMvmzoS4Ia2tk4MEXuLNUaX4SgU2p3Cxz7+rKAEhJwnyIKLWmz/galj9Ow+m6dq cdEhS1Jgwv6iwFgO7iiIlLoeQXl+xsvfK6KwrVB5dHT+uHlSh8q+6f2D2cijyW8y bz47nGtumFLEHal20CMfV3UFCzMll4o5PxHl6U+azCrARwYpNLiE+zz/AC9mD1Gr tjEgEdN+PUd9Ohat6xey2+XeFDQOzG4qPIbXF7XqLoGuATt34V7h+215mtyzGvF8 7I+NVC1UTA3Tq4UnR4/DOxn8wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWckSfq tdb1nok28MVOJaqto4FSMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARJtmZvysfOT4pko/zKOa0buAh2Reku1/NPB5JayOLZyG2Lt6bGu7y+Or3lww imNa61Qln+GQRzIMOX2DhMDU4GYRa18V4cwmw7c7+BOIIaKKjjK/xzg2NzzC3D7N xshDpvo1IvEErXe6TfEbbnJLZk+26aOdF6UyiX8QHioxa3n3skXfSzJe/IEnGZOP jXpvybty355OLGRklzp1GgTwI3PB6/GIHFyAGmo7dSlTc5YT49xZFxQghU41Tnrd WfUXJJs3y72RQdHnQKkGaVsr6vI5+p2M9SbhPxFVjAbYVKblySB7wiMiq5Ej9RpU DioNF0Nlfhlv9PEk/IDDRmk+qg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:36 2026 by rpki-client