$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: +OlxV/kf2PDj//iKuPlMPWiMim3q3eb3/W4ZJ0+x54g= Subject key identifier: 94:82:CA:A1:52:D4:BA:9E:EF:43:E5:42:AB:B7:77:0D:57:03:48:56 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0217 Signing time: Thu 23 Jul 2026 04:11:28 +0000 Manifest this update: Thu 23 Jul 2026 04:11:28 +0000 Manifest next update: Thu 30 Jul 2026 04:11:28 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: Q62QQh7OvRyVdaLgWp97qwBRAeIcTDKOaq+yaXe9pl4=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jul 23 04:11:28 2026 GMT Not After : Jul 30 04:11:28 2026 GMT Subject: CN=6a619470-d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:84:97:3f:6a:51:b0:e8:c5:63:de:ff:11: c5:42:19:f1:f6:fd:06:5c:ee:ef:5b:8a:3b:72:60: 1c:dd:8c:e3:c1:57:6f:12:46:22:39:8d:62:e8:7d: 2c:7c:45:48:b6:0e:13:15:50:93:b8:d2:4b:55:80: 57:ec:d8:16:53:07:d9:23:4e:a7:8f:47:14:1f:51: 13:d3:29:ed:8f:ac:73:ee:4a:42:0b:0c:53:ff:43: 31:70:f7:ab:7e:4d:e6:47:ec:95:7f:e9:52:65:98: 89:71:ff:28:a6:53:64:66:c8:b0:04:56:d5:17:a6: 4d:0d:e0:a0:59:2e:74:bc:c7:3e:e2:0c:50:d1:d5: 25:ab:d6:2d:3f:89:ad:9e:bf:33:74:8e:99:40:8f: fd:14:53:5c:4a:ad:92:18:77:49:99:a4:99:cf:4d: f9:3c:f5:a6:0e:31:23:cd:13:5f:9e:d2:a3:e3:75: 76:15:6a:4c:76:ab:af:25:f7:a5:6b:12:5a:3d:e7: 20:19:61:c4:2e:58:82:8d:fc:55:2c:51:3b:92:e4: e6:21:06:04:fe:6f:cd:e8:76:1c:04:5b:b3:a5:46: 35:72:6b:c5:33:ec:68:f0:23:37:ad:c2:dc:15:9f: a6:12:31:f1:bf:6f:04:a7:19:52:a6:b1:5e:57:ba: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:82:CA:A1:52:D4:BA:9E:EF:43:E5:42:AB:B7:77:0D:57:03:48:56 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:36:86:f0:0f:fe:71:d0:89:3c:19:b2:ec:ae:1a:43:8a:b3: 77:4b:6c:c3:53:f7:72:18:99:ad:ac:27:ed:6f:87:3c:9f:d4: c5:ee:a2:da:04:ae:bd:63:b4:73:52:a2:d2:0c:c3:15:9b:f9: f9:01:ab:d2:d8:d6:a7:99:1d:be:eb:4a:d1:fa:83:a1:c9:b7: b4:e2:77:de:7b:41:7b:2a:36:d5:d0:bc:be:91:23:50:43:76: 48:b9:96:5d:b0:26:ff:46:2a:87:17:17:c1:2d:a2:84:b8:70: f7:f9:6d:2b:52:d7:96:0f:c0:20:72:02:c5:e4:b2:d7:82:9d: 3d:3d:ed:80:ef:8d:b5:69:56:15:52:ce:cf:bc:e3:c9:67:2c: 2d:02:54:6d:84:f6:d5:28:7d:4f:06:09:86:e3:e1:5d:7b:17: c3:03:ca:42:69:71:67:8f:2f:4a:08:39:48:03:ce:78:15:c1: f1:ff:7e:90:1f:86:27:25:81:47:4c:b5:dd:db:fb:7d:a2:c4: 39:c8:5a:00:0b:a6:b9:ce:15:c3:5b:7f:72:f2:97:11:4d:f7: 52:60:71:c7:51:14:4f:8c:e1:56:85:14:ee:e4:04:e6:80:ac: 75:2e:07:72:a6:82:30:20:b5:a5:5d:d7:84:b6:36:ea:4d:4e: 6e:4e:92:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNzIzMDQxMTI4WhcNMjYwNzMwMDQxMTI4WjAYMRYwFAYD VQQDEw02YTYxOTQ3MC1kMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxziElz9qUbDoxWPe/xHFQhnx9v0GXO7vW4o7cmAc3YzjwVdvEkYiOY1i6H0s fEVItg4TFVCTuNJLVYBX7NgWUwfZI06nj0cUH1ET0yntj6xz7kpCCwxT/0MxcPer fk3mR+yVf+lSZZiJcf8oplNkZsiwBFbVF6ZNDeCgWS50vMc+4gxQ0dUlq9YtP4mt nr8zdI6ZQI/9FFNcSq2SGHdJmaSZz035PPWmDjEjzRNfntKj43V2FWpMdquvJfel axJaPecgGWHELliCjfxVLFE7kuTmIQYE/m/N6HYcBFuzpUY1cmvFM+xo8CM3rcLc FZ+mEjHxv28EpxlSprFeV7obaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSCyqFS 1Lqe70PlQqu3dw1XA0hWMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATTaG8A/+cdCJPBmy7K4aQ4qzd0tsw1P3chiZrawn7W+HPJ/Uxe6i2gSuvWO0 c1Ki0gzDFZv5+QGr0tjWp5kdvutK0fqDocm3tOJ33ntBeyo21dC8vpEjUEN2SLmW XbAm/0YqhxcXwS2ihLhw9/ltK1LXlg/AIHICxeSy14KdPT3tgO+NtWlWFVLOz7zj yWcsLQJUbYT21Sh9TwYJhuPhXXsXwwPKQmlxZ48vSgg5SAPOeBXB8f9+kB+GJyWB R0y13dv7faLEOchaAAumuc4Vw1t/cvKXEU33UmBxx1EUT4zhVoUU7uQE5oCsdS4H cqaCMCC1pV3XhLY26k1Obk6SOA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:09:01 2026 by rpki-client