$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: brrJuw9MS9IC74XrI/bFoFesX5dr3TuKfXWR8pfSoGE= Subject key identifier: B2:76:DE:95:EE:63:F9:6B:7F:41:7E:E3:0B:AB:0E:49:07:80:9D:7F Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 030C Signing time: Thu 23 Jul 2026 02:06:52 +0000 Manifest this update: Thu 23 Jul 2026 02:06:52 +0000 Manifest next update: Thu 30 Jul 2026 02:06:52 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: x/5AXVFOoWp47acb0HnB6wiWpLim9N+yStIT/MaP2v0=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: cFYWu32x1i7BJE6ej7tEMyDU8GB+7ACwMuOY9C/hNmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Jul 23 02:06:52 2026 GMT Not After : Jul 30 02:06:52 2026 GMT Subject: CN=6a61773c-b453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:ac:a1:cf:62:2a:fd:dd:81:b7:09:f7:ed: 2a:e6:89:b5:b3:b5:bc:cc:ad:a2:db:95:ae:b8:2d: 1e:9d:1d:8c:39:00:1c:c1:89:55:14:1e:b7:e6:e9: cb:51:54:02:15:2e:83:a6:2a:a0:e3:e9:16:05:9d: b8:ed:6d:bb:f0:68:7c:28:b7:00:a7:10:80:9b:bd: dd:44:fd:6b:e7:5b:6e:21:c6:e5:5f:6c:b7:b7:2d: 47:f8:4b:fe:ee:9b:70:cf:50:7f:f6:4b:51:0a:47: ee:2e:d9:74:5b:f7:b3:82:ae:f9:f6:a4:a8:de:7f: 67:7c:5a:6e:64:27:3c:ee:25:84:01:8f:45:77:0f: 5e:4f:1a:3a:b5:1c:cb:e8:df:dc:4f:7c:d5:1d:8a: 15:58:6e:76:c2:8a:79:2e:df:5a:a8:95:be:ed:05: be:b8:60:27:db:65:4a:cc:86:8c:ff:57:81:9d:82: 44:8d:7a:2b:fa:eb:44:6d:77:30:a0:d7:a4:81:bf: 24:ae:a6:9d:53:c8:18:fe:f8:10:1d:74:4b:d7:2f: 5c:24:80:71:d8:50:13:67:2c:20:44:f1:33:7a:05: f9:a9:7e:90:ca:02:de:11:47:57:5c:2e:92:a6:18: 32:76:a6:a6:3c:a0:9f:7a:74:bd:59:c0:ba:d9:71: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:DE:95:EE:63:F9:6B:7F:41:7E:E3:0B:AB:0E:49:07:80:9D:7F X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:62:9f:b3:38:b9:aa:88:b2:5f:5a:fc:b8:2d:01:37:6f: 94:22:8c:67:86:75:8d:ed:28:f9:c1:11:a4:82:c1:13:c4:1d: b8:77:12:e3:76:02:23:9a:6b:a1:55:2c:df:45:1d:27:f6:c5: c2:34:38:7f:70:0c:76:fe:03:bc:e3:b5:c1:77:47:f0:e8:b3: 1f:16:9a:44:90:fb:ed:a8:c3:1f:0b:d1:33:85:30:6e:42:25: fe:cc:4b:5e:78:16:25:c1:56:f6:27:dd:73:b2:34:c8:a3:93: ef:0e:a4:a4:9f:f7:44:47:a9:ca:96:4a:dc:cd:67:b1:5d:25: 95:a4:d1:24:cf:4b:61:c8:49:3f:93:2f:6f:95:e6:00:b7:a5: 8f:d1:16:46:ba:38:6b:52:32:91:00:cb:3d:2d:06:41:e9:8c: 2c:e3:2c:9c:50:33:b6:8d:07:9a:d2:e2:78:12:59:da:a9:1b: 98:a5:27:00:e2:38:1c:0a:0b:be:d0:40:84:b4:4b:ed:2d:19: 4c:f1:86:18:98:61:3f:96:29:a1:3e:8b:02:66:d6:7d:84:38: 65:03:4e:0f:06:a2:0a:1b:28:7c:9f:13:02:7a:c2:56:98:2d: c8:bc:cb:cc:53:51:f2:a9:b5:c6:1e:89:9e:c6:c9:ba:91:19: b5:d4:3d:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjYwNzIzMDIwNjUyWhcNMjYwNzMwMDIwNjUyWjAYMRYwFAYD VQQDEw02YTYxNzczYy1iNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5isoc9iKv3dgbcJ9+0q5om1s7W8zK2i25WuuC0enR2MOQAcwYlVFB635unL UVQCFS6Dpiqg4+kWBZ247W278Gh8KLcApxCAm73dRP1r51tuIcblX2y3ty1H+Ev+ 7ptwz1B/9ktRCkfuLtl0W/ezgq759qSo3n9nfFpuZCc87iWEAY9Fdw9eTxo6tRzL 6N/cT3zVHYoVWG52wop5Lt9aqJW+7QW+uGAn22VKzIaM/1eBnYJEjXor+utEbXcw oNekgb8krqadU8gY/vgQHXRL1y9cJIBx2FATZywgRPEzegX5qX6QygLeEUdXXC6S phgydqamPKCfenS9WcC62XExDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJ23pXu Y/lrf0F+4wurDkkHgJ1/MB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFj1in7M4uaqIsl9a/LgtATdvlCKMZ4Z1je0o+cERpILBE8QduHcS43YCI5pr oVUs30UdJ/bFwjQ4f3AMdv4DvOO1wXdH8OizHxaaRJD77ajDHwvRM4UwbkIl/sxL XngWJcFW9ifdc7I0yKOT7w6kpJ/3REepypZK3M1nsV0llaTRJM9LYchJP5Mvb5Xm ALelj9EWRro4a1IykQDLPS0GQemMLOMsnFAzto0HmtLieBJZ2qkbmKUnAOI4HAoL vtBAhLRL7S0ZTPGGGJhhP5YpoT6LAmbWfYQ4ZQNODwaiChsofJ8TAnrCVpgtyLzL zFNR8qm1xh6JnsbJupEZtdQ9fA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:42 2026 by rpki-client