$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json) Hash identifier: akSQEzJpH/u3a15UddKuO97ON45WH326Y9qreuiQQig= Subject key identifier: B4:56:16:DB:A5:CE:E6:E7:8B:4B:51:29:0F:79:07:79:E8:8B:07:C0 Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 Certificate issuer: /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft Manifest number: 29 Signing time: Thu 23 Jul 2026 10:51:29 +0000 Manifest this update: Thu 23 Jul 2026 10:51:28 +0000 Manifest next update: Thu 30 Jul 2026 10:51:28 +0000 Files and hashes: 1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: 3xbPK24Ico+tYWhGHzjtqOCxDyfOG8mdMovPCALR5Oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Validity Not Before: Jul 23 10:51:28 2026 GMT Not After : Jul 30 10:51:28 2026 GMT Subject: CN=6a61f230-5a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:42:e0:f7:98:f6:80:30:2f:58:7c:d1:2f: c0:0b:4d:65:c5:04:85:87:e3:18:2d:75:1f:cd:f6: 17:c1:11:df:d6:6a:85:ae:bf:7c:d8:d0:6c:e0:98: 86:9c:fc:72:7c:2b:b5:ee:76:1b:5a:a1:e4:d6:5d: b4:12:61:e8:da:1b:99:ab:40:4f:dd:8d:0c:97:d6: ec:1e:93:2f:77:f1:54:9f:23:74:c0:46:ac:ea:6e: 8e:b1:86:fb:34:18:e0:aa:56:df:39:aa:0c:3e:4a: 4a:99:f0:f1:e9:92:bf:4a:94:9a:d2:39:e3:1f:d6: de:de:5f:4e:19:7f:48:04:65:47:c2:20:a2:f6:7a: c5:e8:ac:95:1d:ae:11:a7:a5:95:3b:dd:3e:5a:00: 66:1b:a1:65:c4:0f:d7:1e:2d:2a:2e:4e:9a:d5:9d: 21:a9:49:0c:d9:f9:d3:7e:cf:ad:1c:61:60:0e:82: f4:cb:43:57:bd:ff:d4:a6:db:a1:ef:10:65:1f:fb: 72:13:50:29:a8:21:a9:14:3c:22:25:cb:2a:d0:c0: 20:2d:d1:78:81:28:7f:55:8b:2a:6d:42:12:22:f4: 62:b8:f5:d5:a2:b1:26:eb:22:a5:8e:a8:96:e3:1b: 06:a5:63:d8:da:9e:d8:0d:3f:ed:17:a3:c6:46:81: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:56:16:DB:A5:CE:E6:E7:8B:4B:51:29:0F:79:07:79:E8:8B:07:C0 X509v3 Authority Key Identifier: keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:47:df:eb:64:f9:e2:cb:28:2a:3b:c9:ee:e5:45:c6:67: 40:ac:db:06:43:82:00:15:0c:0e:11:ee:17:af:c7:71:31:46: fa:e8:c5:3d:97:70:8d:8d:dd:5e:05:30:b3:0c:ef:14:2d:48: 06:a8:46:ea:a0:33:98:65:ef:7e:5e:a4:23:19:56:55:44:3c: bd:03:f7:a8:61:3b:0c:fb:9a:dd:94:cb:4c:e7:54:86:fc:02: 87:c2:19:0c:23:6b:64:96:e1:71:7e:09:7c:b2:18:34:1d:4b: b4:b0:d4:aa:23:39:61:13:5e:ff:7b:e7:c4:22:16:28:fc:10: ab:52:38:52:84:94:a2:f0:81:3f:dd:f3:13:fb:ff:64:57:42: e5:26:84:fb:40:ac:43:68:96:29:3a:f4:cd:90:3e:24:23:30: 06:66:89:42:e6:25:0b:54:00:1f:f4:39:fe:5f:3b:4c:dd:91: 62:d5:bf:a8:d0:15:14:ca:fe:bb:3d:59:ca:2a:15:87:3c:9c: 46:75:cb:4e:c6:b2:16:8c:17:2f:58:b0:05:39:b5:02:78:b4: 19:11:e8:be:c4:4d:08:34:9c:ef:ab:d6:52:fc:a8:64:64:0d: 22:66:bb:9e:43:ff:c8:82:7b:81:7e:9d:7a:55:8e:91:71:dd: 5a:39:39:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDcyNzExMC8GA1UEBRMoMzYxMDRBRDVEMUNFMjlGQTZGMDM1RDU5NjkwQ0ZFMTIz OTExODU5NTAeFw0yNjA3MjMxMDUxMjhaFw0yNjA3MzAxMDUxMjhaMBgxFjAUBgNV BAMTDTZhNjFmMjMwLTVhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChTkLg95j2gDAvWHzRL8ALTWXFBIWH4xgtdR/N9hfBEd/WaoWuv3zY0GzgmIac /HJ8K7XudhtaoeTWXbQSYejaG5mrQE/djQyX1uweky938VSfI3TARqzqbo6xhvs0 GOCqVt85qgw+SkqZ8PHpkr9KlJrSOeMf1t7eX04Zf0gEZUfCIKL2esXorJUdrhGn pZU73T5aAGYboWXED9ceLSouTprVnSGpSQzZ+dN+z60cYWAOgvTLQ1e9/9Sm26Hv EGUf+3ITUCmoIakUPCIlyyrQwCAt0XiBKH9ViyptQhIi9GK49dWisSbrIqWOqJbj GwalY9jantgNP+0Xo8ZGgUBLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtFYW26XO 5ueLS1EpD3kHeeiLB8AwHwYDVR0jBBgwFoAUNhBK1dHOKfpvA11ZaQz+EjkRhZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0Y4MjNDOUE4NDlG RDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2ZwdkExMVphUXotRWprUmha VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhCSzFkSE9LZnB2QTExWmFRei1FamtSaFpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NzI3L0Y4MjNDOUE4NDlGRDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2Zw dkExMVphUXotRWprUmhaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfbEff62T54ssoKjvJ7uVFxmdArNsGQ4IAFQwOEe4Xr8dxMUb66MU9l3CNjd1e BTCzDO8ULUgGqEbqoDOYZe9+XqQjGVZVRDy9A/eoYTsM+5rdlMtM51SG/AKHwhkM I2tkluFxfgl8shg0HUu0sNSqIzlhE17/e+fEIhYo/BCrUjhShJSi8IE/3fMT+/9k V0LlJoT7QKxDaJYpOvTNkD4kIzAGZolC5iULVAAf9Dn+XztM3ZFi1b+o0BUUyv67 PVnKKhWHPJxGdctOxrIWjBcvWLAFObUCeLQZEei+xE0INJzvq9ZS/KhkZA0iZrue Q//IgnuBfp16VY6Rcd1aOTmy -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:09 2026 by rpki-client