$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: iU17sXO/c+2T7HLmRfdNh2LKxbKvLnlJArPsiF1anzM= Subject key identifier: 47:F3:73:7A:AE:DA:D7:7C:65:94:E7:01:91:C8:FD:AC:81:CA:0A:42 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 02A8 Signing time: Thu 23 Jul 2026 02:41:04 +0000 Manifest this update: Thu 23 Jul 2026 02:41:03 +0000 Manifest next update: Thu 30 Jul 2026 02:41:03 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: VH0V/5Z+Ixz5rjiWlpybdy968FurObQhJrMcRILOAPA=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Jul 23 02:41:03 2026 GMT Not After : Jul 30 02:41:03 2026 GMT Subject: CN=6a617f40-d1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:2d:26:de:ce:14:ac:b7:26:c3:10:80:51: 56:3a:07:bb:32:00:07:14:ca:e7:1f:d4:42:7d:ca: 1f:b6:c3:df:7d:1e:67:15:19:d5:eb:dc:5e:29:2e: d2:da:39:05:a3:46:80:da:2b:9a:61:bc:55:f2:9e: e4:f5:fb:e9:1b:ff:20:be:ae:3c:f0:49:20:65:6a: 78:dc:1f:7e:e4:e5:1e:7e:30:27:49:fc:c0:cc:bc: 42:71:51:ef:03:cb:02:58:5c:37:24:02:bb:c5:15: 02:dd:f1:8a:2e:dc:7a:e7:52:f0:f7:4e:bf:69:80: e0:9f:e3:db:71:03:86:87:af:e4:68:cd:08:e2:9b: 5a:2d:5f:c7:98:6a:ad:99:7a:d7:4a:48:5c:68:95: ce:7e:52:c9:32:bb:8a:8d:91:bb:3e:18:c2:dc:b3: f5:2d:7e:29:1e:55:02:20:6e:f4:0e:0c:67:e6:a9: 7f:35:0a:99:e3:2e:19:b5:f2:62:ab:36:a5:17:3b: 62:fc:66:1b:97:71:f1:47:c0:08:2d:e6:b6:f0:c7: 7a:c3:13:01:25:74:d4:e4:a4:a0:2d:79:f1:9a:1f: 65:98:d6:0f:87:e4:ce:34:81:7c:d5:8f:fa:d3:02: fc:69:78:a9:d5:08:8f:8c:de:e6:fd:62:2a:1d:a4: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:73:7A:AE:DA:D7:7C:65:94:E7:01:91:C8:FD:AC:81:CA:0A:42 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bf:6a:36:d2:b8:d5:37:0d:2e:c0:d2:4d:df:f4:7a:10:23: 22:8d:50:72:07:52:e3:8a:90:40:7a:5b:bc:ca:e8:e2:d8:96: 0b:bf:3e:cf:9d:85:7a:03:57:ae:6f:3a:b5:fd:07:a4:c3:37: 3b:ae:95:58:2a:f3:f2:32:2a:0a:3f:e9:2b:0e:ea:14:6d:bd: 34:09:b4:ff:61:34:58:87:bd:ad:c7:aa:d3:ba:94:f9:0f:16: 39:fa:cf:e5:1a:3f:2f:e7:3c:d2:bf:c2:0a:c9:5b:cf:e3:08: 5a:71:8f:2a:23:59:34:b8:f2:d2:09:4e:3c:57:6f:0c:b8:1a: 3c:ad:f9:b0:bc:6f:6f:54:1b:a3:ca:99:39:ca:fe:0a:16:83: 98:73:09:85:aa:4c:0c:95:14:4d:9e:f3:da:25:9c:b5:8b:b7: c4:b7:42:11:e1:6c:88:ec:de:cc:88:f9:ea:67:18:0b:4a:6b: c2:13:f5:d5:30:d9:6f:21:49:cf:89:84:78:db:b7:4c:d0:cb: dd:90:77:4e:d1:3d:f2:35:71:f7:c0:af:67:55:36:b6:33:ae: 4c:6d:14:ae:c4:fa:39:36:cb:64:f2:03:31:8d:8d:86:f0:dd: f5:c6:5c:24:d8:a9:f8:33:69:27:66:97:32:ea:09:5b:07:00: c0:c4:8f:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjYwNzIzMDI0MTAzWhcNMjYwNzMwMDI0MTAzWjAYMRYwFAYD VQQDEw02YTYxN2Y0MC1kMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJUtJt7OFKy3JsMQgFFWOge7MgAHFMrnH9RCfcoftsPffR5nFRnV69xeKS7S 2jkFo0aA2iuaYbxV8p7k9fvpG/8gvq488EkgZWp43B9+5OUefjAnSfzAzLxCcVHv A8sCWFw3JAK7xRUC3fGKLtx651Lw906/aYDgn+PbcQOGh6/kaM0I4ptaLV/HmGqt mXrXSkhcaJXOflLJMruKjZG7PhjC3LP1LX4pHlUCIG70Dgxn5ql/NQqZ4y4ZtfJi qzalFzti/GYbl3HxR8AILea28Md6wxMBJXTU5KSgLXnxmh9lmNYPh+TONIF81Y/6 0wL8aXip1QiPjN7m/WIqHaTIwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfzc3qu 2td8ZZTnAZHI/ayBygpCMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACb9qNtK41TcNLsDSTd/0ehAjIo1QcgdS44qQQHpbvMro4tiWC78+z52FegNX rm86tf0HpMM3O66VWCrz8jIqCj/pKw7qFG29NAm0/2E0WIe9rceq07qU+Q8WOfrP 5Ro/L+c80r/CCslbz+MIWnGPKiNZNLjy0glOPFdvDLgaPK35sLxvb1Qbo8qZOcr+ ChaDmHMJhapMDJUUTZ7z2iWctYu3xLdCEeFsiOzezIj56mcYC0prwhP11TDZbyFJ z4mEeNu3TNDL3ZB3TtE98jVx98CvZ1U2tjOuTG0UrsT6OTbLZPIDMY2NhvDd9cZc JNip+DNpJ2aXMuoJWwcAwMSP1Q== -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:10 2026 by rpki-client