$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: SO7Vt9DZA1SyqVAbTOsVthpHgAJZ5Gqh8ueUUo/ftxQ= Subject key identifier: 08:BA:2C:BD:66:01:7B:E0:96:33:AE:4B:59:D7:FE:40:C1:3F:9C:97 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1FFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1F05 Signing time: Wed 22 Jul 2026 16:09:37 +0000 Manifest this update: Wed 22 Jul 2026 16:09:36 +0000 Manifest next update: Wed 29 Jul 2026 16:09:36 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: OJjuyr4JtaMz4+kEusTo1CTux4XQ/Lr2bbjqlyWjiog=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: FcQoBQzrm4DXBzyd5KaBIoE7pHmnuEdneqNX5cir0zc=) 3: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: OGWHocd14Ns6wl/8wGXYe1FqfJqjBsfhEzPPdCk/dFo=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 9gHnkQpVuVjgh/19/P0O5xQq1RyKtz9sAjQNdfQWEbU=) 6: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8186 (0x1ffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Jul 22 16:09:36 2026 GMT Not After : Jul 29 16:09:36 2026 GMT Subject: CN=6a60eb41-8cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:97:1e:87:15:a8:fe:52:50:b6:1b:f6:05: 6c:d9:18:b7:0d:00:2a:32:c1:47:70:90:3f:c8:c8: 79:3f:90:06:d1:f9:7f:69:f8:76:85:ba:ff:b7:7b: 5e:61:7b:0f:d3:40:8e:da:4b:eb:cd:4d:95:df:b0: 24:4d:82:39:49:b7:aa:2f:32:c7:95:68:44:75:9f: b0:3a:8a:22:1d:78:cb:a4:54:db:90:9d:f4:2a:e5: b9:33:8d:c0:32:23:dc:83:a5:21:6c:9e:db:46:cf: ac:ae:c8:f0:5b:af:43:b2:60:da:cc:7d:61:0c:7c: 33:7c:68:3b:04:96:a9:8b:18:f5:07:71:cc:19:52: 6b:5a:58:32:3b:d7:76:79:ed:e2:21:d8:15:59:89: b0:e9:55:ff:6a:3a:89:46:bb:1e:4c:98:f6:8b:6e: 2f:bf:7e:e7:60:b3:0e:eb:4d:df:8d:05:7a:43:a6: c9:b5:51:f9:41:b9:98:68:99:39:13:f6:b6:bc:6c: 75:1f:16:ab:63:8e:d1:4d:ae:0a:e4:8b:77:50:f9: 47:16:ef:72:31:14:9b:b1:3c:d0:ef:89:53:cf:c0: 84:08:1e:9f:8e:65:08:e9:78:62:2a:f1:92:4f:79: a2:56:b7:1c:48:90:93:47:4c:8f:d5:be:b5:b7:dc: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:2C:BD:66:01:7B:E0:96:33:AE:4B:59:D7:FE:40:C1:3F:9C:97 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:85:95:3b:d2:ce:93:d7:db:30:3f:a5:fc:0c:eb:a8:ab:c0: 78:2e:f7:86:6f:fb:a6:56:ed:b6:f7:a6:28:83:11:55:71:bf: 9c:22:c2:4d:e8:d5:f9:a2:39:18:26:ed:db:4f:f5:65:91:47: ee:06:98:3c:54:5c:b1:25:14:7c:94:5c:e4:ac:a7:c3:c0:ce: c1:ac:75:18:ea:b6:48:4a:b0:47:e9:ac:60:67:3f:a5:ac:0c: e7:86:3a:03:8e:43:0c:e8:d9:8d:2c:e1:53:78:10:47:fc:a0: ad:f1:32:a0:c4:9d:48:9a:21:63:2e:e3:cc:d0:0d:55:5d:44: 38:0f:0e:96:2e:5f:a0:c4:78:4a:06:f1:ad:f4:7e:dc:d4:7a: f0:96:1d:59:fe:c5:b3:10:99:f4:0c:a6:65:7a:72:d7:ee:01: 0b:38:a7:04:50:29:9c:2e:50:3f:37:10:03:b2:6f:dd:8d:5d: 99:85:3b:2a:27:5a:5f:14:a5:2f:09:63:12:10:d9:7e:ee:b8: 86:20:56:7c:ee:5c:c0:94:04:58:c3:6a:59:4f:c7:31:17:d7: ab:c8:44:e1:64:68:0f:d6:34:f6:84:43:af:42:c8:58:84:26: d2:0e:4f:2d:c2:60:af:26:e0:10:a1:4e:68:89:1f:bc:0d:cb: 7f:a3:aa:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwNzIyMTYwOTM2WhcNMjYwNzI5MTYwOTM2WjAYMRYwFAYD VQQDEw02YTYwZWI0MS04Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIWXHocVqP5SULYb9gVs2Ri3DQAqMsFHcJA/yMh5P5AG0fl/afh2hbr/t3te YXsP00CO2kvrzU2V37AkTYI5SbeqLzLHlWhEdZ+wOooiHXjLpFTbkJ30KuW5M43A MiPcg6UhbJ7bRs+srsjwW69DsmDazH1hDHwzfGg7BJapixj1B3HMGVJrWlgyO9d2 ee3iIdgVWYmw6VX/ajqJRrseTJj2i24vv37nYLMO603fjQV6Q6bJtVH5QbmYaJk5 E/a2vGx1HxarY47RTa4K5It3UPlHFu9yMRSbsTzQ74lTz8CECB6fjmUI6XhiKvGS T3miVrccSJCTR0yP1b61t9wyzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi6LL1m AXvgljOuS1nX/kDBP5yXMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuoWVO9LOk9fbMD+l/AzrqKvAeC73hm/7plbttvemKIMRVXG/nCLCTejV+aI5 GCbt20/1ZZFH7gaYPFRcsSUUfJRc5Kynw8DOwax1GOq2SEqwR+msYGc/pawM54Y6 A45DDOjZjSzhU3gQR/ygrfEyoMSdSJohYy7jzNANVV1EOA8Oli5foMR4SgbxrfR+ 3NR68JYdWf7FsxCZ9AymZXpy1+4BCzinBFApnC5QPzcQA7Jv3Y1dmYU7KidaXxSl LwljEhDZfu64hiBWfO5cwJQEWMNqWU/HMRfXq8hE4WRoD9Y09oRDr0LIWIQm0g5P LcJgrybgEKFOaIkfvA3Lf6Oqfw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:05:23 2026 by rpki-client