$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: spaDflEZaSvYW06WR4bJZTAvef8eulWUqh4NRG7DIeE= Subject key identifier: 1D:91:C0:53:23:3A:D4:EF:35:33:3E:93:56:34:D8:06:C6:DC:C5:00 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2AE9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2ADB Signing time: Fri 24 Jul 2026 14:24:24 +0000 Manifest this update: Fri 24 Jul 2026 14:24:23 +0000 Manifest next update: Fri 31 Jul 2026 14:24:23 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: kVKcACahwAHF/c173+FaUcV1L7m+ykNakNekc49nrfE=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: Pj58dNaZu/U/JcWFr9d0FmcQsI/n3fUrfDxW8/v49HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 14:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10985 (0x2ae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Jul 24 14:24:23 2026 GMT Not After : Jul 31 14:24:23 2026 GMT Subject: CN=6a637598-8266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:8c:5f:e3:01:2c:6f:11:b6:fe:15:a4:c8: c6:0c:54:76:d2:e6:30:76:3c:76:4f:e2:a5:71:52: 16:9f:64:18:04:88:ad:aa:a8:ae:74:1c:e0:0a:19: 55:34:02:4d:18:29:35:f6:60:8f:6e:e6:30:df:13: 26:f0:73:28:8f:d3:1a:d6:a6:c5:4c:e4:3f:8b:e8: 8d:7d:76:f2:6a:bb:5c:c6:d1:5f:c9:15:16:48:c0: 0b:d4:6a:2a:57:68:32:57:41:0e:64:2d:b2:7f:15: 9a:92:c2:77:7a:49:f0:48:18:09:c8:71:ef:ea:c8: 93:6e:96:a9:dd:12:ea:0d:d8:91:23:da:51:82:5e: 45:a9:3c:4c:d1:55:f2:e4:d4:f6:e1:88:98:f6:36: 8c:36:13:e7:b7:65:96:6e:9b:9a:84:74:38:a9:42: 37:8e:bb:f9:13:23:9e:f4:b2:c1:37:57:a7:d2:02: 3a:7f:ed:17:2a:f7:39:02:dc:e8:b7:2b:30:ee:b8: e0:6c:d8:6e:11:d9:19:59:a2:07:69:36:23:a7:72: 0a:e2:2d:6b:0f:fa:aa:c3:13:0a:f3:58:bb:a2:23: 97:83:12:0b:8f:16:1d:50:e8:b3:60:f2:91:f3:0e: 85:25:bf:ea:54:04:c9:a5:17:59:7d:76:95:80:1b: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:C0:53:23:3A:D4:EF:35:33:3E:93:56:34:D8:06:C6:DC:C5:00 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:b2:01:6f:3f:61:cc:60:1d:ae:08:68:ea:d0:80:46:c3: 48:35:b4:dc:5b:81:3f:d8:6d:45:1a:40:6b:6a:63:f1:7e:13: 52:0e:3d:cf:55:33:72:f4:ce:df:3f:f0:d1:fd:2e:f9:f6:00: 04:f1:ba:b5:62:ac:b7:b8:ea:2d:df:fb:2e:3b:03:bd:52:98: 84:b5:47:99:f7:1f:99:d7:e1:3d:7e:52:34:b2:2d:3c:43:92: 28:ae:21:d9:8e:cf:47:d9:b6:e8:4f:ae:8b:3d:2e:5f:27:d9: 54:52:26:5a:79:49:52:ad:b4:7b:2b:0c:e6:53:76:99:ef:69: 65:3c:98:ef:03:f2:00:05:c7:17:3c:e7:d3:f1:c9:c6:51:a9: fc:f4:fa:17:61:ef:ea:ef:38:f5:8b:42:0c:7e:1f:d4:8c:8f: 0f:6f:73:b5:e2:82:2f:8a:27:fb:ab:16:12:09:46:d5:68:82: f0:3f:cb:04:b1:b8:df:be:d1:9a:50:9c:11:58:c8:78:48:6b: 1d:88:7d:f1:44:a2:cf:eb:e8:d7:8e:70:f6:da:c7:fc:26:94: 70:d9:b9:c3:8a:d7:e0:17:b6:b8:3e:03:cd:26:2b:43:33:26: 9f:b1:e4:06:5a:6b:68:04:06:8f:94:bf:06:a7:69:74:cd:2d: f1:a9:74:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYwNzI0MTQyNDIzWhcNMjYwNzMxMTQyNDIzWjAYMRYwFAYD VQQDEw02YTYzNzU5OC04MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgyMX+MBLG8Rtv4VpMjGDFR20uYwdjx2T+KlcVIWn2QYBIitqqiudBzgChlV NAJNGCk19mCPbuYw3xMm8HMoj9Ma1qbFTOQ/i+iNfXbyartcxtFfyRUWSMAL1Goq V2gyV0EOZC2yfxWaksJ3eknwSBgJyHHv6siTbpap3RLqDdiRI9pRgl5FqTxM0VXy 5NT24YiY9jaMNhPnt2WWbpuahHQ4qUI3jrv5EyOe9LLBN1en0gI6f+0XKvc5Atzo tysw7rjgbNhuEdkZWaIHaTYjp3IK4i1rD/qqwxMK81i7oiOXgxILjxYdUOizYPKR 8w6FJb/qVATJpRdZfXaVgBu5ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2RwFMj OtTvNTM+k1Y02AbG3MUAMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALlqyAW8/YcxgHa4IaOrQgEbDSDW03FuBP9htRRpAa2pj8X4TUg49z1UzcvTO 3z/w0f0u+fYABPG6tWKst7jqLd/7LjsDvVKYhLVHmfcfmdfhPX5SNLItPEOSKK4h 2Y7PR9m26E+uiz0uXyfZVFImWnlJUq20eysM5lN2me9pZTyY7wPyAAXHFzzn0/HJ xlGp/PT6F2Hv6u849YtCDH4f1IyPD29zteKCL4on+6sWEglG1WiC8D/LBLG4377R mlCcEVjIeEhrHYh98USiz+vo145w9trH/CaUcNm5w4rX4Be2uD4DzSYrQzMmn7Hk BlpraAQGj5S/BqdpdM0t8al0Xw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:24:51 2026 by rpki-client