$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: GtDKd0TjPxjuHuk6S0K0HCWZqxy2TPrM52BbNFtu3ds= Subject key identifier: 53:32:6A:43:CB:F7:E4:A0:06:ED:1E:3F:9A:5D:50:E7:6A:31:B6:21 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0215 Signing time: Thu 23 Jul 2026 04:15:44 +0000 Manifest this update: Thu 23 Jul 2026 04:15:43 +0000 Manifest next update: Thu 30 Jul 2026 04:15:43 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: jAtzSu3dE/duYHxMAbH0Hcne4mouxxi1cyBlIMCX6p8=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jul 23 04:15:43 2026 GMT Not After : Jul 30 04:15:43 2026 GMT Subject: CN=6a619570-9b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:3d:62:26:60:bc:9e:85:77:d9:0f:e3:54: b7:ab:11:a8:e9:1c:43:9b:cc:a4:c3:b4:aa:fa:2e: b7:d0:22:0c:83:98:03:c6:7b:9f:15:0b:aa:69:a6: da:5a:29:4d:94:84:5a:b0:28:1e:5e:33:3b:b5:75: bc:c5:d1:91:5f:9d:fc:41:29:f1:94:e4:13:c6:8b: 7f:22:26:05:0e:95:7a:fc:bd:1d:41:7b:93:7a:26: 3c:05:d7:d7:40:44:21:af:28:c1:ca:bb:fc:77:00: 21:79:42:69:fc:09:00:4c:8d:b8:1a:d1:27:e9:58: 66:13:69:21:a8:8b:4b:4f:17:bf:e5:1a:12:68:18: 5a:73:44:fb:67:84:46:20:35:85:46:83:f4:35:f8: b3:ad:57:1a:b4:46:8d:fe:26:80:99:a6:7c:01:db: 3b:83:a4:27:86:69:e4:bd:14:c8:52:ea:22:66:b1: 78:bd:42:51:33:a6:80:62:4c:04:55:5e:56:f2:22: 68:58:5b:b6:90:0a:82:e8:e0:97:ea:2b:8f:d1:2f: 12:e4:2d:fb:ff:81:18:f6:f5:97:27:e0:f2:d3:15: 98:fc:e6:91:36:c6:c5:2e:86:ed:53:2e:40:d0:fe: 29:98:e0:18:d1:d5:89:b3:4a:d8:e3:01:f3:6e:8c: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:6A:43:CB:F7:E4:A0:06:ED:1E:3F:9A:5D:50:E7:6A:31:B6:21 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4e:02:d8:66:1f:06:ec:c1:f0:f0:60:e4:06:29:40:1f:09: 56:b2:69:4b:51:a4:12:76:65:c3:d8:c1:7f:af:0c:c2:19:dd: 77:84:6f:f9:da:d9:93:61:1b:7a:04:cd:70:00:80:41:44:ca: 7a:90:fa:41:f5:5c:65:ce:96:47:17:5b:42:49:ae:a1:68:96: de:05:78:a1:e5:e3:ec:0e:9d:98:f0:f9:09:b1:de:b3:32:86: 47:4b:4c:f5:9d:7c:60:e1:c9:66:4e:39:25:d9:ad:75:e4:e8: e6:a9:81:f0:df:7e:75:e4:99:38:21:8e:f0:07:33:eb:c7:0d: 25:76:72:bc:88:8b:5f:8e:f9:ed:65:41:01:3f:db:db:05:ee: 61:fc:d1:46:79:26:85:90:6b:0f:0d:54:e4:f6:e6:ee:1e:ca: 39:f4:67:a3:c1:06:d5:46:a7:84:79:42:04:81:c5:a3:97:9d: 6e:e8:48:89:8a:43:e9:69:15:5a:8f:8e:6b:00:79:95:a7:2b: 3d:99:3f:7f:db:21:21:f7:49:7b:fa:30:74:cf:60:4f:98:c0: b8:cb:31:67:33:5e:48:91:35:3f:bf:3e:22:cb:84:d3:e2:17: 7c:d8:03:6f:43:12:fe:94:01:62:2c:b6:91:f1:72:e8:36:71: 08:84:3e:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwNzIzMDQxNTQzWhcNMjYwNzMwMDQxNTQzWjAYMRYwFAYD VQQDEw02YTYxOTU3MC05YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI89YiZgvJ6Fd9kP41S3qxGo6RxDm8ykw7Sq+i630CIMg5gDxnufFQuqaaba WilNlIRasCgeXjM7tXW8xdGRX538QSnxlOQTxot/IiYFDpV6/L0dQXuTeiY8BdfX QEQhryjByrv8dwAheUJp/AkATI24GtEn6VhmE2khqItLTxe/5RoSaBhac0T7Z4RG IDWFRoP0NfizrVcatEaN/iaAmaZ8Ads7g6QnhmnkvRTIUuoiZrF4vUJRM6aAYkwE VV5W8iJoWFu2kAqC6OCX6iuP0S8S5C37/4EY9vWXJ+Dy0xWY/OaRNsbFLobtUy5A 0P4pmOAY0dWJs0rY4wHzboxqyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMyakPL 9+SgBu0eP5pdUOdqMbYhMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARU4C2GYfBuzB8PBg5AYpQB8JVrJpS1GkEnZlw9jBf68Mwhndd4Rv+drZk2Eb egTNcACAQUTKepD6QfVcZc6WRxdbQkmuoWiW3gV4oeXj7A6dmPD5CbHeszKGR0tM 9Z18YOHJZk45JdmtdeTo5qmB8N9+deSZOCGO8Acz68cNJXZyvIiLX4757WVBAT/b 2wXuYfzRRnkmhZBrDw1U5Pbm7h7KOfRno8EG1UanhHlCBIHFo5edbuhIiYpD6WkV Wo+OawB5lacrPZk/f9shIfdJe/owdM9gT5jAuMsxZzNeSJE1P78+IsuE0+IXfNgD b0MS/pQBYiy2kfFy6DZxCIQ+1Q== -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:41 2026 by rpki-client