$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: Wa2ESeBbw2maCnovBQLmY2AAIykLgKDoFuB69lv/dC0= Subject key identifier: 9F:16:3E:BA:B5:08:C4:26:BB:AD:C3:B8:75:AF:3C:B0:04:C8:4E:C1 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 01CB Signing time: Thu 23 Jul 2026 05:35:05 +0000 Manifest this update: Thu 23 Jul 2026 05:35:05 +0000 Manifest next update: Thu 30 Jul 2026 05:35:05 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: vo92OR8MXLH4f1CgTp0Rze4vB+mKa4J85RmdDSolUIw=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: xIsuTyZo/KDFH/r02ABu8dMxSJNQpktymxgmNjrBNLs=) 3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Jul 23 05:35:05 2026 GMT Not After : Jul 30 05:35:05 2026 GMT Subject: CN=6a61a809-29e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:02:ae:e6:24:1f:1b:0e:64:17:18:16:ae: 18:4b:97:45:53:81:99:19:f8:b0:81:ed:36:24:7b: 77:38:5b:57:c5:6c:9a:8a:27:fe:8e:43:ca:1b:f0: 90:62:d0:6e:eb:7c:4d:27:f4:c7:0a:48:51:53:7d: 56:4c:16:81:9f:b4:40:cc:39:80:45:8d:eb:19:8b: eb:41:26:11:79:80:a7:9a:98:e3:d4:e2:3c:a6:1b: 0b:e9:37:64:d0:9a:74:4c:5c:8f:e4:0b:6e:f0:fb: 0d:43:dd:be:81:71:74:4e:ce:44:a9:7f:53:fe:cb: b4:31:1f:10:6e:2e:c5:a9:e3:2f:61:ee:46:c5:e1: fb:bd:f4:06:e8:0a:09:2b:9e:05:e3:2a:f4:38:ec: f0:82:d4:a5:b8:5f:fc:29:93:15:98:0a:66:6f:38: b5:3f:19:de:d4:65:e1:9b:46:00:d4:46:af:85:67: 1b:3d:af:7c:e1:2d:10:9a:43:7f:ab:21:bf:fc:1d: 53:c4:44:7f:13:ec:4d:09:74:79:1a:c0:d6:8d:93: de:a4:d2:9b:e4:5f:c0:e8:fa:e9:8f:43:c3:06:d7: c7:74:4e:23:fa:c8:c9:7d:b8:2d:0c:ed:8a:93:4e: 6f:01:19:30:ea:c5:2a:f6:fd:a6:48:1b:37:c4:bd: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:3E:BA:B5:08:C4:26:BB:AD:C3:B8:75:AF:3C:B0:04:C8:4E:C1 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b0:d6:b3:e5:91:74:ce:65:ed:d2:b2:31:f8:55:fb:28:9c: ec:0e:97:37:9b:8a:1b:7a:d3:f4:ef:22:27:be:dc:ac:28:d2: 72:0d:f4:11:67:03:96:41:fc:ce:b0:42:e2:94:b1:0c:74:6e: 6f:da:2e:af:9a:fd:20:d2:cd:c0:fc:29:cf:e0:3a:d0:54:1f: 4f:5e:d2:bd:98:95:21:7a:4c:8f:2c:6e:65:dc:66:af:e5:15: c3:68:94:bc:36:29:33:0d:39:95:6b:d1:2c:0f:28:93:5a:fd: 6a:f1:73:e5:72:c4:27:4c:9f:01:40:b1:a7:60:f0:bf:6b:b2: 4d:76:9c:a4:74:5e:f0:82:a4:66:3b:53:22:f6:dc:27:8d:9f: 48:3e:cd:7d:05:0e:71:d5:22:0c:d5:2b:dc:6d:3e:1b:ac:59: 9e:61:ab:e1:9c:2e:f2:76:5d:16:71:4e:ae:79:46:7b:48:c9: e2:40:88:12:fb:b9:d6:a0:3e:34:22:b0:7f:3b:99:07:a9:b1: fd:77:0f:cb:bd:01:0d:3f:49:24:1d:96:7e:3b:ce:bb:77:e4: fe:99:12:dd:bf:2f:53:5e:a0:7f:7e:58:92:66:04:04:64:6f: fe:3e:45:67:45:ff:86:7f:86:0f:f6:73:6a:51:ce:99:eb:b1: a8:f8:7a:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjYwNzIzMDUzNTA1WhcNMjYwNzMwMDUzNTA1WjAYMRYwFAYD VQQDEw02YTYxYTgwOS0yOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaUCruYkHxsOZBcYFq4YS5dFU4GZGfiwge02JHt3OFtXxWyaiif+jkPKG/CQ YtBu63xNJ/THCkhRU31WTBaBn7RAzDmARY3rGYvrQSYReYCnmpjj1OI8phsL6Tdk 0Jp0TFyP5Atu8PsNQ92+gXF0Ts5EqX9T/su0MR8Qbi7FqeMvYe5GxeH7vfQG6AoJ K54F4yr0OOzwgtSluF/8KZMVmApmbzi1Pxne1GXhm0YA1EavhWcbPa984S0QmkN/ qyG//B1TxER/E+xNCXR5GsDWjZPepNKb5F/A6Prpj0PDBtfHdE4j+sjJfbgtDO2K k05vARkw6sUq9v2mSBs3xL2W1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8WPrq1 CMQmu63DuHWvPLAEyE7BMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfrDWs+WRdM5l7dKyMfhV+yic7A6XN5uKG3rT9O8iJ77crCjScg30EWcDlkH8 zrBC4pSxDHRub9our5r9INLNwPwpz+A60FQfT17SvZiVIXpMjyxuZdxmr+UVw2iU vDYpMw05lWvRLA8ok1r9avFz5XLEJ0yfAUCxp2Dwv2uyTXacpHRe8IKkZjtTIvbc J42fSD7NfQUOcdUiDNUr3G0+G6xZnmGr4Zwu8nZdFnFOrnlGe0jJ4kCIEvu51qA+ NCKwfzuZB6mx/XcPy70BDT9JJB2WfjvOu3fk/pkS3b8vU16gf35YkmYEBGRv/j5F Z0X/hn+GD/ZzalHOmeuxqPh6SA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:25:49 2026 by rpki-client