$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft File: NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json) Hash identifier: FWfFNUqr/a6igU4Ca7Cl9o434m6xvEAMqKdKA1/G4JM= Subject key identifier: 4A:AD:C3:5D:EF:76:AC:54:96:79:92:B3:F4:CF:74:78:50:5E:34:38 Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft Manifest number: 0249 Signing time: Thu 23 Jul 2026 03:37:42 +0000 Manifest this update: Thu 23 Jul 2026 03:37:41 +0000 Manifest next update: Thu 30 Jul 2026 03:37:41 +0000 Files and hashes: 1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: BPxuu0lUOXW1Cbcg5IGs+UJFhl19jWzH0W3jLVYoHgg=) 2: 7588035C913E11EFB46E9A72C4F9AE02.roa (hash: dL/U4UhMZabXz3OJx25MIDSywgaSKV+Fyuq3FcC4oxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327 Validity Not Before: Jul 23 03:37:41 2026 GMT Not After : Jul 30 03:37:41 2026 GMT Subject: CN=6a618c85-13d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:8a:a5:4b:8e:cf:98:01:80:ed:05:21:54: a2:d8:2b:d0:30:31:03:ba:79:6c:d4:f8:46:0c:2f: de:c6:0b:13:f6:ee:3b:60:63:16:d4:bf:bf:61:6c: f3:3c:b3:ac:0a:25:12:70:05:64:db:35:a2:06:ad: f5:c5:ee:69:19:ff:d3:8e:b3:7f:a9:73:ea:cd:97: 2b:4a:7e:3f:a8:1d:b8:97:3e:72:53:70:86:33:9a: b8:7b:f2:08:6e:a3:28:16:71:42:38:6c:1b:52:f1: f3:8a:3d:f3:75:2e:70:d1:5a:62:be:53:83:16:9e: dd:b5:0d:3f:ea:ce:d4:93:1f:9f:f4:67:f3:87:0d: 7d:6a:44:81:21:8a:5c:9e:28:98:f1:95:16:44:44: 55:fa:09:58:c5:e1:1a:6b:ac:00:e3:92:2c:d8:cf: 59:d5:e5:ad:64:b5:69:e9:6c:98:57:73:83:52:d2: da:d1:b4:a3:25:97:ae:61:99:3a:b8:39:3d:1a:cb: 4c:21:38:1e:c9:90:fd:c5:bb:f6:41:1e:68:fd:e4: 26:54:b2:9b:3d:8b:3c:a4:0f:3b:6d:5d:0a:16:64: 11:e5:4c:55:dc:65:13:2c:d1:de:bc:0c:8c:e7:c1: 0c:7b:67:75:5c:27:93:00:74:18:02:44:95:7c:f6: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:C3:5D:EF:76:AC:54:96:79:92:B3:F4:CF:74:78:50:5E:34:38 X509v3 Authority Key Identifier: keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5c:ea:80:91:fd:5a:12:a0:c0:29:e8:a6:f0:08:ea:47:63: 98:7f:43:55:e9:20:80:16:08:f9:4e:d0:7f:80:59:e0:0b:db: d8:18:1e:d3:04:c2:0e:58:47:f6:d1:84:fa:42:00:c7:26:f1: 4a:4b:62:61:f4:33:14:3c:a6:74:ae:7f:48:3d:bb:f5:89:db: 1a:54:d2:6b:8a:f9:73:92:9e:e8:b0:1d:ee:d3:44:a1:8c:90: 09:82:81:aa:f8:1f:f5:88:d4:7e:6f:fa:db:a4:20:65:4e:37: 1c:a9:b1:cf:43:98:35:c6:c9:92:e4:d5:76:40:08:76:2a:37: ed:93:db:79:a0:42:cc:9d:88:c1:9b:a6:71:a9:8d:29:97:17: 5a:5e:03:13:32:6d:8a:68:c2:13:e7:c2:c6:51:ec:41:2c:06: b1:da:d2:82:fc:54:0d:43:13:68:00:93:d5:03:d0:8c:ac:9c: e1:58:d6:35:50:81:3a:10:f5:57:d6:13:dc:ed:e3:16:89:b4: be:df:3d:15:64:38:c3:24:f1:76:06:75:e7:6f:1e:f5:01:d9: e1:33:bb:48:12:87:a7:09:ce:a2:7c:bc:0a:5b:50:c7:ec:1a: aa:f7:e6:c0:b1:bc:48:5b:45:7d:0c:49:99:59:0f:62:e2:a3: 0e:87:e9:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NjIxMTAvBgNVBAUTKDM0MEY4MTM0MzM3MTlBNzYwRTNCRkUyMTkzMzY4NzI2 MTE3OUMzMjcwHhcNMjYwNzIzMDMzNzQxWhcNMjYwNzMwMDMzNzQxWjAYMRYwFAYD VQQDEw02YTYxOGM4NS0xM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9aKpUuOz5gBgO0FIVSi2CvQMDEDunls1PhGDC/exgsT9u47YGMW1L+/YWzz PLOsCiUScAVk2zWiBq31xe5pGf/TjrN/qXPqzZcrSn4/qB24lz5yU3CGM5q4e/II bqMoFnFCOGwbUvHzij3zdS5w0VpivlODFp7dtQ0/6s7Ukx+f9Gfzhw19akSBIYpc niiY8ZUWRERV+glYxeEaa6wA45Is2M9Z1eWtZLVp6WyYV3ODUtLa0bSjJZeuYZk6 uDk9GstMITgeyZD9xbv2QR5o/eQmVLKbPYs8pA87bV0KFmQR5UxV3GUTLNHevAyM 58EMe2d1XCeTAHQYAkSVfPbg0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqtw13v dqxUlnmSs/TPdHhQXjQ4MB8GA1UdIwQYMBaAFDQPgTQzcZp2Djv+IZM2hyYRecMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Mi8yNjU3RjczRTBC QzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1uWU9PXzRoa3phSEpoRjV3 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BLUJORE54bW5ZT09fNGhremFISmhGNXd5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Mi8yNjU3RjczRTBCQzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1u WU9PXzRoa3phSEpoRjV3eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZFzqgJH9WhKgwCnopvAI6kdjmH9DVekggBYI+U7Qf4BZ4Avb2Bge0wTCDlhH 9tGE+kIAxybxSktiYfQzFDymdK5/SD279YnbGlTSa4r5c5Ke6LAd7tNEoYyQCYKB qvgf9YjUfm/626QgZU43HKmxz0OYNcbJkuTVdkAIdio37ZPbeaBCzJ2IwZumcamN KZcXWl4DEzJtimjCE+fCxlHsQSwGsdrSgvxUDUMTaACT1QPQjKyc4VjWNVCBOhD1 V9YT3O3jFom0vt89FWQ4wyTxdgZ1528e9QHZ4TO7SBKHpwnOony8CltQx+waqvfm wLG8SFtFfQxJmVkPYuKjDofpLw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:58:53 2026 by rpki-client