$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: Sqq08UgS5FAcVAB2x+HMJF5fOdk1i6sIdHqU0GRGNsg= Subject key identifier: A8:01:6E:29:B1:1B:25:BC:87:14:E4:52:1A:B0:DE:71:FB:18:F8:D0 Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 32 Signing time: Fri 17 Jul 2026 09:57:47 +0000 Manifest this update: Fri 17 Jul 2026 09:57:47 +0000 Manifest next update: Fri 24 Jul 2026 09:57:47 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: 5O4wcHHF+62bNdb41h1gbORWqkgMuzzoBC8qi9ci6fQ=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Jul 17 09:57:47 2026 GMT Not After : Jul 24 09:57:47 2026 GMT Subject: CN=6a59fc9b-5ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:d4:70:2a:1b:9b:50:9f:d0:7a:98:3b:79: 79:57:42:45:f4:40:81:3c:53:7a:90:35:d2:b0:0c: a4:29:93:f1:b1:74:c7:09:42:03:ec:f1:8d:0c:f0: d1:1d:1d:e9:69:e3:2f:c5:bb:a5:ba:05:88:49:bf: 34:f8:37:98:18:d9:e4:bc:38:9d:f9:3b:ea:7b:3c: d4:41:51:e8:ae:3c:5d:3f:a4:34:93:0c:65:da:aa: aa:a1:a2:f9:97:e2:33:0b:08:d6:ba:1b:69:f3:35: 4b:04:e4:b8:f4:6c:3b:ee:0c:46:e7:b2:00:ab:c6: 1b:e4:66:5f:c9:83:8a:c5:c3:c1:68:86:ee:48:10: 4f:12:f5:a3:ab:49:e1:d0:36:e3:40:5d:7d:72:d1: 3e:1e:83:5d:0c:28:59:36:cf:38:42:72:37:00:00: d2:49:25:4e:79:47:a4:28:fb:a7:b3:25:66:b4:41: 3a:bd:2f:45:2b:80:fb:09:c6:f0:8c:19:c9:e2:c0: 84:f5:35:86:bd:00:d8:bc:3a:dc:75:9f:78:6c:67: 2c:ff:32:cc:10:c0:ea:84:12:ef:09:cd:72:43:ec: 25:6e:8a:c9:6c:fe:de:f9:10:c0:ae:34:b5:ae:b2: c7:44:24:a0:ca:28:50:f9:1a:83:70:80:23:f9:37: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:01:6E:29:B1:1B:25:BC:87:14:E4:52:1A:B0:DE:71:FB:18:F8:D0 X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4f:4f:ab:92:07:53:ba:72:f4:13:f1:da:70:d5:ce:7f:91: f9:3d:f5:f8:c3:82:45:6f:12:a5:2e:56:59:67:d5:54:b2:6e: 28:c8:fd:45:1b:e5:b0:75:45:49:e7:f9:5b:94:74:23:ca:0d: 27:27:68:8e:e7:8f:10:cf:a0:5c:1d:29:ee:9f:8e:c1:78:e1: 6b:fa:3d:5d:2e:1b:d7:d9:40:a2:87:75:89:e2:d7:9b:94:d1: 41:32:5b:f4:da:f9:ca:a3:1f:19:58:29:b1:a5:23:61:db:eb: 2b:96:31:3b:4f:fb:36:f5:89:4b:31:af:cc:06:eb:82:4c:f9: aa:17:16:b2:de:3e:ef:15:85:5b:a2:18:a8:e9:68:b9:5f:1b: c8:7a:c2:8f:23:03:fd:01:a9:4f:72:54:12:d2:cb:bd:2b:95: 6a:54:ea:82:00:f9:83:b7:fe:b2:ef:5f:c2:24:39:04:32:c2: 51:6b:16:ef:c0:3c:c4:f1:8c:a7:ae:0a:87:a6:b3:02:ea:b7: 64:27:79:76:90:1a:fd:2c:4d:3e:dd:0f:44:25:fa:b6:cd:e4: 0d:ee:3b:86:81:c3:d8:5c:7c:ff:2f:52:53:e3:62:10:00:43: 3d:19:c6:34:db:4e:ae:b3:e0:ac:ff:fd:c4:32:d9:c4:ec:56: b3:17:ea:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA3MTcwOTU3NDdaFw0yNjA3MjQwOTU3NDdaMBgxFjAUBgNV BAMTDTZhNTlmYzliLTVhYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtXtRwKhubUJ/Qepg7eXlXQkX0QIE8U3qQNdKwDKQpk/GxdMcJQgPs8Y0M8NEd Help4y/Fu6W6BYhJvzT4N5gY2eS8OJ35O+p7PNRBUeiuPF0/pDSTDGXaqqqhovmX 4jMLCNa6G2nzNUsE5Lj0bDvuDEbnsgCrxhvkZl/Jg4rFw8Fohu5IEE8S9aOrSeHQ NuNAXX1y0T4eg10MKFk2zzhCcjcAANJJJU55R6Qo+6ezJWa0QTq9L0UrgPsJxvCM GcniwIT1NYa9ANi8Otx1n3hsZyz/MswQwOqEEu8JzXJD7CVuisls/t75EMCuNLWu ssdEJKDKKFD5GoNwgCP5N1khAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqAFuKbEb JbyHFORSGrDecfsY+NAwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALT0+rkgdTunL0E/HacNXOf5H5PfX4w4JFbxKlLlZZZ9VUsm4oyP1FG+WwdUVJ 5/lblHQjyg0nJ2iO548Qz6BcHSnun47BeOFr+j1dLhvX2UCih3WJ4teblNFBMlv0 2vnKox8ZWCmxpSNh2+srljE7T/s29YlLMa/MBuuCTPmqFxay3j7vFYVbohio6Wi5 XxvIesKPIwP9AalPclQS0su9K5VqVOqCAPmDt/6y71/CJDkEMsJRaxbvwDzE8Yyn rgqHprMC6rdkJ3l2kBr9LE0+3Q9EJfq2zeQN7juGgcPYXHz/L1JT42IQAEM9GcY0 206us+Cs//3EMtnE7FazF+q9 -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:22 2026 by rpki-client