$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json) Hash identifier: GfI1b2uyhtLuKoMimxDhUTvuKtK3Shgu/DPo6+yOS0Q= Subject key identifier: 0A:99:56:25:AE:5C:A3:DB:0D:24:E5:0A:33:BF:7E:B6:7C:F0:49:42 Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft Manifest number: 1A Signing time: Thu 11 Jun 2026 11:17:12 +0000 Manifest this update: Thu 11 Jun 2026 11:17:11 +0000 Manifest next update: Thu 18 Jun 2026 11:17:11 +0000 Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: TO4kl21mcGQ5n8ZcwSaFUZ1Y0DKSQa/7fkbMISaNFbA=) 2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Validity Not Before: Jun 11 11:17:11 2026 GMT Not After : Jun 18 11:17:11 2026 GMT Subject: CN=6a2a9937-b909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:88:9b:24:9e:a6:8d:79:65:0a:2f:6a:04: 6f:82:ac:91:95:51:ef:d8:da:ee:a8:9d:49:89:df: f9:95:45:39:51:09:c5:87:41:0b:d7:ba:72:c6:bc: df:7d:78:f9:84:bf:db:40:14:28:7c:07:50:6d:84: 34:04:c4:1b:d6:27:c6:0a:85:f4:ca:44:bf:06:92: e6:22:c9:e7:d3:81:f7:4f:ac:10:aa:4c:12:01:9f: b9:f5:7f:35:3e:3d:92:0d:04:f2:bb:21:63:97:b9: 9f:8c:66:29:ae:46:a6:37:f4:e2:88:01:d0:f6:26: 12:16:89:f4:89:7d:28:68:04:2e:cb:1e:9c:84:4f: ef:37:3a:4b:c0:30:10:ae:79:e0:91:23:c1:6d:3c: 0c:ee:2c:4c:01:a9:02:8a:07:0f:7a:6b:45:f9:2d: f7:05:68:05:0f:22:4a:41:43:3e:d8:a3:d4:92:17: 0e:82:ad:99:77:05:a3:9d:8c:4a:67:0f:4a:e8:e5: 03:fa:7a:40:69:b8:d1:34:80:9f:d5:fe:6d:5b:79: a8:a5:50:db:74:f4:18:6f:a1:27:bc:1d:84:07:d6: 54:8e:ae:80:51:bb:f4:7e:94:26:b1:0d:02:79:b0: f9:85:ee:3a:43:15:c5:1a:1a:c8:da:56:22:b3:76: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:99:56:25:AE:5C:A3:DB:0D:24:E5:0A:33:BF:7E:B6:7C:F0:49:42 X509v3 Authority Key Identifier: keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:b0:be:08:c2:76:81:2e:80:95:ab:c3:03:23:bf:af:d3: a6:c5:46:2e:f0:ee:6d:64:fe:06:99:b0:f1:42:0c:ce:81:59: 1f:67:86:d3:32:4a:96:4e:83:86:e6:15:70:ac:ef:dc:5c:b0: d3:ee:76:a1:b3:93:e9:f8:bc:27:54:42:97:d0:f9:03:64:ac: 90:28:18:fb:e7:41:c3:e0:f5:2d:2c:64:32:f2:63:64:db:f8: 32:1c:b7:52:e8:bd:14:b0:cc:c6:46:87:ca:8c:43:1b:1c:42: ab:fb:71:54:08:cb:1f:bc:d9:df:f2:f0:37:dc:e5:a6:31:8e: ed:37:16:21:c9:0b:21:c2:49:15:e7:f3:49:c8:98:f8:1c:bd: 13:28:23:9b:02:a2:ca:4a:70:19:7c:07:c9:e3:60:95:46:95: 5a:49:8e:ac:33:e4:48:3d:3b:af:80:ca:11:b6:0e:68:f9:e5: 35:fc:59:04:57:4f:9e:f5:2c:b0:03:98:56:74:06:de:46:bc: 3e:1a:df:24:e2:9f:19:64:2e:11:b2:d1:5b:2f:81:ba:bd:44: 75:79:7c:21:ac:88:f5:00:91:2e:32:1a:05:8b:ac:72:5c:cc: ad:4f:cc:89:be:c6:23:bf:8b:1f:a4:78:46:af:dc:ba:fa:cf: d5:37:79:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoMzU3NjREOTQyMDdENDREODlBNzA1NTdDNjZEMkEyRUYz RDFDNTQ4MDAeFw0yNjA2MTExMTE3MTFaFw0yNjA2MTgxMTE3MTFaMBgxFjAUBgNV BAMTDTZhMmE5OTM3LWI5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAD4ibJJ6mjXllCi9qBG+CrJGVUe/Y2u6onUmJ3/mVRTlRCcWHQQvXunLGvN99 ePmEv9tAFCh8B1BthDQExBvWJ8YKhfTKRL8GkuYiyefTgfdPrBCqTBIBn7n1fzU+ PZINBPK7IWOXuZ+MZimuRqY39OKIAdD2JhIWifSJfShoBC7LHpyET+83OkvAMBCu eeCRI8FtPAzuLEwBqQKKBw96a0X5LfcFaAUPIkpBQz7Yo9SSFw6CrZl3BaOdjEpn D0ro5QP6ekBpuNE0gJ/V/m1beailUNt09BhvoSe8HYQH1lSOroBRu/R+lCaxDQJ5 sPmF7jpDFcUaGsjaViKzdmV7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCplWJa5c o9sNJOUKM79+tnzwSUIwHwYDVR0jBBgwFoAUNXZNlCB9RNiacFV8ZtKi7z0cVIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzg4QTNCNEJBM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5pYWNGVjhadEtpN3owY1ZJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlhaTmxDQjlSTmlhY0ZWOFp0S2k3ejBjVklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzg4QTNCNEJBM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5p YWNGVjhadEtpN3owY1ZJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8T7C+CMJ2gS6AlavDAyO/r9OmxUYu8O5tZP4GmbDxQgzOgVkfZ4bTMkqWToOG 5hVwrO/cXLDT7nahs5Pp+LwnVEKX0PkDZKyQKBj750HD4PUtLGQy8mNk2/gyHLdS 6L0UsMzGRofKjEMbHEKr+3FUCMsfvNnf8vA33OWmMY7tNxYhyQshwkkV5/NJyJj4 HL0TKCObAqLKSnAZfAfJ42CVRpVaSY6sM+RIPTuvgMoRtg5o+eU1/FkEV0+e9Syw A5hWdAbeRrw+Gt8k4p8ZZC4RstFbL4G6vUR1eXwhrIj1AJEuMhoFi6xyXMytT8yJ vsYjv4sfpHhGr9y6+s/VN3nk -----END CERTIFICATE-----Generated at Sat Jun 13 02:05:58 2026 by rpki-client