$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: 5gfXfDeTwFbJQ2c2qwFrjDf7NWC3GLkkq6BeFazHdBo= Subject key identifier: 30:4B:63:F0:53:CC:32:B3:16:B9:91:7E:82:3E:C1:F7:DB:2B:A8:8B Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 085D Signing time: Sat 20 Jun 2026 20:53:20 +0000 Manifest this update: Sat 20 Jun 2026 20:53:20 +0000 Manifest next update: Sat 27 Jun 2026 20:53:20 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: ntRD/kkjPr5i77ICMC2LByzcRlt8e61fUi0/D3Us9Fw=) 2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=) 3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 20:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Jun 20 20:53:20 2026 GMT Not After : Jun 27 20:53:20 2026 GMT Subject: CN=6a36fdc0-a3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:8e:14:fa:8a:73:cb:c6:7b:f3:09:59:07: 4e:64:76:7f:2d:76:85:ba:78:ae:60:6c:e4:6e:e6: 45:ba:ae:e6:8a:20:bd:f5:52:47:07:5a:c4:97:8f: 5f:62:88:7f:53:53:1f:ca:d4:6d:82:fe:21:3a:70: 48:c7:2b:7f:2a:ec:35:d3:d4:ad:ad:88:5c:3b:e7: b5:d6:d5:9f:d8:65:2a:3d:ef:30:27:af:38:49:6e: 56:98:c0:8f:c7:92:4b:16:d8:06:b2:e8:73:71:86: e3:cb:f3:ae:60:2b:ff:96:7f:98:24:18:93:45:79: 25:0d:a8:0e:ff:69:9c:2f:c0:47:9e:a7:bd:06:e1: f6:b3:96:41:00:88:a2:9a:0e:48:f7:f8:76:2a:ec: 25:1a:2e:67:66:5f:88:47:fb:e4:5b:72:53:fa:d1: b6:ca:e9:58:1e:b8:e6:17:09:d2:90:cb:f4:28:62: af:4d:da:95:3c:87:b4:03:07:93:29:87:8a:2d:f7: b8:72:a2:ee:bc:2b:24:f5:bb:c9:ae:6b:b4:7d:c2: 78:87:ff:c6:0c:11:9e:b8:fc:d9:5b:53:30:7d:7e: d8:b1:78:b9:2c:a4:f8:81:75:bc:99:85:8e:87:dc: 51:70:62:e7:dd:ac:2c:9b:74:9c:b4:a8:35:88:fd: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:63:F0:53:CC:32:B3:16:B9:91:7E:82:3E:C1:F7:DB:2B:A8:8B X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ef:b8:a7:aa:05:54:a7:ea:26:5f:aa:b8:28:f9:00:ae:3a: 12:01:29:85:5a:71:f9:32:a0:0e:52:e4:c1:0d:e6:d7:73:1c: e1:2f:c1:98:d1:48:00:25:09:3f:3b:44:58:01:2d:9c:2f:75: dc:13:9b:72:38:17:d0:10:3f:03:02:27:9a:ef:1c:5a:f3:8b: 66:61:b6:c1:5f:8d:a5:b5:f9:ab:06:15:85:17:52:43:79:67: 57:75:b3:06:56:26:1d:dd:cb:c6:4a:5f:7d:26:75:a0:5b:80: da:39:cc:68:5b:14:2c:dd:16:b8:c3:60:46:6c:bc:7b:51:ae: 86:7d:8d:d0:79:c0:73:3d:b1:3e:3f:5d:cd:fa:6d:68:e4:28: d9:18:3b:8a:0e:86:1c:db:9e:06:b9:11:47:43:a4:d6:d0:58: ca:a7:a8:b7:f2:6f:b6:6e:24:f0:67:ab:ee:82:58:d4:38:38: 7c:04:a2:32:6b:d7:bf:29:31:9b:2d:5c:f8:27:65:d4:4c:c4: b6:f3:c9:72:69:9f:2b:04:7a:69:2c:8f:37:a8:fa:3c:12:fe: 51:9a:be:b2:49:90:cb:4a:04:22:0d:60:8d:7a:c0:74:4a:49: fa:d7:55:bc:3c:9b:96:ef:77:0a:cf:88:24:6c:19:66:bb:0e: ed:75:25:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjYwNjIwMjA1MzIwWhcNMjYwNjI3MjA1MzIwWjAYMRYwFAYD VQQDEw02YTM2ZmRjMC1hM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhqOFPqKc8vGe/MJWQdOZHZ/LXaFuniuYGzkbuZFuq7miiC99VJHB1rEl49f Yoh/U1MfytRtgv4hOnBIxyt/Kuw109StrYhcO+e11tWf2GUqPe8wJ684SW5WmMCP x5JLFtgGsuhzcYbjy/OuYCv/ln+YJBiTRXklDagO/2mcL8BHnqe9BuH2s5ZBAIii mg5I9/h2KuwlGi5nZl+IR/vkW3JT+tG2yulYHrjmFwnSkMv0KGKvTdqVPIe0AweT KYeKLfe4cqLuvCsk9bvJrmu0fcJ4h//GDBGeuPzZW1MwfX7YsXi5LKT4gXW8mYWO h9xRcGLn3awsm3SctKg1iP0QDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBLY/BT zDKzFrmRfoI+wffbK6iLMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp++4p6oFVKfqJl+quCj5AK46EgEphVpx+TKgDlLkwQ3m13Mc4S/BmNFIACUJ PztEWAEtnC913BObcjgX0BA/AwInmu8cWvOLZmG2wV+NpbX5qwYVhRdSQ3lnV3Wz BlYmHd3LxkpffSZ1oFuA2jnMaFsULN0WuMNgRmy8e1Guhn2N0HnAcz2xPj9dzfpt aOQo2Rg7ig6GHNueBrkRR0Ok1tBYyqeot/Jvtm4k8Ger7oJY1Dg4fASiMmvXvykx my1c+Cdl1EzEtvPJcmmfKwR6aSyPN6j6PBL+UZq+skmQy0oEIg1gjXrAdEpJ+tdV vDyblu93Cs+IJGwZZrsO7XUlQg== -----END CERTIFICATE-----Generated at Sun Jun 21 12:44:58 2026 by rpki-client