$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: uDiE2+cpEevNjf75WpbIZQnDbVv/Tugb3ETO8F3f01U= Subject key identifier: D4:39:2C:26:95:36:02:44:69:B9:49:8B:67:EC:32:4B:E5:0D:11:8C Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 0613 Signing time: Tue 18 Aug 2026 23:11:47 +0000 Manifest this update: Tue 18 Aug 2026 23:11:46 +0000 Manifest next update: Tue 25 Aug 2026 23:11:46 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: +vzZ77OnfAHYh6aqswdXijLlKnc/3+6ji/AEYRTopaM=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: fOkqVihCu1L5Ia3iPQWWnGFlmmkL41U8TtXyOcg3l2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: Aug 18 23:11:46 2026 GMT Not After : Aug 25 23:11:46 2026 GMT Subject: CN=6a84e6b3-9802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:16:aa:d2:d1:66:b9:d8:2a:39:90:89:64: 7b:a5:7b:bd:63:21:a4:a0:7f:61:0d:30:5e:f4:fe: 11:88:6f:8a:1f:f9:4b:40:a7:2c:a1:87:fd:12:a6: 79:09:fd:4a:df:bc:88:63:af:04:3a:60:4a:74:4f: 25:06:b3:cc:42:ef:81:c2:8d:d3:11:a8:6a:e3:47: 74:9c:ee:6c:40:80:38:06:62:06:82:11:59:65:89: 64:93:3e:df:26:39:5d:8e:79:fb:be:78:98:cc:bb: ab:d6:c0:9c:73:ab:c4:84:74:08:47:b8:a1:70:d9: 72:5e:66:61:11:d1:27:06:5c:22:a6:36:dd:ec:63: 66:6c:73:aa:91:c3:c7:3f:97:c2:94:7d:37:46:8f: 5d:c9:b5:d0:17:d4:40:e6:be:13:e4:e3:e9:4b:d5: 7a:69:fb:5c:1a:44:d5:c9:65:72:e3:49:59:8a:63: 97:f1:6e:ed:11:73:27:d6:ee:6f:70:0d:ef:95:ed: 09:ce:89:b3:8d:9b:90:5e:88:dc:51:4d:32:85:b0: df:c2:8d:c2:dc:19:e1:04:b0:46:6a:f4:97:d3:a8: 0a:c3:1d:8f:d4:8e:6b:ae:13:a6:89:50:68:4a:fd: a5:4d:f9:4f:47:6d:ce:f9:94:cc:e2:f8:15:3a:80: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:2C:26:95:36:02:44:69:B9:49:8B:67:EC:32:4B:E5:0D:11:8C X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:bd:f5:ac:13:ea:d4:9b:ea:ab:d8:66:7a:9b:25:51:53: 73:70:24:15:af:b9:25:cb:5b:68:5d:ca:3f:36:5c:e5:54:5e: 7f:11:b5:19:8d:39:a8:db:6a:91:3c:87:f1:89:32:ad:19:55: b4:2b:e3:1a:24:d2:0d:bb:9e:c4:b0:c9:d4:b7:2d:44:d7:6e: 32:92:ca:96:90:eb:1d:55:6f:39:d0:21:a0:23:0c:a1:0b:65: eb:f3:20:e6:8f:5f:b2:98:c6:7d:58:46:f3:25:78:a9:df:d1: c2:74:be:ce:9a:0b:41:f2:d8:dd:de:fa:00:40:df:ad:b5:ca: c5:b8:34:c1:5f:7c:e8:57:59:9d:ac:d1:d1:3f:dd:59:78:1f: 6c:45:48:89:03:4b:da:83:96:37:43:e5:75:94:37:4b:2e:cf: 91:ba:42:1b:92:36:9e:22:38:d4:88:0c:20:7e:68:72:21:0d: ef:cd:5d:2b:60:d8:3e:fa:c6:3e:43:cc:7f:ff:34:f6:08:7b: 29:69:b8:d8:8d:25:3a:21:07:7b:b6:20:92:0b:60:8a:5c:28: 79:21:43:5c:b4:e0:f4:a5:92:15:4e:66:69:58:ce:3b:b4:d5: 2d:4f:d0:a2:dd:30:6d:28:18:68:4b:9d:b8:7d:a3:fd:7f:af: 56:5b:1c:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjYwODE4MjMxMTQ2WhcNMjYwODI1MjMxMTQ2WjAYMRYwFAYD VQQDEw02YTg0ZTZiMy05ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiBIWqtLRZrnYKjmQiWR7pXu9YyGkoH9hDTBe9P4RiG+KH/lLQKcsoYf9EqZ5 Cf1K37yIY68EOmBKdE8lBrPMQu+Bwo3TEahq40d0nO5sQIA4BmIGghFZZYlkkz7f Jjldjnn7vniYzLur1sCcc6vEhHQIR7ihcNlyXmZhEdEnBlwipjbd7GNmbHOqkcPH P5fClH03Ro9dybXQF9RA5r4T5OPpS9V6aftcGkTVyWVy40lZimOX8W7tEXMn1u5v cA3vle0JzomzjZuQXojcUU0yhbDfwo3C3BnhBLBGavSX06gKwx2P1I5rrhOmiVBo Sv2lTflPR23O+ZTM4vgVOoDAmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQ5LCaV NgJEablJi2fsMkvlDRGMMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXK99awT6tSb6qvYZnqbJVFTc3AkFa+5JctbaF3KPzZc5VRefxG1GY05qNtq kTyH8YkyrRlVtCvjGiTSDbuexLDJ1LctRNduMpLKlpDrHVVvOdAhoCMMoQtl6/Mg 5o9fspjGfVhG8yV4qd/RwnS+zpoLQfLY3d76AEDfrbXKxbg0wV986FdZnazR0T/d WXgfbEVIiQNL2oOWN0PldZQ3Sy7PkbpCG5I2niI41IgMIH5ociEN781dK2DYPvrG PkPMf/809gh7KWm42I0lOiEHe7YgkgtgilwoeSFDXLTg9KWSFU5maVjOO7TVLU/Q ot0wbSgYaEuduH2j/X+vVlscvw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:59 2026 by rpki-client