$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: kMYqSZsqgFG421YaKGKdHRatwmHIADoe5AFa0T4AS04= Subject key identifier: 28:88:78:0B:31:1C:8A:CD:13:3F:FF:4E:A4:FF:58:1A:DE:21:66:46 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 0145 Signing time: Wed 19 Aug 2026 06:05:42 +0000 Manifest this update: Wed 19 Aug 2026 06:05:42 +0000 Manifest next update: Wed 26 Aug 2026 06:05:42 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: vITXa8Uvz8nnguxJ8aDyG0n4gazQol/W0QZe/9RmqgA=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: xq7YEvfaNzXWM/9MQqDfYNsSlsB3/7fTEB/zk7EcfRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Aug 19 06:05:42 2026 GMT Not After : Aug 26 06:05:42 2026 GMT Subject: CN=6a8547b6-9d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:85:ec:63:6b:b2:b6:ee:14:10:ff:56:d1: f0:85:c8:16:fd:84:a0:0a:b0:8c:d6:ee:0d:87:b2: 1f:0b:fe:8c:33:bc:1b:d0:38:4d:9f:2e:5b:60:73: cd:56:d4:d8:59:bd:43:75:73:77:88:16:5b:7e:70: dd:72:fc:23:9d:6d:e7:9d:8c:ec:15:32:67:5f:50: f5:ad:e8:2b:f1:c3:3e:71:72:4a:3f:7f:75:b0:05: 79:81:d7:1a:2a:4f:12:74:35:5d:0f:74:31:29:d5: 09:23:16:2b:53:25:d1:dc:14:31:42:94:29:df:9c: ba:b7:9b:85:bb:f5:f1:18:de:70:09:ae:79:05:58: 8a:14:86:98:e5:01:8f:b9:79:f2:ab:b6:7c:39:4f: 05:ca:a7:7a:c9:d0:b6:1a:b2:ac:9c:a1:1e:28:a3: b3:7b:7b:dd:b7:27:2e:15:ea:7e:31:58:54:31:50: 57:54:ef:f2:5b:5a:94:d0:94:a5:c0:a8:66:f9:3c: e0:61:2b:01:ee:ce:d6:2c:49:87:d7:10:48:26:fa: 0c:46:e4:ed:12:e5:98:30:0f:86:63:7e:13:22:d5: 16:7d:01:4d:39:81:77:16:a9:2c:87:6f:69:54:6c: e7:87:fe:b7:28:ef:19:6b:1c:64:0e:86:e4:93:41: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:88:78:0B:31:1C:8A:CD:13:3F:FF:4E:A4:FF:58:1A:DE:21:66:46 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:56:50:8b:93:0f:4a:8e:eb:54:c1:73:bb:95:a5:4f:0e:97: fa:24:46:ac:03:cf:b8:2b:fe:e6:5c:6d:82:67:7c:8b:06:b8: 4d:80:e1:f2:c7:17:d2:0e:50:c2:98:1b:4c:08:0d:a2:4a:a7: ab:a4:16:30:8e:92:b9:a2:2a:30:9e:f5:a0:81:5f:b1:24:d2: ac:03:47:2f:08:9a:e7:d4:bd:ea:2f:bd:28:f8:29:09:1a:10: b1:e5:49:2e:50:90:c3:ec:c1:4e:bd:8f:6c:b4:77:36:fc:49: 5d:7d:b6:0a:c8:2e:e5:60:49:b4:4b:61:ff:06:d1:df:d6:ed: 67:a5:14:6f:24:f2:8c:24:66:ac:01:9c:c8:6e:ee:24:ff:0f: d6:dc:03:36:9f:91:3d:cd:de:df:0e:0c:0e:c1:96:a2:63:ac: d6:de:88:f5:44:04:12:d5:b5:a2:dc:0a:4c:e8:78:c4:c4:a6: 54:cc:94:60:09:9f:d0:ab:e8:da:ae:c1:d1:f7:1e:4e:b9:d7: 4f:11:ce:48:d5:79:99:59:43:3f:bd:35:a3:12:ef:d1:1c:11: 60:01:97:ac:08:df:be:5e:ba:aa:6b:7b:55:1a:fb:37:70:50: 35:c1:79:88:16:34:96:6a:1b:49:8f:d2:13:a5:e1:d0:f5:22: 46:0f:a1:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjYwODE5MDYwNTQyWhcNMjYwODI2MDYwNTQyWjAYMRYwFAYD VQQDEw02YTg1NDdiNi05ZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YCF7GNrsrbuFBD/VtHwhcgW/YSgCrCM1u4Nh7IfC/6MM7wb0DhNny5bYHPN VtTYWb1DdXN3iBZbfnDdcvwjnW3nnYzsFTJnX1D1regr8cM+cXJKP391sAV5gdca Kk8SdDVdD3QxKdUJIxYrUyXR3BQxQpQp35y6t5uFu/XxGN5wCa55BViKFIaY5QGP uXnyq7Z8OU8Fyqd6ydC2GrKsnKEeKKOze3vdtycuFep+MVhUMVBXVO/yW1qU0JSl wKhm+TzgYSsB7s7WLEmH1xBIJvoMRuTtEuWYMA+GY34TItUWfQFNOYF3Fqksh29p VGznh/63KO8ZaxxkDobkk0HamQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiIeAsx HIrNEz//TqT/WBreIWZGMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlZQi5MPSo7rVMFzu5WlTw6X+iRGrAPPuCv+5lxtgmd8iwa4TYDh8scX0g5Q wpgbTAgNokqnq6QWMI6SuaIqMJ71oIFfsSTSrANHLwia59S96i+9KPgpCRoQseVJ LlCQw+zBTr2PbLR3NvxJXX22Csgu5WBJtEth/wbR39btZ6UUbyTyjCRmrAGcyG7u JP8P1twDNp+RPc3e3w4MDsGWomOs1t6I9UQEEtW1otwKTOh4xMSmVMyUYAmf0Kvo 2q7B0fceTrnXTxHOSNV5mVlDP701oxLv0RwRYAGXrAjfvl66qmt7VRr7N3BQNcF5 iBY0lmobSY/SE6Xh0PUiRg+hsQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:55 2026 by rpki-client