$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: md+HAPFItPKtt496vpnw6OrMvZOxxJ8H0Z/cykHeCvg= Subject key identifier: 47:EF:C6:D0:8A:72:5B:C4:F3:F0:26:6E:20:72:3A:1A:28:B2:C4:12 Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 0209 Signing time: Sat 25 Jul 2026 04:27:13 +0000 Manifest this update: Sat 25 Jul 2026 04:27:13 +0000 Manifest next update: Sat 01 Aug 2026 04:27:13 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: ZxWQYSUd0HhopU3Z49f3OV5inIYKfbA817f5Xv2CXYs=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 04:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Jul 25 04:27:13 2026 GMT Not After : Aug 1 04:27:13 2026 GMT Subject: CN=6a643b21-93c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:f9:73:be:b3:97:76:dc:a4:31:a9:b8:16: 3f:7b:7e:1a:b8:1a:76:14:8b:da:8e:3f:36:92:7c: 54:8e:4c:0a:78:79:68:26:c3:4b:f5:53:cf:49:d1: 87:40:94:b8:5e:18:d8:b1:e8:33:f1:b5:2f:78:af: 97:88:4d:0c:f7:67:53:ea:32:21:e1:80:e9:3e:53: b3:ac:24:ba:a3:f4:5a:ca:1a:82:29:59:09:c3:d0: fa:c2:b4:5e:95:87:1c:ab:3a:b0:c4:1a:ae:73:5d: 45:d9:b8:df:ff:87:d3:13:c1:d1:f6:44:b3:03:cd: db:ef:0e:af:70:5f:d9:d0:95:0f:4c:27:70:ea:8f: c2:84:b4:26:4f:e6:8a:44:2b:72:d9:5e:e0:7a:ed: 48:fb:ae:d5:57:10:3c:af:f8:9d:99:4e:da:94:eb: 7a:96:ef:62:1a:ad:0f:e8:99:65:0d:51:d2:ed:73: 00:40:6f:42:8d:62:6f:63:be:f2:f1:76:d1:65:a5: 38:2c:c1:d9:d2:45:b4:ad:32:da:21:50:e5:b9:b6: dd:1c:c3:de:a8:a0:80:3c:3f:59:a9:bb:09:31:74: 96:97:54:ad:ed:dd:b1:3b:39:64:7b:e7:85:65:36: f0:80:ba:32:41:6e:98:f0:86:14:24:1a:d8:c4:9e: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EF:C6:D0:8A:72:5B:C4:F3:F0:26:6E:20:72:3A:1A:28:B2:C4:12 X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c6:1a:8b:5b:e1:c6:90:18:92:ff:d7:a4:c0:b9:db:10:02: a9:63:7c:ec:26:56:c5:2b:52:2e:ff:64:5a:bc:bc:de:a5:71: f6:e9:44:91:bd:a3:12:1b:bf:43:09:fd:6a:b6:81:bd:88:73: 82:be:66:c1:8e:9a:d0:f0:e3:c1:86:8e:8c:e7:6a:a0:1c:eb: b9:b8:a0:50:4e:e7:83:ad:ee:d4:56:34:7b:2c:2a:3e:32:33: 29:7b:ac:61:18:de:b8:55:e8:43:54:aa:9c:a4:6d:da:44:f2: e9:2b:84:b1:da:44:6b:7c:23:df:72:61:55:44:22:27:ad:43: c4:f0:d6:c1:57:10:fe:0e:e9:ff:98:ef:8b:52:bc:a5:d5:e1: 3b:6c:93:28:80:3b:97:15:93:af:96:d9:2f:46:05:30:db:8e: 6e:37:e1:e4:47:5c:b9:5d:f7:ab:bc:82:97:1d:48:52:cb:32: d7:c0:f3:06:25:f7:94:36:ea:94:90:c4:20:0d:0a:29:ed:bf: 3c:c5:f7:8d:4a:9e:11:e7:ed:00:b7:bd:64:98:2e:51:d0:8e: 5c:a9:38:fa:be:0c:75:68:1b:4c:33:15:7b:ab:c2:1f:73:36: d6:1a:3f:84:7b:fb:77:7f:de:7f:6b:6e:c2:cb:14:18:03:bb: c2:c7:e3:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjYwNzI1MDQyNzEzWhcNMjYwODAxMDQyNzEzWjAYMRYwFAYD VQQDEw02YTY0M2IyMS05M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5b5c76zl3bcpDGpuBY/e34auBp2FIvajj82knxUjkwKeHloJsNL9VPPSdGH QJS4XhjYsegz8bUveK+XiE0M92dT6jIh4YDpPlOzrCS6o/RayhqCKVkJw9D6wrRe lYccqzqwxBquc11F2bjf/4fTE8HR9kSzA83b7w6vcF/Z0JUPTCdw6o/ChLQmT+aK RCty2V7geu1I+67VVxA8r/idmU7alOt6lu9iGq0P6JllDVHS7XMAQG9CjWJvY77y 8XbRZaU4LMHZ0kW0rTLaIVDlubbdHMPeqKCAPD9ZqbsJMXSWl1St7d2xOzlke+eF ZTbwgLoyQW6Y8IYUJBrYxJ74lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfvxtCK clvE8/AmbiByOhoossQSMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcYai1vhxpAYkv/XpMC52xACqWN87CZWxStSLv9kWry83qVx9ulEkb2jEhu/ Qwn9araBvYhzgr5mwY6a0PDjwYaOjOdqoBzrubigUE7ng63u1FY0eywqPjIzKXus YRjeuFXoQ1SqnKRt2kTy6SuEsdpEa3wj33JhVUQiJ61DxPDWwVcQ/g7p/5jvi1K8 pdXhO2yTKIA7lxWTr5bZL0YFMNuObjfh5EdcuV33q7yClx1IUssy18DzBiX3lDbq lJDEIA0KKe2/PMX3jUqeEeftALe9ZJguUdCOXKk4+r4MdWgbTDMVe6vCH3M21ho/ hHv7d3/ef2tuwssUGAO7wsfjWQ== -----END CERTIFICATE-----Generated at Sun Jul 26 21:25:00 2026 by rpki-client