$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: mNF1fR8zw6/Ta3DqPDK0rB2D6VbrdnSOteoaHff2Gmk= Subject key identifier: 68:A7:81:09:A4:83:97:4C:07:3C:26:8D:F1:84:B4:09:D7:B6:65:E0 Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 0103 Signing time: Tue 23 Jun 2026 06:21:54 +0000 Manifest this update: Tue 23 Jun 2026 06:21:53 +0000 Manifest next update: Tue 30 Jun 2026 06:21:53 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: X94ZFe+9yXOuNILTpwKEYZuEej5q5tu+5xIn/6vg5Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 06:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Jun 23 06:21:53 2026 GMT Not After : Jun 30 06:21:53 2026 GMT Subject: CN=6a3a2602-3fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:86:ba:c6:bc:74:94:01:27:fc:40:05:e4: f2:c1:ed:30:49:ce:0b:bb:b7:f7:44:74:bf:a0:0e: 0f:8e:d7:c0:36:e5:05:83:7a:9b:f4:ff:e4:5f:57: 36:c8:c9:2b:1f:2e:8b:29:79:e7:5b:f3:e9:48:c4: 48:86:32:b6:3d:3f:f7:07:ed:bb:04:9f:0d:4d:61: eb:a2:af:2e:a1:17:b9:92:8c:52:89:e1:ef:d1:b7: 68:63:d8:a5:3c:e9:35:2e:dc:90:df:16:2a:f4:6b: 44:96:44:1d:90:58:22:22:30:25:ea:00:a5:76:a2: 28:36:9c:5d:62:51:2c:05:41:e8:71:85:1e:2c:2b: 34:de:13:18:ee:39:b0:69:24:3a:05:3c:65:b2:d9: eb:5f:7d:c4:af:53:8d:18:e0:a4:fe:94:f5:71:67: 73:30:b5:a9:18:f3:1b:79:85:5c:8e:34:f5:f3:59: 2e:8b:a5:23:10:60:64:35:ac:99:d8:f0:a0:f4:8a: 15:73:60:18:06:7b:95:26:07:86:76:31:ad:e7:0c: 20:34:19:b6:be:ab:51:d2:41:dc:05:f8:9f:cb:73: 31:c7:4e:a6:a5:58:46:6c:90:1e:84:1e:5c:c1:f0: 10:be:bb:97:04:ef:c8:76:34:2d:10:7e:9a:b4:17: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A7:81:09:A4:83:97:4C:07:3C:26:8D:F1:84:B4:09:D7:B6:65:E0 X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:72:f8:bc:de:f1:a8:a4:6a:88:a6:97:8f:f6:61:ef:ee:ce: 4e:6e:54:c5:63:c5:b5:3f:cd:16:2e:13:18:50:ec:19:e4:7a: 1f:09:a4:63:b9:d4:94:ee:df:37:a5:0f:c0:7b:25:eb:6c:82: c6:02:c4:84:b5:86:07:d5:d3:d0:8e:31:3f:31:8f:21:a4:54: 4f:c1:24:ec:3e:6c:46:42:06:b7:fa:20:05:e6:67:cb:97:4d: 7c:43:c7:89:c7:a4:62:9c:53:21:b5:e4:b3:a7:97:10:83:ce: fa:d2:a1:2a:88:ff:ca:8b:36:2a:61:7e:b2:43:35:4e:6d:15: 00:f1:25:ce:e9:dd:b8:cd:58:0c:a2:8a:48:89:16:f3:42:f9: a6:40:58:f1:52:1e:6a:63:5d:e6:84:bd:4f:a0:6b:ff:19:6a: ba:b0:a9:5d:ff:43:40:9d:b2:be:a0:8f:0e:5e:b5:df:ed:5e: 68:0c:8c:05:c7:0c:04:2b:3e:ab:52:b9:d3:a4:77:19:a3:75: e2:08:e7:c8:25:1b:28:77:48:6c:b1:cd:28:d1:b0:da:82:7f: 45:a5:fb:57:77:09:d9:af:1a:62:53:a3:94:1b:fa:c0:d9:bf: 3a:33:98:ab:07:d4:76:59:f7:a5:d3:6e:2c:04:86:ac:6a:59: 6e:d7:51:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKDM0MTdFQkJENzgyRDY1RjI5QzQ0RkMwQkRFNTgxQTRE MUIyREVCQTQwHhcNMjYwNjIzMDYyMTUzWhcNMjYwNjMwMDYyMTUzWjAYMRYwFAYD VQQDEw02YTNhMjYwMi0zZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAaGusa8dJQBJ/xABeTywe0wSc4Lu7f3RHS/oA4PjtfANuUFg3qb9P/kX1c2 yMkrHy6LKXnnW/PpSMRIhjK2PT/3B+27BJ8NTWHroq8uoRe5koxSieHv0bdoY9il POk1LtyQ3xYq9GtElkQdkFgiIjAl6gCldqIoNpxdYlEsBUHocYUeLCs03hMY7jmw aSQ6BTxlstnrX33Er1ONGOCk/pT1cWdzMLWpGPMbeYVcjjT181kui6UjEGBkNayZ 2PCg9IoVc2AYBnuVJgeGdjGt5wwgNBm2vqtR0kHcBfify3Mxx06mpVhGbJAehB5c wfAQvruXBO/IdjQtEH6atBd5QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGingQmk g5dMBzwmjfGEtAnXtmXgMB8GA1UdIwQYMBaAFDQX6714LWXynET8C95YGk0bLeuk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81OUFGQzIwQUU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpmS2NSUHdMM2xnYVRSc3Q2 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81OUFGQzIwQUU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpm S2NSUHdMM2xnYVRSc3Q2NlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFXL4vN7xqKRqiKaXj/Zh7+7OTm5UxWPFtT/NFi4TGFDsGeR6HwmkY7nUlO7f N6UPwHsl62yCxgLEhLWGB9XT0I4xPzGPIaRUT8Ek7D5sRkIGt/ogBeZny5dNfEPH icekYpxTIbXks6eXEIPO+tKhKoj/yos2KmF+skM1Tm0VAPElzunduM1YDKKKSIkW 80L5pkBY8VIeamNd5oS9T6Br/xlqurCpXf9DQJ2yvqCPDl613+1eaAyMBccMBCs+ q1K506R3GaN14gjnyCUbKHdIbLHNKNGw2oJ/RaX7V3cJ2a8aYlOjlBv6wNm/OjOY qwfUdln3pdNuLASGrGpZbtdR9A== -----END CERTIFICATE-----Generated at Wed Jun 24 11:18:49 2026 by rpki-client