$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: a5/DkK80Ks5wBMwHAS0Z7qlHy28XNpYBfe7lAPDy0Yg= Subject key identifier: 92:E1:BC:E7:BD:C1:E8:12:32:85:D4:C0:CC:81:34:16:84:1F:B2:E7 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 0673 Signing time: Tue 18 Aug 2026 23:43:48 +0000 Manifest this update: Tue 18 Aug 2026 23:43:47 +0000 Manifest next update: Tue 25 Aug 2026 23:43:47 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: w2tPmDfA6m4mzt/KnA+RSyT1YE1Q5kyUcMa/8vUbk4s=) 2: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: vsSEFJuv44Kf4vefqvx9slxRLksNOU0oDcbDD/sVbm8=) 3: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: oTkyMx+qLAKRpEl4XRW6uGf8eqQTbCo0c4vnp7v/6xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Aug 18 23:43:47 2026 GMT Not After : Aug 25 23:43:47 2026 GMT Subject: CN=6a84ee34-c201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:69:0e:e9:b7:9a:c1:e7:d2:3f:02:78:0e: a2:68:6f:c3:64:a3:d3:cd:79:fd:f8:2c:12:27:90: 36:24:ba:72:7a:c5:6e:53:35:e1:13:40:6c:44:f9: 98:9c:9f:82:0a:7e:6b:81:79:42:76:a4:56:0e:58: 28:31:23:9f:4b:30:28:54:fc:5e:47:4a:95:f0:0f: fc:c0:41:08:b7:8f:96:66:b2:01:bc:34:de:9e:e8: 21:8b:a8:da:80:ae:bc:3b:33:94:8a:4f:11:18:34: ae:1e:79:73:9e:13:3f:5c:ee:7c:0b:87:61:7b:38: bb:eb:43:16:4c:98:61:3c:41:ad:3d:47:67:94:89: c6:2d:87:fb:c8:b6:61:5f:7c:42:38:6b:f5:32:2e: 03:6a:38:bf:6f:44:c7:b1:2c:ff:a5:c0:76:4d:b1: 5b:c7:64:8e:5d:5f:22:af:7c:c0:aa:9e:42:ac:a0: 2c:03:f5:bf:ef:c8:95:7c:1e:90:17:2f:85:74:4f: 1a:bc:e6:e7:c8:81:6d:54:4f:80:ee:86:61:2e:46: 06:bd:c5:f7:3f:ed:fb:79:a7:75:9a:f0:1d:b2:99: 9e:fb:78:1d:5d:f5:c1:56:89:77:6d:61:c3:77:5c: 71:2a:82:b8:35:76:ff:ae:36:43:39:df:28:c9:f3: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:BC:E7:BD:C1:E8:12:32:85:D4:C0:CC:81:34:16:84:1F:B2:E7 X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e1:4d:b3:be:10:af:92:f5:49:6c:77:40:f8:99:3a:04:23: 8f:5b:38:b7:74:84:f4:77:4b:d2:9f:b3:0a:5b:a6:57:46:fd: d7:10:93:b2:21:f8:7d:4d:71:b2:7c:74:94:a0:08:17:55:13: d5:36:e4:50:a6:31:58:f5:b7:7a:31:2e:40:bd:82:35:77:eb: 68:d1:28:ad:0e:18:fa:87:0c:fd:2a:7b:65:56:a3:95:bb:67: ac:7d:88:f8:b8:6c:f3:98:a4:a1:d1:07:e4:e9:8c:06:25:66: e4:20:5a:9f:5b:67:0b:dc:2a:8a:40:87:7c:78:3e:ae:73:a7: 17:c7:8a:53:c2:21:2b:6e:19:af:76:ce:70:62:a8:79:66:18: c6:e6:52:97:97:89:88:b6:7f:01:4c:ac:1a:fd:c4:04:e3:f3: 7c:bf:89:d7:ec:e6:af:63:dd:66:06:30:88:ce:23:c2:34:63: 87:fb:56:35:42:fe:99:c5:c0:a3:46:1f:ff:ee:90:8b:e0:4e: 0f:18:86:88:ae:df:d0:9f:1c:68:b3:8a:e5:c6:1a:2f:a2:14: 3b:b3:ae:ce:50:8d:d3:fd:13:35:72:6f:9f:6a:54:bc:b8:14: d8:15:12:b1:12:54:85:fe:81:1f:4d:ac:bc:12:a4:ee:31:e0: dc:e8:b6:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjYwODE4MjM0MzQ3WhcNMjYwODI1MjM0MzQ3WjAYMRYwFAYD VQQDEw02YTg0ZWUzNC1jMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvNpDum3msHn0j8CeA6iaG/DZKPTzXn9+CwSJ5A2JLpyesVuUzXhE0BsRPmY nJ+CCn5rgXlCdqRWDlgoMSOfSzAoVPxeR0qV8A/8wEEIt4+WZrIBvDTenughi6ja gK68OzOUik8RGDSuHnlznhM/XO58C4dhezi760MWTJhhPEGtPUdnlInGLYf7yLZh X3xCOGv1Mi4Daji/b0THsSz/pcB2TbFbx2SOXV8ir3zAqp5CrKAsA/W/78iVfB6Q Fy+FdE8avObnyIFtVE+A7oZhLkYGvcX3P+37ead1mvAdspme+3gdXfXBVol3bWHD d1xxKoK4NXb/rjZDOd8oyfNOtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLhvOe9 wegSMoXUwMyBNBaEH7LnMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAauFNs74Qr5L1SWx3QPiZOgQjj1s4t3SE9HdL0p+zClumV0b91xCTsiH4fU1x snx0lKAIF1UT1TbkUKYxWPW3ejEuQL2CNXfraNEorQ4Y+ocM/Sp7ZVajlbtnrH2I +Lhs85ikodEH5OmMBiVm5CBan1tnC9wqikCHfHg+rnOnF8eKU8IhK24Zr3bOcGKo eWYYxuZSl5eJiLZ/AUysGv3EBOPzfL+J1+zmr2PdZgYwiM4jwjRjh/tWNUL+mcXA o0Yf/+6Qi+BODxiGiK7f0J8caLOK5cYaL6IUO7OuzlCN0/0TNXJvn2pUvLgU2BUS sRJUhf6BH02svBKk7jHg3Oi26g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:39 2026 by rpki-client