$ rpki-client -vvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: q0vgFnPgXn5QFkpKGuiP73Dmmxs+PD3eNGVtwkZq7VI= Subject key identifier: A7:0E:7E:61:94:BD:60:FE:2A:73:8C:21:B9:70:5C:02:4D:88:97:C2 Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 31 Signing time: Fri 17 Jul 2026 10:00:20 +0000 Manifest this update: Fri 17 Jul 2026 10:00:20 +0000 Manifest next update: Fri 24 Jul 2026 10:00:20 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: S5kz/v76By/tgDRlrebpSzKUGgG4fKcZjaJ31PHbjSQ=) 2: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) 3: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: Jul 17 10:00:20 2026 GMT Not After : Jul 24 10:00:20 2026 GMT Subject: CN=6a59fd34-e2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:30:2a:a8:fb:36:6a:d1:e5:6f:97:54:99: 1d:73:60:1c:68:ac:17:42:54:4f:24:b8:f2:f7:29: 18:0d:5c:c3:6e:9d:2d:8e:55:8f:22:f6:17:5d:5b: 56:74:e8:5b:b4:d5:eb:88:d4:e6:1c:56:6b:b7:ed: e6:db:10:b0:eb:0e:29:bb:2b:d2:3f:b7:c2:8b:b2: 11:62:ed:18:2a:49:c1:f4:91:c2:fc:3c:6c:50:8e: 16:00:28:73:29:c2:1a:7f:4d:4a:6e:d6:64:d9:5b: 64:4f:f7:4e:e9:74:2b:5f:0a:f1:e5:10:5b:a6:c2: c1:80:08:7e:11:e5:0a:4b:34:84:1b:dc:12:0c:15: 8a:5a:15:6f:48:08:5f:0b:75:22:10:35:02:ef:69: 28:ff:0a:8a:c0:77:66:79:98:74:44:62:54:fb:2e: 0c:c0:ec:86:7e:ed:1b:a3:5b:36:d0:14:eb:5b:9e: cd:24:30:12:47:57:de:2b:38:df:6e:7d:de:c4:83: c8:89:49:a0:d8:a8:36:41:b8:20:27:48:05:68:db: 11:e3:12:53:2a:77:bf:45:f7:2f:db:93:9a:a4:41: 2a:98:95:14:a7:29:dd:45:20:e8:36:22:63:2b:50: 9f:f3:b6:9d:19:7a:5b:72:e9:b4:81:d3:67:05:a5: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:7E:61:94:BD:60:FE:2A:73:8C:21:B9:70:5C:02:4D:88:97:C2 X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b6:8c:f3:33:9f:4d:f1:e6:70:8b:80:80:0f:08:bb:b0:39: e9:9b:7e:44:ea:99:e5:4d:b2:27:2b:2a:8d:7d:d6:65:e1:9b: 30:9d:b6:d2:57:ce:9c:e1:f7:c8:1d:25:28:2d:15:5b:c2:3b: bb:46:96:04:e1:5b:e9:d0:7c:bd:22:e2:77:4b:29:dd:5c:93: 8f:3b:92:30:2c:f6:6e:83:f3:7c:f2:69:3a:66:d9:cd:d4:c9: b8:ec:82:30:9d:55:52:b2:07:b0:d8:6a:0d:ec:b0:e0:e2:12: 09:02:07:cd:55:bd:42:32:c3:67:86:62:18:53:61:4f:bc:ab: d6:52:62:1a:5f:62:91:45:88:cd:11:d7:4c:36:b8:6a:3b:de: 05:a4:38:a7:5e:42:73:0b:bd:15:86:4b:7b:0b:a6:bd:61:5d: 10:31:f9:dd:96:9e:1a:89:0a:b8:28:79:25:b8:d0:a3:86:ad: 5a:e0:30:b2:be:de:0f:f9:c5:1a:92:04:38:fa:06:49:99:95: 56:ba:dd:6c:6c:6c:8f:85:a8:84:be:f1:9e:18:47:1a:fc:e9: 86:af:79:29:ca:d2:3a:2a:a0:60:7b:86:65:89:67:be:97:69: 3f:bc:b6:a3:24:b4:f4:72:54:4f:c9:8b:59:2e:1d:bf:e1:1f: d4:42:f5:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjA3MTcxMDAwMjBaFw0yNjA3MjQxMDAwMjBaMBgxFjAUBgNV BAMTDTZhNTlmZDM0LWUyYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt+TAqqPs2atHlb5dUmR1zYBxorBdCVE8kuPL3KRgNXMNunS2OVY8i9hddW1Z0 6Fu01euI1OYcVmu37ebbELDrDim7K9I/t8KLshFi7RgqScH0kcL8PGxQjhYAKHMp whp/TUpu1mTZW2RP907pdCtfCvHlEFumwsGACH4R5QpLNIQb3BIMFYpaFW9ICF8L dSIQNQLvaSj/CorAd2Z5mHREYlT7LgzA7IZ+7RujWzbQFOtbns0kMBJHV94rON9u fd7Eg8iJSaDYqDZBuCAnSAVo2xHjElMqd79F9y/bk5qkQSqYlRSnKd1FIOg2ImMr UJ/ztp0Zelty6bSB02cFpRW9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpw5+YZS9 YP4qc4whuXBcAk2Il8IwHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6tozzM59N8eZwi4CADwi7sDnpm35E6pnlTbInKyqNfdZl4ZswnbbSV86c4ffI HSUoLRVbwju7RpYE4Vvp0Hy9IuJ3SyndXJOPO5IwLPZug/N88mk6ZtnN1Mm47IIw nVVSsgew2GoN7LDg4hIJAgfNVb1CMsNnhmIYU2FPvKvWUmIaX2KRRYjNEddMNrhq O94FpDinXkJzC70Vhkt7C6a9YV0QMfndlp4aiQq4KHkluNCjhq1a4DCyvt4P+cUa kgQ4+gZJmZVWut1sbGyPhaiEvvGeGEca/OmGr3kpytI6KqBge4ZliWe+l2k/vLaj JLT0clRPyYtZLh2/4R/UQvXG -----END CERTIFICATE-----Generated at Sat Jul 18 01:52:01 2026 by rpki-client