$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: fVRnTPQA8sJcvxnY/TBg2rzqFI4xHk288V18qok1qsg= Subject key identifier: 5A:B0:8D:82:C9:81:81:17:E4:82:6F:D4:5E:B4:F5:EF:E4:7D:C8:9A Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: C7 Signing time: Tue 23 Jun 2026 07:06:26 +0000 Manifest this update: Tue 23 Jun 2026 07:06:26 +0000 Manifest next update: Tue 30 Jun 2026 07:06:26 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: wfg/3CDt8eYb030t7Lnuj4ciG2vHkqTbFPcIdqHgG8M=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 07:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Jun 23 07:06:26 2026 GMT Not After : Jun 30 07:06:26 2026 GMT Subject: CN=6a3a3072-d5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:0f:97:44:7c:d2:77:94:93:84:83:9a:fb: 4b:b5:ed:dc:89:7e:f7:4f:60:84:fa:be:b7:d4:d4: 22:43:cb:d7:57:8f:ef:89:53:47:08:f7:0f:60:43: 7e:fd:54:6d:22:b0:bb:8a:69:60:30:09:28:05:f7: 85:ff:9b:50:dc:6f:8e:7c:3d:fc:9a:72:e3:88:2a: 3a:f6:75:a4:dc:9d:fb:ec:79:00:36:85:4a:cf:e3: 51:af:ea:0c:ca:35:ed:6a:d2:52:2b:e7:c5:e8:21: 6f:b3:9b:23:31:02:d1:77:1f:00:27:99:06:66:53: 62:40:3b:ee:3f:c9:67:a0:19:e3:4c:a1:22:21:18: 9d:32:3a:1a:0f:53:d4:c0:32:87:b6:83:9f:dc:fc: 24:e6:8f:2e:85:cf:0f:f1:ce:43:62:da:cc:23:37: 5f:15:e0:55:fd:5e:7f:30:bb:c0:08:33:76:3e:63: 43:df:dc:6f:e9:e2:ff:47:ca:d3:a6:d6:ff:5e:09: f4:47:dc:95:1e:c1:b0:e3:db:71:b8:bb:0e:7e:27: c3:a4:7d:e6:2d:08:11:65:ff:3f:31:d9:7a:00:e2: 3f:d6:27:4d:22:ef:32:cd:47:47:bc:2e:99:05:52: f7:c3:33:46:52:c8:a1:0e:59:7d:44:31:ba:4b:f7: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:8D:82:C9:81:81:17:E4:82:6F:D4:5E:B4:F5:EF:E4:7D:C8:9A X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:8c:39:b2:0d:bf:87:89:d3:98:0f:fb:28:ed:f1:dc:db: e5:fc:d4:ff:8c:0e:87:7c:98:7b:59:b6:63:53:98:1f:2e:04: 05:71:d4:8d:30:a3:52:ca:3d:4b:fa:21:68:d8:81:ab:96:ef: 8a:58:88:32:a0:d5:9b:cd:22:fc:08:a4:f4:9e:77:a8:81:76: ee:24:bf:c3:08:b0:51:f2:77:cb:bd:00:e3:a8:a1:26:63:5f: 86:6d:30:00:92:3d:30:ee:ac:95:0d:a7:c0:5a:a4:fb:ea:dd: 00:e6:7e:08:2b:84:cb:c2:ef:a1:ec:54:58:6b:d5:33:69:19: 82:03:9a:ea:d8:87:4a:01:cd:6d:4c:ab:43:c8:97:fe:c5:5f: 34:4e:62:94:d0:af:62:bd:31:8f:8a:01:61:0e:f5:29:ff:cf: 80:45:ae:75:68:93:2d:65:7f:1f:02:af:a8:dc:35:82:a5:9e: 22:de:49:79:69:3f:f3:bb:80:36:bc:c0:e6:20:b4:57:49:46: c0:c6:7d:1c:7b:41:57:53:c6:09:08:f7:76:de:4f:ea:09:c5: 4e:dd:78:91:d1:30:93:2f:ca:15:3f:46:29:c0:01:24:b3:a4: a9:02:95:9b:e5:b0:04:61:d0:a2:03:96:53:76:ef:a8:e7:f4: 29:af:dd:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCMzYxMTAvBgNVBAUTKDM0RjBGOENEODdCODhDNEY1MjBFNDZGQjk1RDJEQjg0 RkEwNDMzNjIwHhcNMjYwNjIzMDcwNjI2WhcNMjYwNjMwMDcwNjI2WjAYMRYwFAYD VQQDEw02YTNhMzA3Mi1kNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoN8Pl0R80neUk4SDmvtLte3ciX73T2CE+r631NQiQ8vXV4/viVNHCPcPYEN+ /VRtIrC7imlgMAkoBfeF/5tQ3G+OfD38mnLjiCo69nWk3J377HkANoVKz+NRr+oM yjXtatJSK+fF6CFvs5sjMQLRdx8AJ5kGZlNiQDvuP8lnoBnjTKEiIRidMjoaD1PU wDKHtoOf3Pwk5o8uhc8P8c5DYtrMIzdfFeBV/V5/MLvACDN2PmND39xv6eL/R8rT ptb/Xgn0R9yVHsGw49txuLsOfifDpH3mLQgRZf8/Mdl6AOI/1idNIu8yzUdHvC6Z BVL3wzNGUsihDll9RDG6S/dp/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqwjYLJ gYEX5IJv1F609e/kfciaMB8GA1UdIwQYMBaAFDTw+M2HuIxPUg5G+5XS24T6BDNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0IzNi83MkU2RkEyNjQw OEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpFOVNEa2I3bGRMYmhQb0VN MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0IzNi83MkU2RkEyNjQwOEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpF OVNEa2I3bGRMYmhQb0VNMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXj2MObINv4eJ05gP+yjt8dzb5fzU/4wOh3yYe1m2Y1OYHy4EBXHUjTCjUso9 S/ohaNiBq5bviliIMqDVm80i/Aik9J53qIF27iS/wwiwUfJ3y70A46ihJmNfhm0w AJI9MO6slQ2nwFqk++rdAOZ+CCuEy8LvoexUWGvVM2kZggOa6tiHSgHNbUyrQ8iX /sVfNE5ilNCvYr0xj4oBYQ71Kf/PgEWudWiTLWV/HwKvqNw1gqWeIt5JeWk/87uA NrzA5iC0V0lGwMZ9HHtBV1PGCQj3dt5P6gnFTt14kdEwky/KFT9GKcABJLOkqQKV m+WwBGHQogOWU3bvqOf0Ka/djg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:15:05 2026 by rpki-client