$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: /6rpLT7B/nPSa4wAaSBSJvq3D3b0hVTijfpT3XOBkvY= Subject key identifier: 6F:4D:83:7F:84:70:77:C2:47:98:02:12:C2:CB:EE:E0:92:D2:E1:8A Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2AFA Signing time: Tue 18 Aug 2026 15:38:04 +0000 Manifest this update: Tue 18 Aug 2026 15:38:03 +0000 Manifest next update: Tue 25 Aug 2026 15:38:03 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: Up/jQLpX4Teycg3vWO+CagC8T36DLvEDZqnB4lcVnU4=) 2: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: EzjCQSqiPhSaFvXF1H6L31ZEuTh+F8SaBy2h9H/JZOI=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dSCz7IvNO2r+X8zYzOrzx4jBPpWQHgUEzjmsQAJr19U=) 4: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 0j5aE5hiEdJstFRcjjMbmu5rVLRxiGYSHh/mpTlglk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11049 (0x2b29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Aug 18 15:38:03 2026 GMT Not After : Aug 25 15:38:03 2026 GMT Subject: CN=6a847c5c-7bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:dd:0d:26:b4:0c:18:09:a6:54:a8:f2:76: 15:8a:4c:b9:b7:22:71:5b:94:69:ae:f3:42:bb:22: 87:ea:c3:be:29:fc:6f:18:fc:9a:8b:93:c7:79:ff: ab:55:04:b6:bf:ac:9b:49:6e:eb:80:40:75:dd:00: 07:2e:20:e9:b5:31:9e:6e:44:88:3e:53:4f:d8:44: 8b:1b:fb:aa:a6:66:8b:3d:1a:bb:32:32:8c:9c:2d: 94:61:9a:8b:5e:40:07:4c:74:96:85:68:c2:bf:0b: 19:66:c8:f1:32:3d:ed:7d:12:c9:d1:6b:2b:d8:e4: 30:0f:7f:2e:8d:9a:05:9e:67:90:84:2c:d0:94:f6: d4:a3:f0:34:25:0d:52:4c:1c:8c:ad:55:a3:23:b0: 30:ea:b7:5b:99:36:8f:04:95:23:2a:5e:3b:b3:84: cb:8d:44:5b:b7:9e:24:8d:dc:bb:0a:c9:2d:cb:71: b2:ba:2e:0b:fe:cc:0b:73:e7:db:ef:30:bd:eb:34: 72:23:64:22:ac:33:6b:da:c2:fe:dd:51:c6:04:76: 57:37:0f:c7:66:c8:b5:94:7e:cf:f7:59:a3:77:df: 32:ad:a3:da:f2:08:d9:64:bf:45:69:b2:d1:71:98: 25:f4:f6:02:34:ed:35:21:e1:e8:69:01:37:d0:70: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4D:83:7F:84:70:77:C2:47:98:02:12:C2:CB:EE:E0:92:D2:E1:8A X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:19:7c:bc:38:20:42:32:60:7a:ad:2d:6a:55:22:3d:ee:e1: 93:e8:77:57:6c:8f:88:a0:31:66:f8:61:da:5e:aa:34:49:67: 05:e1:b3:10:e0:2c:e7:7a:a9:86:45:75:c0:a3:73:9a:c7:d1: 4a:49:38:cd:3c:f7:28:20:e2:5d:ca:26:93:7e:68:9b:b2:e7: c5:df:61:b8:1d:87:2e:1a:c2:d2:fb:5f:fd:75:65:a9:a4:d3: 45:a8:dd:33:c4:43:9b:b1:73:ca:3a:67:73:02:8a:75:05:e9: bf:c4:4d:6b:ea:67:8e:b3:61:c3:c3:5e:e9:c5:89:f1:41:7e: da:b7:9c:8a:de:70:f1:52:45:04:a1:5f:1f:15:4e:86:6c:21: 36:f3:8b:37:a2:7b:32:2b:9f:78:60:06:cb:99:0b:6a:31:c1: 4b:5d:88:36:8b:dc:16:1a:9d:5a:03:4a:fd:14:38:9c:8f:ca: d9:bd:a8:ea:46:d7:b1:6d:0a:c7:60:2f:3d:f7:4c:81:d6:88: 50:5b:96:5c:fe:8a:a7:92:3c:b2:8d:e4:af:39:1f:05:1c:b8: 87:a7:43:4e:37:34:34:e2:ad:d1:f4:98:c6:a2:b2:11:09:9b: 53:d1:bb:d0:28:18:76:4b:b9:57:63:fe:df:32:b3:72:79:93: 45:4e:0a:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjYwODE4MTUzODAzWhcNMjYwODI1MTUzODAzWjAYMRYwFAYD VQQDEw02YTg0N2M1Yy03YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+fdDSa0DBgJplSo8nYViky5tyJxW5RprvNCuyKH6sO+KfxvGPyai5PHef+r VQS2v6ybSW7rgEB13QAHLiDptTGebkSIPlNP2ESLG/uqpmaLPRq7MjKMnC2UYZqL XkAHTHSWhWjCvwsZZsjxMj3tfRLJ0Wsr2OQwD38ujZoFnmeQhCzQlPbUo/A0JQ1S TByMrVWjI7Aw6rdbmTaPBJUjKl47s4TLjURbt54kjdy7Cskty3Gyui4L/swLc+fb 7zC96zRyI2QirDNr2sL+3VHGBHZXNw/HZsi1lH7P91mjd98yraPa8gjZZL9FabLR cZgl9PYCNO01IeHoaQE30HCHBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9Ng3+E cHfCR5gCEsLL7uCS0uGKMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhl8vDggQjJgeq0talUiPe7hk+h3V2yPiKAxZvhh2l6qNElnBeGzEOAs53qp hkV1wKNzmsfRSkk4zTz3KCDiXcomk35om7Lnxd9huB2HLhrC0vtf/XVlqaTTRajd M8RDm7FzyjpncwKKdQXpv8RNa+pnjrNhw8Ne6cWJ8UF+2recit5w8VJFBKFfHxVO hmwhNvOLN6J7MiufeGAGy5kLajHBS12INovcFhqdWgNK/RQ4nI/K2b2o6kbXsW0K x2AvPfdMgdaIUFuWXP6Kp5I8so3krzkfBRy4h6dDTjc0NOKt0fSYxqKyEQmbU9G7 0CgYdku5V2P+3zKzcnmTRU4K5A== -----END CERTIFICATE-----Generated at Wed Aug 19 14:30:04 2026 by rpki-client