$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: lcByNgWEnlElHhWLIahwpODk9zmeVz71/HujmgTw/UE= Subject key identifier: E0:BD:15:A5:6A:48:6E:75:28:A9:04:FE:37:82:C5:38:EE:C3:31:4A Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0C12 Signing time: Tue 18 Aug 2026 19:05:38 +0000 Manifest this update: Tue 18 Aug 2026 19:05:37 +0000 Manifest next update: Tue 25 Aug 2026 19:05:37 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: R2idUSnxXFhgC/5hLUSU/g3D0FG5FA8WGp26aVCrfy4=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Aug 18 19:05:37 2026 GMT Not After : Aug 25 19:05:37 2026 GMT Subject: CN=6a84ad02-6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:b5:83:34:c8:61:8b:a9:c0:e3:c3:73:b6: ae:f3:a2:fc:70:8f:85:48:b5:1f:8a:71:e1:50:40: 3b:01:95:6a:b5:16:c3:cc:4f:5d:ff:1c:31:35:1b: 8e:6f:6a:b5:d3:d6:1e:b8:8e:3d:2a:cb:87:fb:8e: 17:6d:44:0b:a5:07:9c:ff:c8:11:db:ae:6c:59:f5: 69:3b:32:ad:65:28:e7:73:f5:0a:da:85:40:c7:08: 39:31:94:3c:4a:17:4c:5d:f9:d6:f5:14:84:87:3c: 08:ff:7f:04:0c:21:d8:8e:31:79:bc:06:f0:e3:3b: 3c:6e:dc:59:fd:8f:94:38:a0:96:ab:7a:0b:de:36: 3a:bf:3f:8f:e1:0e:2a:5d:06:05:06:81:ad:8b:55: 58:f3:ee:b7:6d:f7:b8:ce:c7:2f:9c:23:5a:8f:94: fe:2d:bb:56:84:5c:b9:93:28:c8:f8:d1:7a:de:16: e0:c1:04:94:48:63:73:de:e0:3c:82:35:c5:f4:84: ba:65:82:5b:65:bc:b6:9f:2f:6d:4e:d0:4b:23:e9: 36:3d:60:a3:da:30:c9:81:58:17:ec:a8:d1:cc:bb: 45:9b:f6:e4:ab:16:51:1c:fd:a3:b7:c7:df:d1:29: 05:86:c7:57:a2:d0:40:10:f8:5c:89:a6:de:92:f6: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:15:A5:6A:48:6E:75:28:A9:04:FE:37:82:C5:38:EE:C3:31:4A X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fe:7e:57:93:8e:4f:dd:17:23:34:ef:ca:a5:01:74:2a:75: bc:b8:8a:1f:2c:90:c9:73:9d:f8:62:b6:11:46:75:cd:57:09: f1:b4:29:9d:b4:7e:ba:a2:11:9f:8b:5a:9c:7b:d9:06:b5:0b: cf:80:25:df:45:cd:2d:5c:68:25:70:42:a3:66:8c:26:9d:0d: d3:77:d2:f3:41:7d:9b:70:04:76:4d:82:51:5e:06:41:06:2d: c8:95:43:cc:64:cc:df:72:e4:8d:dd:61:d8:92:80:13:9f:66: 03:01:21:68:7b:fc:48:9e:9e:63:e2:18:30:fe:1c:d1:89:d5: ab:bb:7f:1a:bb:1b:db:12:c7:72:98:6f:2e:e4:6a:01:a9:e9: 3e:33:a7:55:9b:c5:85:2d:96:8d:08:a7:5f:ff:66:e6:ce:09: 18:9a:78:bc:30:be:ac:ce:71:f8:26:2e:7a:87:41:28:43:40: b1:ca:0c:86:fa:2f:29:21:ca:fd:b9:90:00:f1:10:6b:d4:c8: 1b:f8:f6:56:85:d5:35:fd:33:c7:81:06:90:cf:37:f6:f2:09: 7a:2c:1b:7a:bf:2a:52:3c:30:65:46:a5:64:db:08:8a:d4:d9: 71:c2:db:1f:00:7b:64:b6:97:b7:84:1c:46:51:a0:b5:20:20: 98:8d:66:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwODE4MTkwNTM3WhcNMjYwODI1MTkwNTM3WjAYMRYwFAYD VQQDEw02YTg0YWQwMi02MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpS1gzTIYYupwOPDc7au86L8cI+FSLUfinHhUEA7AZVqtRbDzE9d/xwxNRuO b2q109YeuI49KsuH+44XbUQLpQec/8gR265sWfVpOzKtZSjnc/UK2oVAxwg5MZQ8 ShdMXfnW9RSEhzwI/38EDCHYjjF5vAbw4zs8btxZ/Y+UOKCWq3oL3jY6vz+P4Q4q XQYFBoGti1VY8+63bfe4zscvnCNaj5T+LbtWhFy5kyjI+NF63hbgwQSUSGNz3uA8 gjXF9IS6ZYJbZby2ny9tTtBLI+k2PWCj2jDJgVgX7KjRzLtFm/bkqxZRHP2jt8ff 0SkFhsdXotBAEPhciabekvbQoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOC9FaVq SG51KKkE/jeCxTjuwzFKMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXP5+V5OOT90XIzTvyqUBdCp1vLiKHyyQyXOd+GK2EUZ1zVcJ8bQpnbR+uqIR n4tanHvZBrULz4Al30XNLVxoJXBCo2aMJp0N03fS80F9m3AEdk2CUV4GQQYtyJVD zGTM33Lkjd1h2JKAE59mAwEhaHv8SJ6eY+IYMP4c0YnVq7t/Grsb2xLHcphvLuRq AanpPjOnVZvFhS2WjQinX/9m5s4JGJp4vDC+rM5x+CYueodBKENAscoMhvovKSHK /bmQAPEQa9TIG/j2VoXVNf0zx4EGkM839vIJeiwber8qUjwwZUalZNsIitTZccLb HwB7ZLaXt4QcRlGgtSAgmI1mqw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:43 2026 by rpki-client