$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: 0QVCAAzq93dOudcmw1MDr1l1Efke1udwykqkS0sTndM= Subject key identifier: DF:9C:98:8D:48:2D:FC:CE:14:76:45:27:AD:B0:29:3F:70:87:D6:B9 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 07E9 Signing time: Wed 26 Aug 2026 21:20:36 +0000 Manifest this update: Wed 26 Aug 2026 21:20:35 +0000 Manifest next update: Wed 02 Sep 2026 21:20:35 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: Vcophwoz5hzeTz5xOkWukyBkec57AE+MKdRrUvv4i+U=) 2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 21:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Aug 26 21:20:35 2026 GMT Not After : Sep 2 21:20:35 2026 GMT Subject: CN=6a8f58a4-75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:19:9a:fa:f9:cc:ea:0f:a5:ab:79:16:8d: 46:b8:3b:e6:14:4e:89:e9:2b:9a:6f:ae:2d:22:bb: 4f:0d:6a:55:b0:f0:5a:c5:49:e6:de:10:f2:05:1d: e9:a2:5d:84:d3:44:cc:b5:05:8b:c7:6f:5f:bc:35: 04:de:99:b7:f8:05:1f:ad:69:65:7f:78:d5:a7:a2: 54:ac:8e:e2:44:89:40:7c:b3:e4:17:1a:c2:90:be: 89:3c:a7:91:94:61:ad:42:ca:83:3b:e8:92:ce:5f: 68:21:57:65:0c:ae:2c:55:e5:03:b6:fa:56:19:3d: 34:60:97:6d:dd:c4:57:32:64:0a:11:bf:bc:c9:00: 06:23:e4:89:76:3b:dd:02:20:13:75:ab:b1:a0:a7: 37:81:3c:9a:01:5d:97:33:33:5f:60:53:c9:8d:04: a6:67:b7:f7:37:2a:de:17:74:8a:16:66:03:5b:be: a7:24:dd:b7:8b:12:9f:ca:0c:07:9e:b3:a6:9e:9c: eb:7c:40:32:ab:5c:43:66:5e:3d:ec:e2:b3:7a:83: 44:1b:57:79:a7:6e:eb:4f:ac:90:ee:9e:53:93:b5: b2:d7:58:a5:57:77:8a:aa:27:f5:99:7b:5f:9b:9d: 28:54:8b:fb:39:b2:74:21:59:df:b7:4f:24:68:52: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9C:98:8D:48:2D:FC:CE:14:76:45:27:AD:B0:29:3F:70:87:D6:B9 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:63:e0:2a:97:e9:99:89:39:d4:b6:87:95:ee:6d:08:de: ca:d7:c6:38:c4:74:28:36:53:0e:39:91:df:3f:24:bb:7d:ed: ee:fb:5c:97:9b:c6:28:75:19:e9:63:8e:b3:c0:cd:f3:d5:00: bd:8a:c1:07:f0:0e:3a:6d:25:5e:0f:0e:0d:4c:28:e5:d7:76: 6a:21:40:0f:41:99:80:a1:5c:51:81:5d:a7:b2:49:67:8f:2c: b3:38:c3:7b:f6:f0:c4:e9:45:39:1b:e1:99:ae:7c:57:52:b1: 76:6f:71:90:9b:5d:e7:d0:22:cd:59:c7:6b:b1:f9:e0:0c:32: 5d:bb:dc:04:60:d9:f9:f7:cc:f1:06:14:d2:f5:6b:4a:fc:53: 03:e9:b4:a3:2c:c1:be:57:4e:62:e4:a6:69:5a:73:ed:7f:7d: b5:e3:e2:5c:45:bd:25:a0:54:10:f0:a5:55:c0:88:57:50:72: c4:09:91:ba:15:fb:15:d0:e2:82:8b:e9:3d:94:ab:40:f6:54: 49:03:ef:93:c0:f2:d0:3e:a8:a9:1f:6a:c9:33:86:68:f2:74: 66:c7:1f:ff:54:6b:e3:74:0f:cb:00:1e:6d:43:0c:eb:1c:61: 06:95:15:5d:5e:80:aa:6b:63:03:6e:be:13:e6:26:5e:87:fd: 0e:12:d8:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjYwODI2MjEyMDM1WhcNMjYwOTAyMjEyMDM1WjAYMRYwFAYD VQQDEw02YThmNThhNC03NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPkZmvr5zOoPpat5Fo1GuDvmFE6J6Suab64tIrtPDWpVsPBaxUnm3hDyBR3p ol2E00TMtQWLx29fvDUE3pm3+AUfrWllf3jVp6JUrI7iRIlAfLPkFxrCkL6JPKeR lGGtQsqDO+iSzl9oIVdlDK4sVeUDtvpWGT00YJdt3cRXMmQKEb+8yQAGI+SJdjvd AiATdauxoKc3gTyaAV2XMzNfYFPJjQSmZ7f3NyreF3SKFmYDW76nJN23ixKfygwH nrOmnpzrfEAyq1xDZl497OKzeoNEG1d5p27rT6yQ7p5Tk7Wy11ilV3eKqif1mXtf m50oVIv7ObJ0IVnft08kaFJ9QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+cmI1I LfzOFHZFJ62wKT9wh9a5MB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAObFj4CqX6ZmJOdS2h5XubQjeytfGOMR0KDZTDjmR3z8ku33t7vtcl5vGKHUZ 6WOOs8DN89UAvYrBB/AOOm0lXg8ODUwo5dd2aiFAD0GZgKFcUYFdp7JJZ48sszjD e/bwxOlFORvhma58V1Kxdm9xkJtd59AizVnHa7H54AwyXbvcBGDZ+ffM8QYU0vVr SvxTA+m0oyzBvldOYuSmaVpz7X99tePiXEW9JaBUEPClVcCIV1ByxAmRuhX7FdDi govpPZSrQPZUSQPvk8Dy0D6oqR9qyTOGaPJ0Zscf/1Rr43QPywAebUMM6xxhBpUV XV6AqmtjA26+E+YmXof9DhLY2A== -----END CERTIFICATE-----Generated at Thu Aug 27 02:26:28 2026 by rpki-client