$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: 7FLLs04lavTpn8a+J69CvQx+olqYLm+IhZCM/OgcKks= Subject key identifier: 17:3E:C3:8E:6E:32:55:FA:66:9A:DF:82:D8:59:71:65:F0:A5:2F:30 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01B3 Signing time: Sat 25 Jul 2026 05:44:16 +0000 Manifest this update: Sat 25 Jul 2026 05:44:16 +0000 Manifest next update: Sat 01 Aug 2026 05:44:16 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: rcl1uGnmhM1UPDwsV0Vb2fduSOjdT0ISjCA3wOsUcH4=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 05:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jul 25 05:44:16 2026 GMT Not After : Aug 1 05:44:16 2026 GMT Subject: CN=6a644d30-e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:23:4d:7e:d1:16:4f:7d:2a:6c:fd:b7:97: 07:0e:f9:ae:ac:f3:90:28:ce:18:59:94:57:63:e0: fd:dc:7a:84:7e:4f:c2:f7:05:b1:05:bb:3d:11:ee: 00:8d:78:5d:69:65:95:30:1a:9c:1e:66:5b:b6:52: f0:80:bc:57:f4:9c:70:65:2b:0b:1d:69:06:68:03: 2b:fc:b0:a1:1b:2f:14:4d:6b:8a:08:39:9a:cf:50: 47:76:ce:1d:d8:02:ae:bb:dd:a5:77:c8:18:c9:04: 15:4e:ea:d7:c2:b3:1f:0f:9e:f2:2b:c1:ea:db:41: 23:6d:d3:cb:7d:19:4e:2d:6a:e0:41:66:92:84:c9: 00:32:19:ef:8e:e4:51:63:b7:87:da:00:2e:fa:8c: 6e:10:b7:4e:a6:b8:eb:62:78:9e:91:e5:b6:45:15: 4b:50:c6:2c:2c:5f:23:f0:81:c5:2f:4f:f2:5d:51: a5:68:f4:6c:8e:c8:a8:3b:f9:ec:b8:f0:a1:fc:14: 21:3c:9a:ac:f1:8c:4e:a3:99:dd:42:53:0a:c7:2f: d4:a0:ef:ba:aa:66:54:e9:da:49:d0:b0:f6:a5:20: 18:04:ad:9c:fe:e6:35:50:3f:47:40:32:6c:53:d4: a7:47:58:d5:31:18:6b:6e:97:b6:8f:ec:28:4c:e5: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3E:C3:8E:6E:32:55:FA:66:9A:DF:82:D8:59:71:65:F0:A5:2F:30 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:53:cd:6a:c2:53:25:1d:9e:04:c3:85:54:15:16:07:ac:20: 51:cc:fe:bc:17:94:73:fc:d2:a3:1e:2d:b2:c1:21:c9:39:c4: 35:5d:dd:1b:3b:7f:36:e9:f3:dc:49:23:5a:0a:2a:e4:71:8d: dc:6a:ba:6c:c9:73:a9:a8:98:a6:be:2d:b7:70:2c:63:d3:55: cd:b9:7b:5c:35:ba:e4:a2:0f:d8:dc:44:22:21:84:b4:c4:85: 78:36:4e:5d:2b:c9:99:51:a0:fe:3c:86:16:06:bc:6f:48:75: 7f:01:d0:39:9d:a4:02:7e:65:13:67:c1:32:33:7d:76:b3:c2: 46:98:42:06:ae:f0:fb:6d:51:e0:67:6a:d8:f6:b3:09:b3:07: 2b:45:dc:ad:d0:b1:99:72:92:f1:cf:0f:81:63:13:d8:52:a7: 0f:7b:cf:fe:4b:53:66:c4:c8:94:1b:81:11:c9:ea:39:81:43: c8:9c:06:74:52:fc:c8:e5:4e:cf:4d:01:d0:d8:e9:92:ec:b5: e2:39:58:12:c2:d1:8a:77:b0:46:49:24:74:bf:a0:16:48:93: d4:75:ce:b4:b7:54:68:91:86:ae:cb:10:79:1b:ce:66:14:ca: 9e:4e:ba:4a:41:9c:93:e9:fe:87:55:f7:af:f6:96:90:08:49: 41:15:92:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwNzI1MDU0NDE2WhcNMjYwODAxMDU0NDE2WjAYMRYwFAYD VQQDEw02YTY0NGQzMC1lMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTgjTX7RFk99Kmz9t5cHDvmurPOQKM4YWZRXY+D93HqEfk/C9wWxBbs9Ee4A jXhdaWWVMBqcHmZbtlLwgLxX9JxwZSsLHWkGaAMr/LChGy8UTWuKCDmaz1BHds4d 2AKuu92ld8gYyQQVTurXwrMfD57yK8Hq20EjbdPLfRlOLWrgQWaShMkAMhnvjuRR Y7eH2gAu+oxuELdOprjrYniekeW2RRVLUMYsLF8j8IHFL0/yXVGlaPRsjsioO/ns uPCh/BQhPJqs8YxOo5ndQlMKxy/UoO+6qmZU6dpJ0LD2pSAYBK2c/uY1UD9HQDJs U9SnR1jVMRhrbpe2j+woTOVwvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBc+w45u MlX6ZprfgthZcWXwpS8wMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFPNasJTJR2eBMOFVBUWB6wgUcz+vBeUc/zSox4tssEhyTnENV3dGzt/Nunz 3EkjWgoq5HGN3Gq6bMlzqaiYpr4tt3AsY9NVzbl7XDW65KIP2NxEIiGEtMSFeDZO XSvJmVGg/jyGFga8b0h1fwHQOZ2kAn5lE2fBMjN9drPCRphCBq7w+21R4Gdq2Paz CbMHK0XcrdCxmXKS8c8PgWMT2FKnD3vP/ktTZsTIlBuBEcnqOYFDyJwGdFL8yOVO z00B0Njpkuy14jlYEsLRinewRkkkdL+gFkiT1HXOtLdUaJGGrssQeRvOZhTKnk66 SkGck+n+h1X3r/aWkAhJQRWSBw== -----END CERTIFICATE-----Generated at Mon Jul 27 03:14:09 2026 by rpki-client