$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: JFG4BZBHAdaYnlXrJs9dzVZEk89brs2P0B+3r9zYDyM= Subject key identifier: 5D:30:7E:58:E7:13:50:21:6E:C3:06:D8:9F:97:B0:9C:9C:82:FE:2A Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 021D Signing time: Mon 03 Aug 2026 03:56:01 +0000 Manifest this update: Mon 03 Aug 2026 03:56:00 +0000 Manifest next update: Mon 10 Aug 2026 03:56:00 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: MPq2VLFDTP/dkmDMxcwa53v0vNWt2ebpNKRoWEycOzI=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 03:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Aug 3 03:56:00 2026 GMT Not After : Aug 10 03:56:00 2026 GMT Subject: CN=6a701151-23e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:f8:a6:1a:b7:b2:2b:f8:6e:38:84:96:e9: 45:68:b2:5f:ae:36:94:10:59:32:14:05:c7:01:27: fd:c0:2e:b7:2f:47:f0:a9:89:61:b7:3d:9a:a8:ec: 08:56:5d:77:3a:9b:70:72:39:d9:ec:7d:74:72:06: f7:4e:40:86:1e:a7:2a:95:60:de:ea:4b:26:6d:7e: 56:f8:7c:d2:d1:b2:22:64:e1:5d:65:a5:10:01:23: 8b:b3:e1:fa:9c:c4:b2:da:91:4c:0f:1c:87:62:ea: 26:40:42:44:bd:00:b5:42:7f:46:ec:cf:93:2a:b6: 1b:bd:43:60:31:13:8f:88:c1:cb:db:b6:a0:50:0e: b8:b7:7a:f8:4a:5f:04:fa:a2:fa:aa:cd:ef:7f:41: 0f:70:84:75:45:05:6f:36:33:c2:35:a0:b8:51:9f: 92:cf:11:78:bb:55:62:ce:ae:1f:e1:ed:ec:9b:34: 57:c3:d9:ba:ac:f5:4e:8d:88:ce:3d:c9:81:cc:86: 42:22:bb:66:83:aa:4b:45:31:2e:2e:fc:75:b6:76: f3:0d:17:4f:64:22:a9:66:a9:4e:9d:cc:48:b9:c1: 63:c6:8a:81:40:7c:67:44:69:ed:f9:0c:78:6e:33: 45:de:ca:f0:dc:b5:63:da:f2:8e:18:3c:86:02:19: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:7E:58:E7:13:50:21:6E:C3:06:D8:9F:97:B0:9C:9C:82:FE:2A X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:9f:db:81:d9:8f:26:1b:02:9e:12:49:5e:39:dd:ed:8e: 48:22:68:de:f0:7c:fd:42:c6:44:2c:5f:da:fd:0e:bc:8d:cf: b5:16:a3:6b:0f:13:0d:88:44:4b:a3:1c:d9:63:3f:72:37:b8: f9:de:62:9f:1b:20:55:32:09:25:81:ed:11:72:bb:63:38:90: 1b:41:88:0a:02:2d:ef:c4:8f:2d:84:da:75:48:1b:99:1c:51: 1e:af:1d:49:02:57:99:e8:e4:cf:bc:30:4c:68:ff:56:d2:98: 3c:d3:21:cc:a1:26:a8:82:72:f3:89:5a:a4:26:14:bb:a6:c7: ce:c1:54:2e:bf:82:f8:4e:cc:94:34:59:2c:ed:9a:4c:c7:35: c5:ee:78:8a:8b:30:5b:c5:13:cb:69:b5:7c:b2:47:0e:46:f3: 1a:5c:b0:fb:c5:39:23:23:18:06:a7:72:0b:db:eb:05:ff:05: b8:5e:06:7e:db:36:38:5f:2b:8e:47:eb:27:8b:f9:a5:a9:36: c3:82:5f:78:9f:b2:6b:d1:86:46:7c:db:b3:f1:9b:e6:76:63: 55:d5:d8:58:e0:3c:a1:97:d4:a3:c5:95:bc:fc:9b:b8:93:70: 6a:69:4e:e8:5a:07:e2:e3:90:ee:86:3a:36:da:7d:24:d9:6b: d3:31:f0:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwODAzMDM1NjAwWhcNMjYwODEwMDM1NjAwWjAYMRYwFAYD VQQDEw02YTcwMTE1MS0yM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBP4phq3siv4bjiElulFaLJfrjaUEFkyFAXHASf9wC63L0fwqYlhtz2aqOwI Vl13OptwcjnZ7H10cgb3TkCGHqcqlWDe6ksmbX5W+HzS0bIiZOFdZaUQASOLs+H6 nMSy2pFMDxyHYuomQEJEvQC1Qn9G7M+TKrYbvUNgMROPiMHL27agUA64t3r4Sl8E +qL6qs3vf0EPcIR1RQVvNjPCNaC4UZ+SzxF4u1Vizq4f4e3smzRXw9m6rPVOjYjO PcmBzIZCIrtmg6pLRTEuLvx1tnbzDRdPZCKpZqlOncxIucFjxoqBQHxnRGnt+Qx4 bjNF3srw3LVj2vKOGDyGAhm2WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0wfljn E1AhbsMG2J+XsJycgv4qMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXiif24HZjyYbAp4SSV453e2OSCJo3vB8/ULGRCxf2v0OvI3PtRajaw8TDYhE S6Mc2WM/cje4+d5inxsgVTIJJYHtEXK7YziQG0GICgIt78SPLYTadUgbmRxRHq8d SQJXmejkz7wwTGj/VtKYPNMhzKEmqIJy84lapCYUu6bHzsFULr+C+E7MlDRZLO2a TMc1xe54ioswW8UTy2m1fLJHDkbzGlyw+8U5IyMYBqdyC9vrBf8FuF4Gfts2OF8r jkfrJ4v5pak2w4JfeJ+ya9GGRnzbs/Gb5nZjVdXYWOA8oZfUo8WVvPybuJNwamlO 6FoH4uOQ7oY6Ntp9JNlr0zHwkg== -----END CERTIFICATE-----Generated at Wed Aug 5 03:14:57 2026 by rpki-client