$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: kZHO+4CIBNz0mUsobAhedsncW9QCPNBiWWkx2jfPUco= Subject key identifier: 70:35:89:34:C5:2C:C1:FD:E3:26:47:FB:71:2A:26:9F:76:9D:2A:6C Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1F1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1EDC Signing time: Tue 18 Aug 2026 16:09:49 +0000 Manifest this update: Tue 18 Aug 2026 16:09:49 +0000 Manifest next update: Tue 25 Aug 2026 16:09:49 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: 0XDU8CuHw6dkkEIwQqbW5kADIIj99AaZGDjIWV+HnmA=) 2: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: LnqeCppjvfZw+kjrXoa/2ToWPDmJSTa9ohrJhVPCflE=) 3: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: cWHGKEyK1/n+XzphhsGriIZiXwfaKLq/Wm0XGKlIaZU=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: RsEExvcwJC5E9KwjY1oAwXxgW1IttoQBiLKiJe8oXuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7967 (0x1f1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Aug 18 16:09:49 2026 GMT Not After : Aug 25 16:09:49 2026 GMT Subject: CN=6a8483cd-ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:8e:56:10:81:25:87:3e:dc:09:ce:53:7f: af:37:1a:57:36:df:61:82:6a:5a:03:82:d6:45:b2: 9d:ce:70:ac:81:0c:05:5e:50:6c:1c:32:bb:64:1d: c4:3e:91:dd:e8:5f:67:32:ae:e8:0b:1e:d6:07:1e: 87:a8:a8:7b:b4:a1:9b:c0:28:b5:24:f4:65:42:a2: 02:6b:63:ee:2f:6e:54:14:bc:95:6e:9f:16:de:5a: 37:47:a1:e8:45:f2:19:a0:1b:d0:13:9b:1a:32:7c: 91:04:2f:ae:fb:e3:9f:c7:05:93:90:12:99:21:24: 18:f2:38:9c:0e:9b:d2:fc:29:65:59:ed:eb:6d:f5: d4:17:8a:95:de:b0:e5:ea:7e:ac:72:c9:40:3c:29: 89:4c:68:d7:55:28:52:75:e0:28:00:79:5d:07:98: 59:1d:b5:68:ff:66:e3:f3:14:be:d3:22:fb:a7:ef: d2:01:00:6b:aa:72:e9:7b:2a:3a:b1:08:6a:67:32: 95:6f:fa:a5:ec:ed:6d:33:be:69:cb:3f:de:b5:7b: a8:6b:ba:2d:2c:d8:15:95:2b:b1:d1:8a:4a:57:1e: f6:2d:85:27:17:df:e1:89:ad:33:8b:64:d4:be:87: 8e:cc:d1:6e:a0:05:33:8a:cd:27:16:7f:c4:ba:c7: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:35:89:34:C5:2C:C1:FD:E3:26:47:FB:71:2A:26:9F:76:9D:2A:6C X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2b:b2:c0:0c:19:b7:e0:ec:20:ce:f4:be:90:6d:95:65:0b: a5:9d:d6:8d:60:d1:37:79:0a:b5:a2:2d:c0:8f:e5:c5:e1:21: b1:ea:f9:da:4c:cf:49:20:3f:d5:60:16:36:2f:65:a8:04:b8: 85:ce:e4:46:b8:88:20:0b:f3:13:2a:8e:ba:74:65:27:66:7b: cf:0f:dd:b1:5d:4f:3c:79:fd:88:a4:d4:8d:49:20:dd:32:76: 1b:8c:6d:48:c8:64:62:99:cf:97:80:9b:a8:94:3a:c1:66:b2: fd:40:da:c3:4b:bb:48:c8:92:ff:05:92:61:ca:8c:ea:f1:48: 83:cd:1d:f6:15:b0:05:22:9d:19:12:f9:46:fa:0e:7e:56:57: 2a:18:be:51:ce:b7:cf:f4:5d:be:22:5c:43:54:d5:8f:0b:2e: da:ff:a6:95:a4:19:47:0d:c9:a1:39:d1:88:57:12:a9:05:ba: 1f:99:4b:98:05:06:50:bb:ac:08:c6:0b:f3:c6:ce:88:a5:35: 72:bd:ad:b6:10:c6:2c:fe:18:16:97:50:8a:0e:c1:a5:c1:a6: 69:0f:34:ee:8b:81:af:6e:5d:5f:d0:dd:e7:cd:c3:1f:c2:95: ad:1a:74:45:be:e8:bf:85:73:ae:a6:1b:5b:a2:89:1d:49:72: 89:ad:6a:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjYwODE4MTYwOTQ5WhcNMjYwODI1MTYwOTQ5WjAYMRYwFAYD VQQDEw02YTg0ODNjZC1mZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF+OVhCBJYc+3AnOU3+vNxpXNt9hgmpaA4LWRbKdznCsgQwFXlBsHDK7ZB3E PpHd6F9nMq7oCx7WBx6HqKh7tKGbwCi1JPRlQqICa2PuL25UFLyVbp8W3lo3R6Ho RfIZoBvQE5saMnyRBC+u++OfxwWTkBKZISQY8jicDpvS/CllWe3rbfXUF4qV3rDl 6n6scslAPCmJTGjXVShSdeAoAHldB5hZHbVo/2bj8xS+0yL7p+/SAQBrqnLpeyo6 sQhqZzKVb/ql7O1tM75pyz/etXuoa7otLNgVlSux0YpKVx72LYUnF9/hia0zi2TU voeOzNFuoAUzis0nFn/EuscrWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHA1iTTF LMH94yZH+3EqJp92nSpsMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSuywAwZt+DsIM70vpBtlWULpZ3WjWDRN3kKtaItwI/lxeEhser52kzPSSA/ 1WAWNi9lqAS4hc7kRriIIAvzEyqOunRlJ2Z7zw/dsV1PPHn9iKTUjUkg3TJ2G4xt SMhkYpnPl4CbqJQ6wWay/UDaw0u7SMiS/wWSYcqM6vFIg80d9hWwBSKdGRL5RvoO flZXKhi+Uc63z/RdviJcQ1TVjwsu2v+mlaQZRw3JoTnRiFcSqQW6H5lLmAUGULus CMYL88bOiKU1cr2tthDGLP4YFpdQig7BpcGmaQ807ouBr25dX9Dd583DH8KVrRp0 Rb7ov4VzrqYbW6KJHUlyia1qhg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:34 2026 by rpki-client