$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft File: NpGJraGZWwIPq4bXdZjGDCl0d1U.mft (raw, json) Hash identifier: fd+2ZbPm683ZeKJoWLXPr0Xz+NPgX/CmKGdxfD3D3Gk= Subject key identifier: DA:79:C7:B5:85:8B:FE:99:6C:F5:38:9C:06:F8:9C:AC:17:7B:9B:C0 Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55 Certificate issuer: /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft Manifest number: 22 Signing time: Wed 19 Aug 2026 09:38:34 +0000 Manifest this update: Wed 19 Aug 2026 09:38:34 +0000 Manifest next update: Wed 26 Aug 2026 09:38:34 +0000 Files and hashes: 1: NpGJraGZWwIPq4bXdZjGDCl0d1U.crl (hash: tqc/FNRe0NVOUouFZWDL8Lntut5K9WPDD+OvynFsLw8=) 2: B88C85348C0411F196792E7B4011F970.roa (hash: og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=) 3: 82KcDOmzfO-Bwf_ZghM1RTg8b3I.asa (hash: eWqP9Aw0EpWK9el1V+TdFPObx467+PMw+kAlbr7m6Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755 Validity Not Before: Aug 19 09:38:34 2026 GMT Not After : Aug 26 09:38:34 2026 GMT Subject: CN=6a85799a-c36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:11:fb:db:f8:e9:19:42:35:dd:d0:e3:8d: 2b:ec:e0:a0:73:31:f8:25:ff:4d:34:28:93:d5:98: e9:4b:eb:3a:ab:63:82:d7:e5:23:d5:2e:69:a3:50: fc:5c:9a:06:87:88:d8:a2:e3:f6:55:b3:74:40:df: c8:b8:2f:53:a2:4b:b6:ec:49:80:13:50:de:b3:5a: 25:f6:2f:ed:8d:d4:a9:35:32:cb:9b:f3:ff:76:e5: 03:6f:db:77:5f:bf:b6:5e:1f:b0:70:b9:43:73:b5: 66:15:69:29:2d:89:ec:26:ed:4d:3b:bf:6d:d9:2d: f3:9c:6d:74:26:c2:e6:41:e5:ec:6b:c2:29:0a:9e: 88:05:d6:07:6c:2a:b6:14:0a:a2:60:d0:ed:de:a3: ab:fb:a7:34:07:99:56:6f:b2:fe:b3:6f:69:49:87: 43:85:a4:8f:ad:46:a9:cb:d2:f3:32:e9:31:97:17: 2e:b8:18:27:da:f1:48:be:58:18:74:1e:58:d2:68: f2:58:58:92:74:b9:16:b4:35:94:1c:b6:11:29:73: 7c:de:f7:51:b7:ec:6a:90:5f:b9:73:55:0e:e0:52: d1:8a:2e:9f:02:ff:85:aa:e5:9b:87:08:ed:c0:93: 22:4f:ba:3f:f9:0f:3f:60:12:0b:f9:55:ee:0d:ac: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:C7:B5:85:8B:FE:99:6C:F5:38:9C:06:F8:9C:AC:17:7B:9B:C0 X509v3 Authority Key Identifier: keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:4e:9e:b6:af:7b:05:38:66:12:42:3e:09:d3:2a:f0:40: 59:08:58:6d:89:0d:95:2b:25:da:ac:ba:b4:31:4e:e4:d1:13: fe:21:1d:73:8d:32:93:91:76:06:f2:10:e8:5c:32:2a:e9:3e: ba:f0:1a:9b:2b:b2:74:7c:7f:69:ae:32:06:de:17:55:8d:63: bf:d3:c3:a3:40:9d:c1:35:2e:99:9a:4f:ed:f3:45:a1:13:16: 5e:bd:08:09:c8:4b:21:1e:0d:a1:a2:0e:5a:89:b9:d4:83:21: eb:8a:dd:5c:ea:ff:6d:a5:55:33:98:8d:d2:94:a0:7b:a0:06: 8c:e0:e2:93:0d:ea:08:c2:72:c7:3e:d9:bb:28:b5:e4:cf:cf: bb:76:98:d5:8c:00:7f:63:63:c3:9c:a2:ec:18:86:c7:50:97: 48:06:90:2f:a6:0b:d3:58:30:17:86:c8:5d:db:f8:f2:51:83: fc:84:0a:a7:92:da:16:80:e7:ed:b9:19:88:0b:ab:d2:d8:17: 1f:73:91:16:54:57:69:7d:09:e0:c2:0c:10:cc:79:3e:59:53: e2:31:9f:5e:58:fa:56:1d:58:de:d5:78:33:4c:3b:12:f8:88: 48:3f:55:98:11:a9:1c:4d:35:c8:4e:3b:51:af:df:dd:98:4f: 35:e9:d2:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzE2NzExMC8GA1UEBRMoMzY5MTg5QURBMTk5NUIwMjBGQUI4NkQ3NzU5OEM2MEMy OTc0Nzc1NTAeFw0yNjA4MTkwOTM4MzRaFw0yNjA4MjYwOTM4MzRaMBgxFjAUBgNV BAMTDTZhODU3OTlhLWMzNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvKBH72/jpGUI13dDjjSvs4KBzMfgl/000KJPVmOlL6zqrY4LX5SPVLmmjUPxc mgaHiNii4/ZVs3RA38i4L1OiS7bsSYATUN6zWiX2L+2N1Kk1Msub8/925QNv23df v7ZeH7BwuUNztWYVaSktiewm7U07v23ZLfOcbXQmwuZB5exrwikKnogF1gdsKrYU CqJg0O3eo6v7pzQHmVZvsv6zb2lJh0OFpI+tRqnL0vMy6TGXFy64GCfa8Ui+WBh0 HljSaPJYWJJ0uRa0NZQcthEpc3ze91G37GqQX7lzVQ7gUtGKLp8C/4Wq5ZuHCO3A kyJPuj/5Dz9gEgv5Ve4NrD+PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2nnHtYWL /pls9TicBvicrBd7m8AwHwYDVR0jBBgwFoAUNpGJraGZWwIPq4bXdZjGDCl0d1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMTY3L0IyREY4MjJBNkYw RTExRjE5NjhFN0M0ODgzQTMwRkJDL05wR0pyYUdaV3dJUHE0YlhkWmpHRENsMGQx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnBHSnJhR1pXd0lQcTRiWGRaakdEQ2wwZDFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD MTY3L0IyREY4MjJBNkYwRTExRjE5NjhFN0M0ODgzQTMwRkJDL05wR0pyYUdaV3dJ UHE0YlhkWmpHRENsMGQxVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBUsk6etq97BThmEkI+CdMq8EBZCFhtiQ2VKyXarLq0MU7k0RP+IR1zjTKTkXYG 8hDoXDIq6T668BqbK7J0fH9prjIG3hdVjWO/08OjQJ3BNS6Zmk/t80WhExZevQgJ yEshHg2hog5aibnUgyHrit1c6v9tpVUzmI3SlKB7oAaM4OKTDeoIwnLHPtm7KLXk z8+7dpjVjAB/Y2PDnKLsGIbHUJdIBpAvpgvTWDAXhshd2/jyUYP8hAqnktoWgOft uRmIC6vS2Bcfc5EWVFdpfQngwgwQzHk+WVPiMZ9eWPpWHVje1XgzTDsS+IhIP1WY EakcTTXITjtRr9/dmE816dJf -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:28 2026 by rpki-client