$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: wz8dSMFhc3c9YgK9LGld0kMpEvFcL05sJij3JTHV0f0= Subject key identifier: FA:3F:56:8F:06:94:D1:2D:7A:11:05:17:92:F4:22:09:AB:56:66:1E Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 91 Signing time: Mon 27 Jul 2026 09:39:09 +0000 Manifest this update: Mon 27 Jul 2026 09:39:09 +0000 Manifest next update: Mon 03 Aug 2026 09:39:09 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: UBm0z1KRo6x35lf1x4HvGzyxhR+UTdRpiPE8G08MlZI=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: KXtLMxhNV80b7UVLzNEenAj/lw44i+8q+VpDj2RXMEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Jul 27 09:39:09 2026 GMT Not After : Aug 3 09:39:09 2026 GMT Subject: CN=6a67273d-aceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:2d:4d:14:77:23:9c:f2:e6:e3:72:c8:e2: d4:f6:a7:e5:ef:e7:85:77:63:3a:06:3d:d3:53:41: ca:f7:d7:fa:f5:e4:09:47:c0:5f:af:50:aa:b8:e7: 27:d9:db:53:fa:4e:86:f7:ed:20:5d:32:09:ec:16: af:58:f8:4c:f6:4b:dc:1b:01:f6:8c:8e:2c:2c:85: cc:d0:8e:d7:e6:0a:ba:b4:5f:69:37:27:7d:6e:d0: 8b:d5:61:7e:4c:7e:7f:8f:da:0f:92:5b:fa:30:71: b6:b8:3d:11:b7:8a:6d:c7:24:3a:a1:3d:ca:cb:f9: 59:39:17:a4:08:45:72:98:3e:91:c6:0d:83:30:aa: 4a:23:6e:90:ac:21:80:02:75:2e:35:4f:6e:2a:2f: 32:5e:e6:50:01:75:ef:c1:88:6a:a8:dc:16:8e:43: 64:4e:a7:cd:9e:e7:7c:76:6b:5b:be:a5:a7:fe:df: 2e:30:1b:0f:8c:da:00:2b:49:82:37:4c:be:01:b7: 7f:25:40:41:8c:6a:12:eb:78:6f:41:c6:99:9e:53: 94:63:7f:bb:86:6e:f9:aa:b1:77:7f:b1:1b:ec:c0: 4f:b4:9f:e9:6f:69:ea:87:54:28:f7:fb:cc:3b:f2: 1b:62:67:65:68:19:9e:b4:35:f6:53:9f:c4:6a:70: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3F:56:8F:06:94:D1:2D:7A:11:05:17:92:F4:22:09:AB:56:66:1E X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c1:5a:93:b3:f3:bd:f8:2b:2e:89:37:7f:ed:e0:62:0b:16: 9c:89:06:4b:fa:a0:3f:00:f6:d7:a9:dc:81:12:71:24:49:9b: cf:3a:9a:27:9c:5b:50:74:a7:3c:ef:b6:dc:ad:cc:ab:f6:3a: 46:77:aa:b1:8d:74:25:54:04:9b:56:21:f0:ff:77:77:e1:d5: dc:7e:c7:16:35:33:53:3f:51:82:1d:40:c8:30:43:4f:ae:c4: 29:dd:f2:65:37:18:6e:3e:d1:3c:8e:d8:6d:f9:ff:19:07:9c: e1:57:88:75:5c:e5:51:65:12:83:f8:f3:c0:a8:70:5b:22:6a: 33:2b:d0:60:b7:2e:42:cf:46:23:b1:b3:fc:56:8f:16:95:e9: 1c:f3:aa:c6:a4:de:65:d4:f9:1f:d4:fd:39:78:22:94:06:29: 70:3e:b5:ca:09:27:a5:01:1a:fe:1d:25:5f:13:4e:80:54:f8: e1:1f:85:d6:0d:5d:fb:b5:0a:42:53:ec:db:ab:10:7b:75:5c: 6e:c2:74:39:65:d3:73:92:85:35:1c:d7:67:b3:76:e2:d5:82: 32:4c:b6:08:f7:71:60:11:5c:3f:34:22:3e:25:a6:65:d2:ba: 8a:dd:10:b5:41:45:d0:0b:2f:97:e1:10:12:80:82:cb:4d:38: e1:6d:1c:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNzYxMTAvBgNVBAUTKEE2MkZDRDY0NTRBNjhBMDg2NUY2Qjk1Q0MwRTg3NzQ0 OUVGM0VGQTkwHhcNMjYwNzI3MDkzOTA5WhcNMjYwODAzMDkzOTA5WjAYMRYwFAYD VQQDEw02YTY3MjczZC1hY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQEtTRR3I5zy5uNyyOLU9qfl7+eFd2M6Bj3TU0HK99f69eQJR8Bfr1CquOcn 2dtT+k6G9+0gXTIJ7BavWPhM9kvcGwH2jI4sLIXM0I7X5gq6tF9pNyd9btCL1WF+ TH5/j9oPklv6MHG2uD0Rt4ptxyQ6oT3Ky/lZORekCEVymD6Rxg2DMKpKI26QrCGA AnUuNU9uKi8yXuZQAXXvwYhqqNwWjkNkTqfNnud8dmtbvqWn/t8uMBsPjNoAK0mC N0y+Abd/JUBBjGoS63hvQcaZnlOUY3+7hm75qrF3f7Eb7MBPtJ/pb2nqh1Qo9/vM O/IbYmdlaBmetDX2U5/EanCe7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPo/Vo8G lNEtehEFF5L0IgmrVmYeMB8GA1UdIwQYMBaAFKYvzWRUpooIZfa5XMDod0Se8++p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE3Ni8wODdDQzdBMEIw QzAxMUYwQjY5RUEyNTZDNEY5QUUwMi9waV9OWkZTbWlnaGw5cmxjd09oM1JKN3o3 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE3Ni8wODdDQzdBMEIwQzAxMUYwQjY5RUEyNTZDNEY5QUUwMi9waV9OWkZTbWln aGw5cmxjd09oM1JKN3o3NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY8Fak7PzvfgrLok3f+3gYgsWnIkGS/qgPwD216ncgRJxJEmbzzqaJ5xbUHSn PO+23K3Mq/Y6RneqsY10JVQEm1Yh8P93d+HV3H7HFjUzUz9Rgh1AyDBDT67EKd3y ZTcYbj7RPI7Ybfn/GQec4VeIdVzlUWUSg/jzwKhwWyJqMyvQYLcuQs9GI7Gz/FaP FpXpHPOqxqTeZdT5H9T9OXgilAYpcD61ygknpQEa/h0lXxNOgFT44R+F1g1d+7UK QlPs26sQe3VcbsJ0OWXTc5KFNRzXZ7N24tWCMky2CPdxYBFcPzQiPiWmZdK6it0Q tUFF0Asvl+EQEoCCy0044W0ceQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:35 2026 by rpki-client