$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: 7Ame6PPR0igSQvPNmCr1egUvMiAx1EevC9XvReDtBfE= Subject key identifier: 6F:FC:2B:DC:07:BB:8F:31:2F:49:94:E9:4C:85:B2:75:77:80:05:CE Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 04D1 Signing time: Mon 27 Jul 2026 00:47:36 +0000 Manifest this update: Mon 27 Jul 2026 00:47:35 +0000 Manifest next update: Mon 03 Aug 2026 00:47:35 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: ze+qUvagIpJkuecmcaaDHuItBYVRFvWdpnBic3cmkb4=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Jul 27 00:47:35 2026 GMT Not After : Aug 3 00:47:35 2026 GMT Subject: CN=6a66aaa8-bda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:d5:d8:c1:c0:57:fa:49:0e:7e:d4:2d:85: 23:b5:2e:62:bf:0e:23:68:a2:25:43:b0:ba:e1:d0: c6:06:ed:77:89:4d:45:79:4a:6f:88:f0:f4:bc:0c: 11:7d:51:1a:cf:33:02:4a:97:ef:d7:6d:bd:15:ea: cf:fb:69:79:26:e9:06:20:b2:2e:62:8e:d8:d6:7d: 00:85:dc:50:ab:1b:aa:b4:78:24:25:ac:22:02:d1: b2:95:02:38:2a:1c:b9:85:5b:7e:9b:f1:31:35:11: 91:a7:ba:27:75:c0:06:05:54:b2:84:5b:12:68:44: b4:7b:d9:97:fc:17:02:05:5e:69:bf:45:d5:f5:8c: 38:d9:69:dc:5c:e2:d3:aa:96:06:13:d0:bd:21:70: d7:7b:b3:ab:7b:21:59:ed:79:85:bf:b7:fa:0a:d4: 3b:32:b6:a6:14:92:0c:7b:bf:1e:7f:e1:7b:e8:c2: a3:29:e9:a5:ec:31:4e:e6:4e:7d:69:ce:71:50:7d: 05:1c:fb:af:59:f9:08:40:47:09:d6:65:81:d0:d5: 21:dc:e3:28:2e:be:17:18:c9:98:9d:e9:e5:f1:76: 12:7e:6c:1d:03:97:16:39:01:44:88:2a:90:5f:ee: 5d:4d:5e:ac:48:0d:be:fa:35:66:2c:14:cd:8f:e8: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FC:2B:DC:07:BB:8F:31:2F:49:94:E9:4C:85:B2:75:77:80:05:CE X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:26:13:7e:1c:57:6e:bc:3b:2e:2b:86:ea:9e:0f:7b:f7:3b: b3:2c:e6:53:27:08:1f:c8:07:34:51:20:ef:d5:5a:ed:20:c7: eb:59:a7:4b:e5:ea:0a:dc:ac:66:20:7b:cd:91:c8:ba:9f:ca: d6:2b:7d:74:ef:82:1b:cd:dd:d1:63:af:7c:67:f5:fc:74:90: 7e:f3:fa:23:fd:c0:a8:a7:f8:ac:b7:c8:09:e4:1a:b2:2c:c3: df:db:1b:97:be:b6:9d:92:c1:2c:ab:14:7b:d0:1a:fe:54:bd: ed:1f:bb:8d:e8:eb:a4:32:7b:96:89:90:a1:26:f3:ef:b8:e1: f2:a0:28:f9:27:09:ee:b9:12:8b:a4:7e:ce:d1:d6:79:76:9b: 58:b0:ac:90:04:4c:11:43:b9:3c:68:34:67:2f:d6:18:ad:2a: 4a:92:d7:2a:54:fb:88:01:76:c9:b8:0a:71:c4:67:fe:c8:01: 0f:bc:a5:42:7a:23:2e:e9:78:28:cb:46:3a:a4:39:89:b7:72: ef:61:c1:db:aa:9b:61:ac:79:32:28:c0:b0:fb:c3:81:90:67: b1:31:1b:ed:3c:9d:fd:8d:27:d9:2e:25:8e:c7:96:1a:a7:8d: 9f:1e:1c:81:79:27:63:5b:c6:84:4f:e4:e7:0f:aa:83:9f:8b: a9:e3:c5:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjYwNzI3MDA0NzM1WhcNMjYwODAzMDA0NzM1WjAYMRYwFAYD VQQDEw02YTY2YWFhOC1iZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNjV2MHAV/pJDn7ULYUjtS5ivw4jaKIlQ7C64dDGBu13iU1FeUpviPD0vAwR fVEazzMCSpfv1229FerP+2l5JukGILIuYo7Y1n0AhdxQqxuqtHgkJawiAtGylQI4 Khy5hVt+m/ExNRGRp7ondcAGBVSyhFsSaES0e9mX/BcCBV5pv0XV9Yw42WncXOLT qpYGE9C9IXDXe7OreyFZ7XmFv7f6CtQ7MramFJIMe78ef+F76MKjKeml7DFO5k59 ac5xUH0FHPuvWfkIQEcJ1mWB0NUh3OMoLr4XGMmYnenl8XYSfmwdA5cWOQFEiCqQ X+5dTV6sSA2++jVmLBTNj+hSCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/8K9wH u48xL0mU6UyFsnV3gAXOMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsCYTfhxXbrw7LiuG6p4Pe/c7syzmUycIH8gHNFEg79Va7SDH61mnS+XqCtys ZiB7zZHIup/K1it9dO+CG83d0WOvfGf1/HSQfvP6I/3AqKf4rLfICeQasizD39sb l762nZLBLKsUe9Aa/lS97R+7jejrpDJ7lomQoSbz77jh8qAo+ScJ7rkSi6R+ztHW eXabWLCskARMEUO5PGg0Zy/WGK0qSpLXKlT7iAF2ybgKccRn/sgBD7ylQnojLul4 KMtGOqQ5ibdy72HB26qbYax5MijAsPvDgZBnsTEb7Tyd/Y0n2S4ljseWGqeNnx4c gXknY1vGhE/k5w+qg5+LqePFyw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:45 2026 by rpki-client