$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: lxJTS3Y/5XougIbv5oST0PvLa3+1oGK6t04GRyEFOK4= Subject key identifier: D7:AA:77:31:BD:A8:47:83:5F:41:B9:03:D4:41:E5:ED:26:32:6F:C4 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 0128 Signing time: Mon 27 Jul 2026 07:38:43 +0000 Manifest this update: Mon 27 Jul 2026 07:38:42 +0000 Manifest next update: Mon 03 Aug 2026 07:38:42 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: pLQlHDZ6UO/4VGMfG0fWaJz7NxfJwmVV86JaQb/cngk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Jul 27 07:38:42 2026 GMT Not After : Aug 3 07:38:42 2026 GMT Subject: CN=6a670b02-e9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:8a:fe:90:fa:c0:fa:f6:f8:a5:5e:ee:2c: a6:26:97:0f:26:b8:4c:8e:ca:9b:f9:87:13:96:98: a3:6d:61:05:80:a6:74:29:f7:f2:cb:74:bf:1f:1d: 32:0e:5a:e7:70:ae:72:38:05:15:fd:a4:8e:06:42: 71:98:70:33:f9:23:9a:78:b6:c9:e9:0d:37:de:f3: 3f:f3:78:27:cc:a3:76:a5:29:32:55:b1:dd:41:8b: 8d:07:03:9d:0b:f3:0f:3b:ae:f0:81:67:18:c1:f7: 19:58:96:cc:34:e1:e3:88:46:77:c7:67:9e:6d:cd: 1e:ef:68:0a:d2:ad:5f:88:5d:de:bc:2a:14:9e:cb: 4b:40:fd:c1:79:13:cd:a3:6e:3a:df:4b:d5:8e:56: dd:18:e4:fa:3a:83:60:60:a3:c4:c1:e5:c8:61:ec: b2:63:39:70:a8:1f:d5:1b:17:ac:0f:c4:92:70:66: 61:32:93:37:74:c5:07:db:91:74:16:54:58:86:27: dd:89:70:a5:02:47:d3:46:34:55:3b:7b:04:23:0f: 81:1d:c3:e3:e6:2e:17:df:a1:76:95:49:9d:30:39: cd:57:4d:0e:b5:81:b5:ed:9a:2f:0f:ad:e0:8d:29: 31:7a:4d:f5:39:fd:2d:71:35:80:63:0f:5e:ca:71: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AA:77:31:BD:A8:47:83:5F:41:B9:03:D4:41:E5:ED:26:32:6F:C4 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ba:05:b4:04:fb:e5:e4:3d:fd:06:36:d7:da:c9:81:ea:b2: 10:c5:83:b3:e9:e0:90:9b:e8:2c:3b:4e:ee:8d:e9:0a:5d:72: 44:78:c5:1d:4a:dc:a7:00:df:5f:92:01:b3:8e:25:fb:c2:7c: e6:74:a7:5f:31:a0:12:e8:aa:f3:ec:b5:25:f3:84:d9:bd:ad: 9a:9c:aa:fe:40:82:e4:4c:86:95:a0:21:83:97:0e:f3:e3:03: c2:a3:b9:7b:a0:be:3e:56:a0:70:ba:f9:bc:bd:08:36:9e:ec: 46:e2:56:7a:8e:64:b4:15:cd:2e:d2:1f:60:67:6e:7f:55:0a: 4f:97:dc:66:56:8d:50:11:82:14:45:39:12:9e:ce:45:b6:a4: 74:9a:d6:ea:85:d1:b4:a1:93:48:60:10:fe:f2:a5:fc:9b:5c: 0b:bd:c5:31:0c:a4:d0:c9:96:90:57:47:1d:a4:c7:e3:4d:32: fa:98:c9:c0:c4:04:88:9f:89:01:73:64:0a:61:f2:f2:fa:30: 4e:ad:23:86:b2:92:5d:95:e8:fb:10:78:63:6f:15:a3:bd:be: b8:30:02:b3:81:fa:92:d1:bc:97:a7:cb:56:e9:32:08:e7:81: ca:33:1b:40:78:51:d1:1d:5e:1c:46:7b:8f:39:ad:48:e3:6b: bc:0f:a4:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjYwNzI3MDczODQyWhcNMjYwODAzMDczODQyWjAYMRYwFAYD VQQDEw02YTY3MGIwMi1lOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlSK/pD6wPr2+KVe7iymJpcPJrhMjsqb+YcTlpijbWEFgKZ0Kffyy3S/Hx0y DlrncK5yOAUV/aSOBkJxmHAz+SOaeLbJ6Q033vM/83gnzKN2pSkyVbHdQYuNBwOd C/MPO67wgWcYwfcZWJbMNOHjiEZ3x2eebc0e72gK0q1fiF3evCoUnstLQP3BeRPN o24630vVjlbdGOT6OoNgYKPEweXIYeyyYzlwqB/VGxesD8SScGZhMpM3dMUH25F0 FlRYhifdiXClAkfTRjRVO3sEIw+BHcPj5i4X36F2lUmdMDnNV00OtYG17ZovD63g jSkxek31Of0tcTWAYw9eynH9xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeqdzG9 qEeDX0G5A9RB5e0mMm/EMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmroFtAT75eQ9/QY219rJgeqyEMWDs+ngkJvoLDtO7o3pCl1yRHjFHUrcpwDf X5IBs44l+8J85nSnXzGgEuiq8+y1JfOE2b2tmpyq/kCC5EyGlaAhg5cO8+MDwqO5 e6C+PlagcLr5vL0INp7sRuJWeo5ktBXNLtIfYGduf1UKT5fcZlaNUBGCFEU5Ep7O RbakdJrW6oXRtKGTSGAQ/vKl/JtcC73FMQyk0MmWkFdHHaTH400y+pjJwMQEiJ+J AXNkCmHy8vowTq0jhrKSXZXo+xB4Y28Vo72+uDACs4H6ktG8l6fLVukyCOeByjMb QHhR0R1eHEZ7jzmtSONrvA+kfw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:48:04 2026 by rpki-client