$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: BSHau6evofkyV2N0a1EmMoexepJtQI3tinKfKD0+eeI= Subject key identifier: D7:78:30:73:0A:3E:2F:CD:62:1B:D9:8A:E3:0B:73:7B:4D:56:66:A5 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 04B4 Signing time: Wed 29 Jul 2026 00:36:33 +0000 Manifest this update: Wed 29 Jul 2026 00:36:33 +0000 Manifest next update: Wed 05 Aug 2026 00:36:33 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: 43XB3rUTMWeTdMIrd7L+Y2QMnNx9sxHyyNMN++Tdo80=) 2: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: HsWAdOU5aGRJlW8FY2L3nkNFibcMLbUNXEEQ7VNVJdI=) 3: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=) 4: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI=) 5: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=) 6: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: Pmqjaf05ZJypDFe8YtfZZnEUHZ02b2LTX1bmYry5Vhw=) 7: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: rB0rGnSozJU8NojAc45M//byk+WcellFqqyoYGAw7jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jul 29 00:36:33 2026 GMT Not After : Aug 5 00:36:33 2026 GMT Subject: CN=6a694b11-c6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:9d:ad:83:65:04:61:3f:ca:55:1f:e5:2f: 9d:77:f4:d7:56:9b:fd:c0:4c:c5:33:e0:6c:41:e4: 86:30:7d:26:b7:6d:07:a6:7d:73:6a:35:57:97:62: 62:97:32:9d:cb:8d:51:45:68:34:ae:f5:f3:9e:dc: f0:2c:62:fc:0b:27:30:74:04:98:75:5f:78:39:ca: c2:5d:78:69:53:0c:74:c7:95:bd:e1:51:7c:d1:c3: 0e:c6:59:f3:72:9c:eb:a9:c1:0b:00:44:75:d8:d5: 80:31:26:1d:4d:76:73:21:0e:8e:e9:ab:6b:d1:96: 7d:2c:9c:09:34:8b:05:66:0f:12:90:41:98:09:56: 70:3c:33:41:41:e4:b7:41:43:f6:c9:84:27:05:7d: e4:c1:c0:0a:e2:e0:c0:e8:fd:ba:e9:c0:f6:64:97: bd:fa:66:28:fc:73:fe:49:4f:1a:15:30:c4:a5:30: 1a:b9:0e:ac:10:9f:f0:18:18:a2:19:31:03:4a:5d: e7:6c:05:a6:f7:08:b1:d2:ce:66:a2:86:a4:b5:8b: 2e:16:e9:ec:b7:fa:64:fd:8d:f8:5d:0d:35:5c:c9: c7:e0:a2:d4:fd:57:7a:05:52:f2:20:a7:9a:36:05: da:1c:c6:13:df:1f:a0:5c:f8:36:96:79:4c:c7:ec: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:30:73:0A:3E:2F:CD:62:1B:D9:8A:E3:0B:73:7B:4D:56:66:A5 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c0:fc:af:5e:9b:9c:99:77:11:e6:65:8c:8f:67:a4:bb:17: e2:f4:6a:0c:72:25:c0:11:73:ce:c6:2c:98:7f:fe:d0:46:aa: 4d:64:c9:58:55:e5:e9:31:3a:69:7c:e4:95:34:3b:cc:35:de: f3:8f:5e:31:29:5b:9f:ed:8e:00:75:de:d1:ec:2c:29:6c:08: 81:04:12:e0:30:c1:79:83:17:9d:6f:56:4d:76:7b:a2:68:75: 42:94:9d:ea:de:30:2d:7b:55:4c:78:01:f3:4a:65:e0:2a:8e: 98:5e:0a:b9:33:48:25:5a:e1:be:23:2c:78:c0:b2:ce:b6:b6: 06:e8:49:26:9f:a5:7e:b1:6e:e3:dc:3f:6e:48:69:7f:4a:b4: 59:42:a9:32:93:56:9f:69:ba:0f:b9:9f:b6:8a:ff:1b:05:6c: 2f:44:c1:71:d0:71:49:b2:1b:64:ac:a6:13:04:99:6d:67:3a: 48:4d:3f:36:b5:fa:d7:93:1d:53:bd:fc:01:e8:58:e9:4f:8a: 16:58:6e:78:3c:3b:4e:47:c9:05:92:7b:cd:a9:f7:2e:7f:7d: 1e:d4:e7:c9:ee:dc:bc:88:c2:84:90:a6:13:07:ba:55:83:9d: 02:d1:8b:4e:98:63:61:46:31:c5:28:8d:57:64:69:b9:0a:bf: b3:9f:2c:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwNzI5MDAzNjMzWhcNMjYwODA1MDAzNjMzWjAYMRYwFAYD VQQDEw02YTY5NGIxMS1jNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukmdrYNlBGE/ylUf5S+dd/TXVpv9wEzFM+BsQeSGMH0mt20Hpn1zajVXl2Ji lzKdy41RRWg0rvXzntzwLGL8CycwdASYdV94OcrCXXhpUwx0x5W94VF80cMOxlnz cpzrqcELAER12NWAMSYdTXZzIQ6O6atr0ZZ9LJwJNIsFZg8SkEGYCVZwPDNBQeS3 QUP2yYQnBX3kwcAK4uDA6P266cD2ZJe9+mYo/HP+SU8aFTDEpTAauQ6sEJ/wGBii GTEDSl3nbAWm9wix0s5mooaktYsuFunst/pk/Y34XQ01XMnH4KLU/Vd6BVLyIKea NgXaHMYT3x+gXPg2lnlMx+zJSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNd4MHMK Pi/NYhvZiuMLc3tNVmalMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUsD8r16bnJl3EeZljI9npLsX4vRqDHIlwBFzzsYsmH/+0EaqTWTJWFXl6TE6 aXzklTQ7zDXe849eMSlbn+2OAHXe0ewsKWwIgQQS4DDBeYMXnW9WTXZ7omh1QpSd 6t4wLXtVTHgB80pl4CqOmF4KuTNIJVrhviMseMCyzra2BuhJJp+lfrFu49w/bkhp f0q0WUKpMpNWn2m6D7mftor/GwVsL0TBcdBxSbIbZKymEwSZbWc6SE0/NrX615Md U738AehY6U+KFlhueDw7TkfJBZJ7zan3Ln99HtTnye7cvIjChJCmEwe6VYOdAtGL TphjYUYxxSiNV2RpuQq/s58sLA== -----END CERTIFICATE-----Generated at Wed Jul 29 13:33:42 2026 by rpki-client