$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: RvHrJjvb7TlQhfuXFRNjNcfket9wzC81TGQTPZLQiPI= Subject key identifier: F5:70:E9:3C:94:80:91:BE:30:83:D6:0E:79:19:DE:31:6E:C3:69:02 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 038D Signing time: Mon 27 Jul 2026 01:52:36 +0000 Manifest this update: Mon 27 Jul 2026 01:52:35 +0000 Manifest next update: Mon 03 Aug 2026 01:52:35 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: RHEY+sHcKP2xbRGg9UphgMVQ6N2hmp3Jpu49WizvAIA=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: QwQkgtoePZKxFtkm4cXFgAdorKM4wsMJHhlleIVTFws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Jul 27 01:52:35 2026 GMT Not After : Aug 3 01:52:35 2026 GMT Subject: CN=6a66b9e4-372e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:76:e1:b3:24:5a:53:54:93:b9:52:8e:7b: 4b:ac:c9:fb:44:09:23:8d:3d:7b:b6:d2:98:e2:70: e5:11:20:5c:6f:75:73:be:c8:5b:37:51:97:0b:2c: db:6c:f1:8b:39:df:c4:d5:5c:3b:27:a7:96:cd:0f: d5:a3:56:0a:66:99:7d:c0:84:67:ae:e2:43:77:0d: dd:79:1a:7d:89:38:1c:15:c2:68:b6:27:bb:e3:03: 72:77:80:d1:80:fc:73:aa:10:dc:6d:bf:71:c7:0b: 6f:ab:4e:6a:e6:f7:e3:47:56:fc:d9:42:e2:ed:c1: 9c:d8:22:a9:5c:9a:c2:20:a9:86:ca:02:c4:c9:2e: 7c:05:3b:1c:e4:76:cb:29:86:39:de:59:66:4f:74: ae:3e:87:d5:e8:26:9c:62:f3:70:76:db:01:72:79: f3:97:dd:cd:90:4a:52:84:95:55:f3:8c:d1:d6:fe: d3:b9:ab:d9:95:46:fe:91:80:65:65:7f:62:fc:39: ad:5d:d8:22:37:58:08:d9:fd:1e:f7:e2:25:8f:a9: 72:e7:33:d9:78:26:9b:9e:f0:6b:9d:a4:fd:c1:0e: 57:6b:42:b5:ed:73:39:fb:9a:3c:16:a9:f7:c6:1a: 86:94:c8:5a:a7:3b:ac:0e:32:d6:74:c4:ae:5a:90: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:E9:3C:94:80:91:BE:30:83:D6:0E:79:19:DE:31:6E:C3:69:02 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5a:79:5b:ba:94:12:be:42:75:3e:95:d7:91:27:2f:6b:2f: ae:e8:f6:12:2e:a4:3b:da:dd:e1:a2:1d:92:89:e2:59:2d:c4: 83:c7:a6:d3:14:e2:d5:e4:bc:f3:87:22:98:c4:b5:d1:bc:35: 99:d9:c3:b0:b8:97:99:6e:29:14:a8:84:81:b8:b8:f9:f2:e4: b4:a0:60:51:66:87:80:31:43:fa:c9:fc:5a:9b:38:82:67:a9: 9a:90:e2:0f:d7:d0:08:37:ca:45:18:8e:cb:26:26:56:38:ef: b8:65:d6:88:e3:9f:56:04:29:f4:6c:e8:f7:3c:b3:58:2e:f8: 3a:43:a0:8b:aa:51:ba:58:de:a1:93:28:ec:4b:22:58:6f:8d: ee:f9:9c:f9:19:17:8c:9b:47:54:df:91:d7:d2:5b:24:14:f6: 95:11:cb:49:3b:ab:ff:51:30:66:79:20:01:d2:15:7d:86:74: 41:05:55:41:b6:cb:4e:26:cb:d3:8c:cf:0d:c5:fc:8c:a2:d9: c6:63:c2:17:18:77:0f:0a:81:db:f1:60:ec:a4:26:ec:c1:a1: 04:28:4e:0b:92:26:cf:57:9b:37:7f:e9:d9:27:da:84:2f:e8: 63:e8:0f:05:0d:2f:3b:cd:12:27:42:45:34:5e:20:d4:dd:16: 9b:0b:8a:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYwNzI3MDE1MjM1WhcNMjYwODAzMDE1MjM1WjAYMRYwFAYD VQQDEw02YTY2YjllNC0zNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv924bMkWlNUk7lSjntLrMn7RAkjjT17ttKY4nDlESBcb3VzvshbN1GXCyzb bPGLOd/E1Vw7J6eWzQ/Vo1YKZpl9wIRnruJDdw3deRp9iTgcFcJotie74wNyd4DR gPxzqhDcbb9xxwtvq05q5vfjR1b82ULi7cGc2CKpXJrCIKmGygLEyS58BTsc5HbL KYY53llmT3SuPofV6CacYvNwdtsBcnnzl93NkEpShJVV84zR1v7TuavZlUb+kYBl ZX9i/DmtXdgiN1gI2f0e9+Ilj6ly5zPZeCabnvBrnaT9wQ5Xa0K17XM5+5o8Fqn3 xhqGlMhapzusDjLWdMSuWpCmjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVw6TyU gJG+MIPWDnkZ3jFuw2kCMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjVp5W7qUEr5CdT6V15EnL2svruj2Ei6kO9rd4aIdkoniWS3Eg8em0xTi1eS8 84cimMS10bw1mdnDsLiXmW4pFKiEgbi4+fLktKBgUWaHgDFD+sn8Wps4gmepmpDi D9fQCDfKRRiOyyYmVjjvuGXWiOOfVgQp9Gzo9zyzWC74OkOgi6pRuljeoZMo7Esi WG+N7vmc+RkXjJtHVN+R19JbJBT2lRHLSTur/1EwZnkgAdIVfYZ0QQVVQbbLTibL 04zPDcX8jKLZxmPCFxh3DwqB2/Fg7KQm7MGhBChOC5Imz1ebN3/p2SfahC/oY+gP BQ0vO80SJ0JFNF4g1N0WmwuKoQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:10:41 2026 by rpki-client