$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: rG6eDrt7I2sFVlqH7TC/ewCiP/q/kROZWCMWXMZG13Q= Subject key identifier: 6A:0A:F7:5E:AB:B2:C1:FF:2F:EB:10:A3:77:6A:E0:08:6C:28:33:F3 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2B2C Signing time: Tue 28 Jul 2026 15:38:31 +0000 Manifest this update: Tue 28 Jul 2026 15:38:31 +0000 Manifest next update: Tue 04 Aug 2026 15:38:31 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 7H60gt5tKbkt5Sc5i/cZh0gF1Xm+nBGrvYKLHJONvEE=) 2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) 3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11120 (0x2b70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Jul 28 15:38:31 2026 GMT Not After : Aug 4 15:38:31 2026 GMT Subject: CN=6a68ccf7-89e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:c9:9c:51:0e:c0:c9:da:b6:88:f5:f9:e9: 20:67:72:5f:86:65:fb:e4:37:9a:7e:01:37:30:46: fc:67:2c:b8:56:d5:35:e3:8a:95:fc:d7:ba:f1:e9: bc:b9:2a:60:35:3f:be:2e:e7:65:97:11:dc:fc:99: cb:e7:ec:65:f5:68:e6:39:d1:5a:b6:8d:df:a6:72: e9:41:ff:a9:e0:79:fc:05:fd:d9:66:dc:aa:9d:4e: a2:fc:17:1b:d6:27:e2:0e:1a:a5:cf:8d:49:8e:f1: f2:81:28:14:ed:95:9d:50:82:cd:1c:54:70:c0:68: 2c:41:d8:f5:3d:a5:27:75:56:61:07:7f:d8:db:90: a4:a8:89:d4:f0:a4:4e:47:74:8d:94:d6:50:48:09: 5e:5f:65:ca:3e:82:26:49:e8:e1:cf:85:e1:0d:df: 7d:08:46:a7:a3:d4:d8:51:c3:33:33:5f:ec:d4:8d: 0a:35:a1:61:ae:91:3e:e0:16:d0:14:bf:db:07:cf: be:e2:90:e6:79:ed:01:55:f4:e4:7b:6d:e7:84:ee: 56:e0:88:58:24:84:8b:3c:cb:c7:0b:dc:0d:64:cd: 20:a3:b2:93:cb:20:2f:77:24:f2:c2:15:5c:be:9a: e5:d3:54:56:66:dd:6d:a7:aa:38:3c:13:a3:80:d4: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0A:F7:5E:AB:B2:C1:FF:2F:EB:10:A3:77:6A:E0:08:6C:28:33:F3 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b8:ea:fb:9f:0a:cd:b4:22:56:f8:5f:f3:97:45:63:b1:1e: 99:ce:15:d8:d0:2e:d7:c0:0a:8c:48:ac:b7:a3:ed:44:ce:b1: 8c:06:78:a3:2b:e6:f8:53:01:da:dd:f2:e7:57:89:e7:91:60: 9f:db:96:93:29:11:75:de:37:91:fb:e6:0e:98:71:fb:94:d9: 90:5d:f6:a2:15:e3:08:f5:e4:76:e5:54:ef:6e:88:1d:d0:dc: e8:8b:5a:3f:25:2e:d7:ca:a3:66:d9:21:8d:0d:7d:96:cb:34: 86:b4:e6:02:df:06:dd:3f:6d:25:e7:b7:47:68:eb:49:01:21: cc:51:0a:98:da:a3:8e:f7:16:41:be:fc:5a:02:1a:72:3b:06: 75:56:bc:b5:c8:58:d9:c7:c6:be:b0:c6:76:bb:26:30:c5:49: f1:06:59:67:46:c2:f9:36:a0:08:44:ec:e2:6b:18:66:a9:2d: 13:26:19:38:0d:2b:31:78:35:b5:77:b6:09:bc:d0:22:0c:72: 25:61:55:2c:5d:0a:02:9d:ec:90:f8:64:27:cf:ca:7f:68:b0: 9a:c8:a2:4d:8d:d1:94:07:7c:ea:bc:25:bf:46:25:cd:07:45: 00:fd:36:6d:f5:5e:b7:2b:b4:fe:6e:e2:ce:0b:a8:b6:e7:c6: 21:33:8c:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwNzI4MTUzODMxWhcNMjYwODA0MTUzODMxWjAYMRYwFAYD VQQDEw02YTY4Y2NmNy04OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUfJnFEOwMnatoj1+ekgZ3JfhmX75DeafgE3MEb8Zyy4VtU144qV/Ne68em8 uSpgNT++LudllxHc/JnL5+xl9WjmOdFato3fpnLpQf+p4Hn8Bf3ZZtyqnU6i/Bcb 1ifiDhqlz41JjvHygSgU7ZWdUILNHFRwwGgsQdj1PaUndVZhB3/Y25CkqInU8KRO R3SNlNZQSAleX2XKPoImSejhz4XhDd99CEano9TYUcMzM1/s1I0KNaFhrpE+4BbQ FL/bB8++4pDmee0BVfTke23nhO5W4IhYJISLPMvHC9wNZM0go7KTyyAvdyTywhVc vprl01RWZt1tp6o4PBOjgNSBMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoK916r ssH/L+sQo3dq4AhsKDPzMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMbjq+58KzbQiVvhf85dFY7Eemc4V2NAu18AKjEist6PtRM6xjAZ4oyvm+FMB 2t3y51eJ55Fgn9uWkykRdd43kfvmDphx+5TZkF32ohXjCPXkduVU726IHdDc6Ita PyUu18qjZtkhjQ19lss0hrTmAt8G3T9tJee3R2jrSQEhzFEKmNqjjvcWQb78WgIa cjsGdVa8tchY2cfGvrDGdrsmMMVJ8QZZZ0bC+TagCETs4msYZqktEyYZOA0rMXg1 tXe2CbzQIgxyJWFVLF0KAp3skPhkJ8/Kf2iwmsiiTY3RlAd86rwlv0YlzQdFAP02 bfVetyu0/m7izguotufGITOMhA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:40:26 2026 by rpki-client