$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json) Hash identifier: QcojnOoRQmDfNvEV5IQxzo/ctKPBs7Cd+UoZswWj5+s= Subject key identifier: 70:29:B2:4A:56:FC:19:88:19:40:21:41:27:15:B9:09:F4:47:79:B3 Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft Manifest number: 5A Signing time: Tue 28 Jul 2026 16:27:19 +0000 Manifest this update: Tue 28 Jul 2026 16:27:18 +0000 Manifest next update: Tue 04 Aug 2026 16:27:18 +0000 Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: ml7dCqRiEyQgJPXa1iPSASrHaK/KjK5JuG2rx6Lp6AM=) 2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: 6rniMe/YVWGY7c5EcQQMPJgDsNhBjwIFHtLtGoYlhn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: Jul 28 16:27:18 2026 GMT Not After : Aug 4 16:27:18 2026 GMT Subject: CN=6a68d867-d881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:ad:f0:3d:1b:9b:05:a4:4d:54:3a:39:ac: ff:a8:32:82:42:ce:34:50:9c:f2:84:0c:7b:a0:bc: c6:ee:19:c7:f7:8a:11:77:d1:68:22:ca:2c:98:4b: a5:b0:5c:86:b2:45:5a:ac:07:75:22:78:f9:b6:0c: 0d:a0:89:10:21:df:fe:bc:b6:86:62:8d:97:86:cc: da:a2:98:0c:43:2d:1b:6e:54:52:cd:44:43:34:58: 19:01:ad:ea:0b:6a:f7:e7:39:fc:80:c1:98:2c:d4: 91:78:84:67:8a:28:92:d5:ef:b9:bc:63:1d:98:e3: 94:77:89:c6:83:d0:24:30:8a:4a:06:da:cd:6d:c1: 41:d4:9a:fd:48:4c:12:b5:24:9b:5a:98:22:71:99: 8c:c3:f1:dc:91:27:c3:ca:9a:c1:57:07:b6:1e:b9: 57:17:aa:45:4a:63:c5:6d:47:8b:f0:ff:05:18:2c: f8:15:60:01:57:79:48:42:17:0a:d0:ae:23:93:29: b1:10:40:30:f3:b3:e6:16:64:ce:4f:fa:51:50:56: 45:a5:45:d1:93:5d:0b:87:fe:ea:6a:d9:79:60:aa: 19:8f:0a:13:e7:42:40:b0:2e:ad:cb:74:c0:9e:39: 80:1e:30:46:bb:84:5b:b5:3f:f1:22:0d:ed:fd:1d: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:B2:4A:56:FC:19:88:19:40:21:41:27:15:B9:09:F4:47:79:B3 X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:29:2f:ba:f6:ec:f8:ec:1c:ce:77:f5:52:44:79:fe:07:57: e7:46:3d:74:06:0b:9a:32:96:bf:f3:ad:47:68:d9:05:29:25: a0:01:b0:e5:5a:86:54:1f:6c:7a:53:dc:d1:d7:e2:9b:1b:48: fe:c4:87:d4:45:6c:57:00:11:69:8e:35:48:b5:80:b1:8a:36: f1:5b:8b:af:46:2a:d0:2e:69:80:fe:4c:0b:6b:d6:95:db:19: e9:2d:ac:fd:af:51:d9:e1:03:b4:85:4f:cb:1b:ec:76:8b:95: cb:ef:7e:d6:8d:92:0b:27:6e:b0:24:43:c6:e4:fe:90:ae:c0: 0e:29:99:8f:95:df:15:d8:04:d8:a8:d9:3d:78:ca:da:a0:7b: 71:e3:53:2b:c3:8b:d6:45:7c:f7:d1:d9:73:95:fe:fb:a9:48: cf:ce:fb:9e:47:dc:a6:9e:dc:2a:a2:28:7c:c1:94:33:d7:33: 7d:01:22:81:6d:f4:40:0d:28:40:27:8f:b4:b0:c8:f2:22:0f: cb:a9:a9:fa:88:e5:6f:5c:f4:d2:9e:81:80:4d:ff:ed:2c:8b: 2b:86:bf:f2:f9:1e:6f:a1:fc:c1:44:11:9d:6f:f3:d4:c3:63: c6:78:c0:32:13:1e:b3:86:8c:7b:b3:8a:2f:e0:3c:24:45:01: a3:5b:7e:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjA3MjgxNjI3MThaFw0yNjA4MDQxNjI3MThaMBgxFjAUBgNV BAMTDTZhNjhkODY3LWQ4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgAq3wPRubBaRNVDo5rP+oMoJCzjRQnPKEDHugvMbuGcf3ihF30WgiyiyYS6Ww XIayRVqsB3UiePm2DA2giRAh3/68toZijZeGzNqimAxDLRtuVFLNREM0WBkBreoL avfnOfyAwZgs1JF4hGeKKJLV77m8Yx2Y45R3icaD0CQwikoG2s1twUHUmv1ITBK1 JJtamCJxmYzD8dyRJ8PKmsFXB7YeuVcXqkVKY8VtR4vw/wUYLPgVYAFXeUhCFwrQ riOTKbEQQDDzs+YWZM5P+lFQVkWlRdGTXQuH/upq2XlgqhmPChPnQkCwLq3LdMCe OYAeMEa7hFu1P/EiDe39HSbpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcCmySlb8 GYgZQCFBJxW5CfRHebMwHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsKS+69uz47BzOd/VSRHn+B1fnRj10BguaMpa/861HaNkFKSWgAbDlWoZUH2x6 U9zR1+KbG0j+xIfURWxXABFpjjVItYCxijbxW4uvRirQLmmA/kwLa9aV2xnpLaz9 r1HZ4QO0hU/LG+x2i5XL737WjZILJ26wJEPG5P6QrsAOKZmPld8V2ATYqNk9eMra oHtx41Mrw4vWRXz30dlzlf77qUjPzvueR9ymntwqoih8wZQz1zN9ASKBbfRADShA J4+0sMjyIg/Lqan6iOVvXPTSnoGATf/tLIsrhr/y+R5vofzBRBGdb/PUw2PGeMAy Ex6zhox7s4ov4DwkRQGjW35u -----END CERTIFICATE-----Generated at Wed Jul 29 13:59:55 2026 by rpki-client