$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: bhfDZxpsDHmVEA51cto1ui2AldyuClpK1ht9QgSVASA= Subject key identifier: C2:CB:0D:2D:46:F1:69:FA:32:68:92:C7:33:8A:A1:82:7F:95:14:9B Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CF8 Signing time: Tue 28 Jul 2026 18:46:00 +0000 Manifest this update: Tue 28 Jul 2026 18:45:59 +0000 Manifest next update: Tue 04 Aug 2026 18:45:59 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: bdiR6XZjPVIEAMo0UR0fsmE6iiaYYVi4TPaMEElek5U=) 2: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 4: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 5: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 6: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 7: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jul 28 18:45:59 2026 GMT Not After : Aug 4 18:45:59 2026 GMT Subject: CN=6a68f8e8-7616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:c5:ad:32:27:d1:67:a2:1f:f6:f5:4b:5a: 18:0f:28:6a:a2:46:f1:bc:ba:91:a9:cd:b6:d8:e3: 13:d1:c5:b4:28:a0:2e:d1:5b:55:25:eb:fb:52:7d: a8:cc:11:5b:7b:38:f3:b8:94:f4:36:e7:de:5b:44: 8b:8d:fd:c1:2b:4c:d2:c5:30:d7:4d:33:bf:f4:c0: 8d:96:33:d3:5e:ff:68:00:60:70:7f:0c:8b:62:83: 7a:be:5a:87:1a:20:d2:d8:ba:fc:69:63:41:3d:a5: d2:98:e4:bb:1d:aa:7f:ba:da:1a:16:42:ed:5b:fa: 8b:e1:7b:f9:72:4e:f7:1f:27:3e:67:af:27:f8:c1: ad:76:12:33:50:dd:17:a7:8a:2b:4a:ca:43:32:39: b0:55:b7:16:23:98:fb:e4:52:40:0d:10:66:63:4a: 44:59:70:08:86:64:86:1f:d0:64:9b:3d:9a:45:e9: 26:29:bf:5c:37:7c:64:89:2e:41:5c:75:cb:fd:c9: ae:40:3a:a5:d3:ef:72:a0:ed:4e:01:41:6d:1c:e0: 6d:75:e0:11:90:c1:3b:7d:66:61:62:3e:dc:bf:a0: 3b:73:a2:55:4b:dc:83:64:cf:cf:aa:e0:88:31:bd: d3:0b:50:f2:f3:77:36:a0:62:0e:c3:87:df:d5:62: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CB:0D:2D:46:F1:69:FA:32:68:92:C7:33:8A:A1:82:7F:95:14:9B X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:dc:36:b2:93:ad:fd:26:48:78:ba:1e:8d:77:cf:26:d3:6f: b7:a1:f0:ae:e7:f7:3d:04:fb:57:e3:9a:cb:6c:1e:ad:f6:28: 04:1f:b7:6e:eb:a7:99:41:0e:d5:ec:7d:2e:9c:34:20:31:1c: ff:68:2e:69:0c:77:ec:e1:2c:94:7a:76:e3:e4:73:0c:c1:fb: a8:a1:2b:1e:25:c6:f5:71:12:7e:04:01:a2:44:dd:44:42:21: 66:90:15:40:a2:58:55:60:0c:1a:53:7f:ae:33:f8:43:d2:6d: 24:53:ed:54:63:71:40:8e:99:e2:64:a7:58:b1:33:be:b5:ab: 11:f8:85:ce:48:c0:2b:27:15:e3:ef:0a:65:b6:ed:b2:ac:97: 00:40:fe:37:2d:39:a8:13:21:ce:89:8a:4e:81:4b:30:e3:8b: 3c:f1:77:e9:72:2e:7c:a4:66:06:39:76:b9:69:e9:fc:be:72: 7e:dc:71:c1:55:4d:03:41:29:43:27:2b:66:71:d6:da:b1:a8: da:04:e8:46:fc:78:73:9b:f7:a2:63:4a:16:4d:3b:21:0c:ff: 4e:7a:9b:74:8d:ef:39:45:c3:79:f6:32:0f:e0:3f:a1:ee:fa: 84:83:b0:df:10:22:75:2e:d3:38:ea:f5:40:a8:83:1a:4f:26: 47:f5:2f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNzI4MTg0NTU5WhcNMjYwODA0MTg0NTU5WjAYMRYwFAYD VQQDEw02YTY4ZjhlOC03NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutDFrTIn0WeiH/b1S1oYDyhqokbxvLqRqc222OMT0cW0KKAu0VtVJev7Un2o zBFbezjzuJT0NufeW0SLjf3BK0zSxTDXTTO/9MCNljPTXv9oAGBwfwyLYoN6vlqH GiDS2Lr8aWNBPaXSmOS7Hap/utoaFkLtW/qL4Xv5ck73Hyc+Z68n+MGtdhIzUN0X p4orSspDMjmwVbcWI5j75FJADRBmY0pEWXAIhmSGH9Bkmz2aRekmKb9cN3xkiS5B XHXL/cmuQDql0+9yoO1OAUFtHOBtdeARkME7fWZhYj7cv6A7c6JVS9yDZM/PquCI Mb3TC1Dy83c2oGIOw4ff1WJPwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLLDS1G 8Wn6MmiSxzOKoYJ/lRSbMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtw2spOt/SZIeLoejXfPJtNvt6Hwruf3PQT7V+Oay2werfYoBB+3buunmUEO 1ex9Lpw0IDEc/2guaQx37OEslHp24+RzDMH7qKErHiXG9XESfgQBokTdREIhZpAV QKJYVWAMGlN/rjP4Q9JtJFPtVGNxQI6Z4mSnWLEzvrWrEfiFzkjAKycV4+8KZbbt sqyXAED+Ny05qBMhzomKToFLMOOLPPF36XIufKRmBjl2uWnp/L5yftxxwVVNA0Ep QycrZnHW2rGo2gToRvx4c5v3omNKFk07IQz/TnqbdI3vOUXDefYyD+A/oe76hIOw 3xAidS7TOOr1QKiDGk8mR/Uv7w== -----END CERTIFICATE-----Generated at Wed Jul 29 06:49:25 2026 by rpki-client