$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: RemGO5rk6tRgn6oos/3/QwHG31apjK/6souLAPAmSfU= Subject key identifier: F4:8E:02:74:29:96:4F:33:1B:59:CB:CE:4A:9A:27:75:A1:CB:3F:3B Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 0D Signing time: Mon 27 Jul 2026 11:31:15 +0000 Manifest this update: Mon 27 Jul 2026 11:31:14 +0000 Manifest next update: Mon 03 Aug 2026 11:31:14 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: n0Od5w/gcfhOFRgkhGNeCXEAz27UtR2f/HENz58wQIg=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Jul 27 11:31:14 2026 GMT Not After : Aug 3 11:31:14 2026 GMT Subject: CN=6a674183-dff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:c7:9b:95:92:70:78:72:df:d3:9a:4f:d8: fb:df:a5:d3:51:de:90:b6:75:ba:ba:2a:88:8f:99: 4e:2d:17:2a:85:51:3a:09:f6:12:4e:45:1f:2c:56: 7a:fa:dc:99:f5:9c:c0:eb:57:f1:67:36:c6:e9:10: d4:e3:f1:4a:ab:71:94:d6:11:49:11:d3:9d:e6:09: aa:01:71:5b:15:41:fa:73:d6:fe:5e:e3:88:aa:07: ca:62:a0:2b:0a:5b:f6:3b:37:e2:b9:d3:6d:96:02: c7:e2:a8:8c:f7:15:99:76:2c:9d:bb:41:38:38:08: d4:d4:eb:ea:1d:47:6d:2e:61:2d:64:bd:93:9c:0c: b0:09:e5:b2:86:f3:d2:23:9e:8d:67:22:ac:58:cf: be:f8:bc:aa:c3:03:b0:e0:53:f7:07:d1:00:44:62: fa:4c:b0:a4:e2:aa:19:f0:9d:38:0c:bb:0f:62:c4: b2:dc:90:a1:0c:60:b1:1b:6b:d4:b1:27:e2:59:68: 6e:bc:af:f0:61:db:83:31:35:5b:4a:03:3e:c0:79: 3e:81:cc:be:1f:14:f0:d2:0e:ea:0a:f3:f9:cb:7b: 1e:18:da:df:f9:b7:93:d5:2b:7c:3e:27:7c:e8:33: 41:6d:07:29:14:1d:2f:2f:e4:73:b0:26:d4:56:ed: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8E:02:74:29:96:4F:33:1B:59:CB:CE:4A:9A:27:75:A1:CB:3F:3B X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:e2:37:3b:63:8d:25:37:59:5b:eb:03:ae:a3:a3:e2:f8: a0:16:c5:fb:ff:32:97:25:71:cc:3a:de:64:f2:3d:6a:74:44: bb:88:c4:d4:e9:dc:80:64:fb:83:4f:ba:56:dd:22:b1:1c:59: 47:a7:58:bc:7c:c8:e1:8f:96:f2:c7:bc:2f:e8:84:64:03:da: ac:48:a7:4d:4b:67:06:89:1a:3d:7d:6d:f9:f8:13:a8:48:b2: d0:b8:9e:27:09:b3:75:13:bf:75:8b:8b:42:82:f0:05:67:2a: 36:6b:d7:91:63:cc:20:4c:56:37:69:49:c4:ba:b5:d7:5f:93: 27:f7:0e:96:1c:be:7e:bd:28:80:a7:15:3b:46:7b:e8:56:6f: 86:6a:1e:a8:6a:4d:b4:30:9b:22:e9:2b:d6:e4:db:c7:45:f0: 76:3d:b7:3a:eb:c6:37:cd:70:d3:92:7d:5a:78:e1:3a:85:d7: a7:74:b8:f1:33:b9:91:5a:31:af:9d:09:6b:1b:18:75:91:74: a7:72:da:5c:d6:05:fc:7d:bc:8b:8f:6a:92:26:1b:20:fe:97: dc:bc:c3:2c:aa:0e:3b:dc:6e:66:84:fe:10:c6:88:f2:d4:1b: a3:8b:d4:99:a1:39:2f:80:84:63:52:33:87:fd:ab:2d:5e:e1: 4f:22:4b:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjA3MjcxMTMxMTRaFw0yNjA4MDMxMTMxMTRaMBgxFjAUBgNV BAMTDTZhNjc0MTgzLWRmZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMfceblZJweHLf05pP2PvfpdNR3pC2dbq6KoiPmU4tFyqFUToJ9hJORR8sVnr6 3Jn1nMDrV/FnNsbpENTj8UqrcZTWEUkR053mCaoBcVsVQfpz1v5e44iqB8pioCsK W/Y7N+K5022WAsfiqIz3FZl2LJ27QTg4CNTU6+odR20uYS1kvZOcDLAJ5bKG89Ij no1nIqxYz774vKrDA7DgU/cH0QBEYvpMsKTiqhnwnTgMuw9ixLLckKEMYLEba9Sx J+JZaG68r/Bh24MxNVtKAz7AeT6BzL4fFPDSDuoK8/nLex4Y2t/5t5PVK3w+J3zo M0FtBykUHS8v5HOwJtRW7dYrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9I4CdCmW TzMbWcvOSpondaHLPzswHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBN4uI3O2ONJTdZW+sDrqOj4vigFsX7/zKXJXHMOt5k8j1qdES7iMTU6dyAZPuD T7pW3SKxHFlHp1i8fMjhj5byx7wv6IRkA9qsSKdNS2cGiRo9fW35+BOoSLLQuJ4n CbN1E791i4tCgvAFZyo2a9eRY8wgTFY3aUnEurXXX5Mn9w6WHL5+vSiApxU7Rnvo Vm+Gah6oak20MJsi6SvW5NvHRfB2Pbc668Y3zXDTkn1aeOE6hdendLjxM7mRWjGv nQlrGxh1kXSnctpc1gX8fbyLj2qSJhsg/pfcvMMsqg473G5mhP4Qxojy1Buji9SZ oTkvgIRjUjOH/astXuFPIktR -----END CERTIFICATE-----Generated at Tue Jul 28 19:01:29 2026 by rpki-client