$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: 2hsG9kdrDalaYyenxVQ15UFQ8GZCVZJ3sjkEZE0wjBU= Subject key identifier: 53:D0:B5:64:11:7D:C0:C2:10:DD:33:2E:C6:55:F6:B8:19:93:9C:13 Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 0607 Signing time: Sun 26 Jul 2026 23:44:29 +0000 Manifest this update: Sun 26 Jul 2026 23:44:29 +0000 Manifest next update: Sun 02 Aug 2026 23:44:29 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: 2ZLxF8oicB0iS2PWKsGWYUC3r8+f7lWeFUIRW6dPWcI=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: fOkqVihCu1L5Ia3iPQWWnGFlmmkL41U8TtXyOcg3l2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: Jul 26 23:44:29 2026 GMT Not After : Aug 2 23:44:29 2026 GMT Subject: CN=6a669bdd-5a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:ea:47:32:95:88:5d:a5:34:aa:1a:a4:dd: 76:a5:bb:16:53:28:cf:ef:a3:fd:61:0c:98:cb:7e: 29:15:38:a9:3b:15:13:83:96:f2:72:c8:22:d8:c2: e9:14:06:25:5f:9b:d2:94:a4:2d:40:68:6d:74:3e: a8:cc:b4:d9:03:b1:b7:7f:71:4a:22:d3:5d:09:fe: a4:b7:49:4c:e0:a7:ac:bf:66:45:3a:66:ea:23:5e: fb:ad:c9:4d:00:17:a1:97:ea:b7:d0:01:17:c3:3a: 41:4e:a3:54:99:3c:b6:06:9e:e6:9c:8d:58:64:4f: 7e:2a:42:f7:35:24:88:78:7e:cc:3b:24:9d:4d:ce: 93:4f:9e:cb:e0:c9:e5:50:b0:82:a6:b3:d6:87:97: ae:d2:73:0d:29:ca:f5:9a:74:24:eb:9b:9f:f0:b1: d3:9f:a5:a2:5d:fe:06:a3:dc:ac:02:59:57:07:4a: 2f:ef:99:f6:54:b7:75:5e:f7:aa:20:ff:d6:2d:e4: 8c:d0:d0:c7:ed:e8:ed:b1:8c:85:a5:c0:a6:3a:d0: b0:d9:e6:31:44:ea:3f:b9:91:b2:d5:28:5e:1f:6e: d1:6a:ab:ef:99:5c:78:95:de:81:e4:79:4c:ba:32: 3f:18:67:c2:6c:6e:c5:7d:a3:53:25:2e:54:a1:f5: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D0:B5:64:11:7D:C0:C2:10:DD:33:2E:C6:55:F6:B8:19:93:9C:13 X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:83:5b:57:ca:62:f6:b9:5e:4f:67:ab:d6:47:60:bf:0e:10: d0:42:e8:e7:90:08:7b:8c:80:aa:c8:4f:8a:c4:df:5f:7e:a5: b0:82:24:3e:2a:94:13:58:ad:68:76:e0:c1:61:d1:78:c1:a5: cb:6e:ec:6a:9e:5c:11:5c:4c:5e:53:88:af:ef:2a:af:a2:37: 67:ed:46:13:87:7d:a6:21:f3:3c:88:4a:70:0b:1c:ee:25:08: 5c:a2:71:84:68:ce:44:e7:37:6b:3a:04:93:93:aa:83:33:32: 3d:ed:b1:3c:59:b2:6b:79:8c:70:a7:75:26:c7:10:3c:c4:13: a8:c3:2b:0d:87:ec:4a:9f:6b:7d:6b:e6:cc:7e:10:2a:ff:13: 2b:91:e6:19:ee:d4:14:9f:48:79:90:6a:e4:76:0c:dc:15:7a: df:50:00:45:3a:12:7b:0f:8b:5a:2c:18:e7:47:47:3b:2b:41: 87:0b:15:ef:e1:20:42:0c:4f:49:ec:70:e5:85:f2:85:e0:cc: d1:dd:69:0c:49:58:90:78:9b:d5:02:e4:46:f1:b9:15:2f:18: cb:4d:08:82:f5:01:2c:c9:83:33:3e:12:6a:be:e9:bf:dd:9d: f5:00:ab:7f:39:05:95:0c:fc:ef:eb:2e:ae:f8:b0:fa:d4:a2: 9c:2f:a7:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjYwNzI2MjM0NDI5WhcNMjYwODAyMjM0NDI5WjAYMRYwFAYD VQQDEw02YTY2OWJkZC01YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA3qRzKViF2lNKoapN12pbsWUyjP76P9YQyYy34pFTipOxUTg5bycsgi2MLp FAYlX5vSlKQtQGhtdD6ozLTZA7G3f3FKItNdCf6kt0lM4Kesv2ZFOmbqI177rclN ABehl+q30AEXwzpBTqNUmTy2Bp7mnI1YZE9+KkL3NSSIeH7MOySdTc6TT57L4Mnl ULCCprPWh5eu0nMNKcr1mnQk65uf8LHTn6WiXf4Go9ysAllXB0ov75n2VLd1Xveq IP/WLeSM0NDH7ejtsYyFpcCmOtCw2eYxROo/uZGy1SheH27RaqvvmVx4ld6B5HlM ujI/GGfCbG7FfaNTJS5UofV3YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPQtWQR fcDCEN0zLsZV9rgZk5wTMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaoNbV8pi9rleT2er1kdgvw4Q0ELo55AIe4yAqshPisTfX36lsIIkPiqUE1it aHbgwWHReMGly27sap5cEVxMXlOIr+8qr6I3Z+1GE4d9piHzPIhKcAsc7iUIXKJx hGjOROc3azoEk5OqgzMyPe2xPFmya3mMcKd1JscQPMQTqMMrDYfsSp9rfWvmzH4Q Kv8TK5HmGe7UFJ9IeZBq5HYM3BV631AARToSew+LWiwY50dHOytBhwsV7+EgQgxP Sexw5YXyheDM0d1pDElYkHib1QLkRvG5FS8Yy00IgvUBLMmDMz4Sar7pv92d9QCr fzkFlQz87+surviw+tSinC+nZw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:58:54 2026 by rpki-client