$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: TVCjBVtgJbWq/uGk7b6aYPvAAk6+gLSNI6PKdcr2rvA= Subject key identifier: BE:FC:EC:CD:0D:0E:29:05:7E:B7:9B:72:95:0D:2D:66:65:7D:33:8B Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 11FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 117A Signing time: Tue 28 Jul 2026 17:18:31 +0000 Manifest this update: Tue 28 Jul 2026 17:18:30 +0000 Manifest next update: Tue 04 Aug 2026 17:18:30 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: SK9RMSyG8cTX0GMRuiXpUQDoPq5YTaNj7nYoi8XfaP0=) 2: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=) 3: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=) 4: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=) 5: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=) 6: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=) 7: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=) 8: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=) 9: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=) 10: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=) 11: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4602 (0x11fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Jul 28 17:18:30 2026 GMT Not After : Aug 4 17:18:30 2026 GMT Subject: CN=6a68e467-b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:fa:00:ee:f3:26:f2:84:77:bd:b9:2b:36: cc:d9:ab:82:83:d8:03:83:2a:23:6f:d6:24:9e:b5: 52:f2:d5:7f:44:8e:d0:71:1e:29:20:23:cf:f0:24: 4f:6d:6a:30:ec:f7:ed:a2:18:e9:9b:47:33:18:b8: 17:3a:50:8d:83:c9:58:2d:70:cf:7a:b3:f2:59:40: 17:96:c6:91:c0:6e:77:62:35:13:df:77:d5:dc:96: 08:c4:78:ef:48:07:f6:04:de:db:4a:52:2d:da:50: df:b2:43:e3:9f:64:33:0c:5f:37:2a:11:2d:b0:5c: 41:8e:0b:69:ec:3f:99:03:52:2f:ee:b0:56:8a:16: f8:2d:8e:f2:c0:51:7c:3d:61:cc:31:f3:e2:6f:1a: ee:9d:f0:dd:7c:6c:db:69:ac:3a:f1:01:94:e5:9c: 2e:74:4f:ad:64:b5:1a:70:8e:5f:01:a8:1f:51:12: 1d:4e:27:74:7b:03:e9:e4:82:c2:c8:e7:f3:29:b4: 34:0e:5b:e6:24:34:3d:bb:ac:89:4d:39:3a:e2:0d: ae:18:ed:6c:97:82:fb:e2:f7:0e:e0:f1:a1:0a:d4: be:30:7c:5e:30:e4:0d:74:4b:28:04:93:6e:2a:54: cc:8d:8d:e1:51:9f:47:de:f8:bc:62:7b:bd:df:50: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FC:EC:CD:0D:0E:29:05:7E:B7:9B:72:95:0D:2D:66:65:7D:33:8B X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:5f:bb:02:12:aa:48:71:4f:9d:f9:c9:53:3c:36:90:28:9c: ad:54:40:b5:09:ee:4d:20:21:16:1d:6a:96:1a:6b:61:13:d8: 4c:f4:ee:e0:83:3b:7c:85:ea:f2:5d:e9:06:f1:6e:de:9b:82: 73:c1:45:83:2d:8c:e6:4e:a5:02:ec:0c:a7:f4:e6:22:f6:c7: 8f:c6:b9:3c:9c:97:02:ea:d5:d4:57:b6:ea:6e:17:a5:63:1e: 67:e0:57:84:2c:9a:ff:4b:b8:e7:b4:08:8c:5b:7c:62:7e:d3: 56:cc:ce:c0:0c:ff:12:f3:b4:6d:e3:ca:12:b9:12:d6:6d:6d: 59:02:db:04:24:8e:92:60:ba:54:cd:63:1e:93:f0:67:0f:25: 45:ff:93:8c:4e:70:dc:12:76:84:bf:27:46:d8:27:2a:2b:5c: 00:7e:25:2c:02:15:c8:cd:08:8e:00:f5:94:4d:0e:22:46:a1: 94:64:cc:b3:56:b2:d7:a1:87:57:85:48:31:6b:c8:04:6e:4f: 73:70:09:f5:2a:00:69:63:1c:8e:ed:fb:c1:7a:40:0f:b7:73: fb:51:f3:9d:1b:a4:ab:93:6a:44:ab:53:ce:6f:8f:c4:f3:9b: 88:09:45:c7:9d:c9:96:60:c7:c7:e3:0f:87:36:d3:3a:d6:5a: 05:21:e9:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjYwNzI4MTcxODMwWhcNMjYwODA0MTcxODMwWjAYMRYwFAYD VQQDEw02YTY4ZTQ2Ny1iMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0r6AO7zJvKEd725KzbM2auCg9gDgyojb9YknrVS8tV/RI7QcR4pICPP8CRP bWow7Pftohjpm0czGLgXOlCNg8lYLXDPerPyWUAXlsaRwG53YjUT33fV3JYIxHjv SAf2BN7bSlIt2lDfskPjn2QzDF83KhEtsFxBjgtp7D+ZA1Iv7rBWihb4LY7ywFF8 PWHMMfPibxrunfDdfGzbaaw68QGU5ZwudE+tZLUacI5fAagfURIdTid0ewPp5ILC yOfzKbQ0DlvmJDQ9u6yJTTk64g2uGO1sl4L74vcO4PGhCtS+MHxeMOQNdEsoBJNu KlTMjY3hUZ9H3vi8Ynu931APnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL787M0N DikFfrebcpUNLWZlfTOLMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxF+7AhKqSHFPnfnJUzw2kCicrVRAtQnuTSAhFh1qlhprYRPYTPTu4IM7fIXq 8l3pBvFu3puCc8FFgy2M5k6lAuwMp/TmIvbHj8a5PJyXAurV1Fe26m4XpWMeZ+BX hCya/0u457QIjFt8Yn7TVszOwAz/EvO0bePKErkS1m1tWQLbBCSOkmC6VM1jHpPw Zw8lRf+TjE5w3BJ2hL8nRtgnKitcAH4lLAIVyM0IjgD1lE0OIkahlGTMs1ay16GH V4VIMWvIBG5Pc3AJ9SoAaWMcju37wXpAD7dz+1HznRukq5NqRKtTzm+PxPObiAlF x53JlmDHx+MPhzbTOtZaBSHpHA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:18:58 2026 by rpki-client