$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft File: nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json) Hash identifier: Hqonp0qXw4f3BDPA9IohVTn1NBkeMhGYWFc/r3OiC04= Subject key identifier: 74:19:97:B4:43:BF:25:AE:4E:2E:4A:92:EE:C5:F8:9D:E9:58:13:CC Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3 Certificate issuer: /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft Manifest number: 42 Signing time: Mon 27 Jul 2026 10:49:23 +0000 Manifest this update: Mon 27 Jul 2026 10:49:23 +0000 Manifest next update: Mon 03 Aug 2026 10:49:23 +0000 Files and hashes: 1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: greGQEXhoqvuAQumqUlirIWgCaNeWMpFBWBriO88T4w=) 2: B62F5378265811F1B0D864DEA4833773.roa (hash: d4qXqs0vf21uAmTHlb0izdYCuuZAXvGPzrYKUZpwbxw=) 3: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: yu5d60NAc4cXPUzUBIczj0n+5EToYt0HRr1PhV7q4lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3 Validity Not Before: Jul 27 10:49:23 2026 GMT Not After : Aug 3 10:49:23 2026 GMT Subject: CN=6a6737b3-0ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:28:15:e3:46:98:75:d2:3c:11:2a:45:21: 83:96:e2:7a:61:9d:93:81:2b:34:6a:ed:83:d9:de: 90:f5:ac:9e:c7:d1:18:be:d4:1f:e2:44:ee:1c:c0: 1e:3e:c7:45:21:a0:f8:50:ff:35:de:10:04:3c:7c: 58:41:4f:56:07:3d:95:c7:c3:b4:8e:2f:ac:99:8f: 18:d4:3e:bf:a9:2e:f0:72:95:33:30:de:55:2e:9f: 3d:3a:d9:15:b7:b5:29:1f:03:6b:a3:e0:4f:69:ec: 9a:46:cc:b1:6f:ca:70:32:69:8c:e6:c6:f0:d0:73: 52:43:27:55:af:5a:bb:8c:3e:7b:ff:91:50:92:97: b7:ee:15:45:77:ce:07:c3:22:9a:ae:4d:41:79:29: 56:c4:68:8d:f8:d6:d5:d2:5f:8d:10:64:f0:da:cb: ea:60:a9:34:a0:06:f6:32:a1:d2:92:53:ee:41:a9: 6b:1f:be:9f:23:e7:5d:a2:41:ea:20:76:58:17:18: 3b:09:4e:94:a1:75:71:54:cf:fa:ce:ec:ac:aa:22: e3:a9:9a:57:39:e6:6a:60:a2:b3:0c:dd:17:b6:43: 00:a1:91:a6:58:41:b5:62:3d:c4:ff:ac:bc:b8:c0: 3b:f0:b1:3e:60:c8:8b:ba:0b:b7:80:a1:d3:40:b0: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:19:97:B4:43:BF:25:AE:4E:2E:4A:92:EE:C5:F8:9D:E9:58:13:CC X509v3 Authority Key Identifier: keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:67:4c:d7:44:ec:02:2c:c5:71:5a:fa:fd:cf:fa:0f:c5: cb:53:f2:c1:01:07:07:39:fe:4c:c8:c0:25:7b:bf:2b:00:a0: 14:ed:b5:08:83:c9:63:ba:20:1d:53:43:e6:d5:e5:6c:8f:66: 90:e4:e6:95:ff:13:f7:60:7f:b4:a0:2d:de:3d:a8:ab:79:35: 8f:0d:dd:41:ac:ec:96:04:26:27:77:a2:1f:e5:c4:c0:d7:ba: 67:7e:ca:bc:63:2a:aa:25:67:52:00:81:84:1a:d4:44:0e:59: 6b:0e:af:36:fe:a1:1a:bf:52:50:9d:f0:c8:3a:01:22:3c:e7: bc:d4:b3:31:4b:16:9e:f2:80:3c:47:df:d2:97:d0:4e:df:15: eb:70:ba:29:69:e7:d6:56:2a:d2:1f:0f:d6:81:ee:e9:96:3f: d0:19:31:88:d3:ba:5f:66:c2:89:e0:f7:2a:e5:02:6b:4a:f6: 5b:e9:f7:54:95:00:08:b1:69:34:6e:5e:34:81:9e:6a:25:b0: f7:a6:09:a1:5b:a1:29:9c:b1:f5:a1:87:7c:66:a2:e6:f0:9e: 77:54:16:6e:f4:6d:56:05:a1:ce:0d:54:bb:a2:97:3f:8f:38: 3b:8f:c4:d3:a5:ba:69:03:76:4d:74:7c:4b:93:a9:10:f7:f5: bf:37:a7:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUFFQTExMC8GA1UEBRMoOUVDMTRCRTJFOTMyM0UwMkE4RkMzQTYyMTQ5QTFDQUFF MzY3MkRCMzAeFw0yNjA3MjcxMDQ5MjNaFw0yNjA4MDMxMDQ5MjNaMBgxFjAUBgNV BAMTDTZhNjczN2IzLTBhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLCSgV40aYddI8ESpFIYOW4nphnZOBKzRq7YPZ3pD1rJ7H0Ri+1B/iRO4cwB4+ x0UhoPhQ/zXeEAQ8fFhBT1YHPZXHw7SOL6yZjxjUPr+pLvBylTMw3lUunz062RW3 tSkfA2uj4E9p7JpGzLFvynAyaYzmxvDQc1JDJ1WvWruMPnv/kVCSl7fuFUV3zgfD IpquTUF5KVbEaI341tXSX40QZPDay+pgqTSgBvYyodKSU+5BqWsfvp8j512iQeog dlgXGDsJTpShdXFUz/rO7KyqIuOpmlc55mpgorMM3Re2QwChkaZYQbViPcT/rLy4 wDvwsT5gyIu6C7eAodNAsFjJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdBmXtEO/ Ja5OLkqS7sX4nelYE8wwHwYDVR0jBBgwFoAUnsFL4ukyPgKo/DpiFJocquNnLbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1QUVBLzBBODhEQ0M0MjY1 ODExRjE5Qzg4NjlEMEE0ODMzNzczL25zRkw0dWt5UGdLb19EcGlGSm9jcXVObkxi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnNGTDR1a3lQZ0tvX0RwaUZKb2NxdU5uTGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 QUVBLzBBODhEQ0M0MjY1ODExRjE5Qzg4NjlEMEE0ODMzNzczL25zRkw0dWt5UGdL b19EcGlGSm9jcXVObkxiTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAe6WdM10TsAizFcVr6/c/6D8XLU/LBAQcHOf5MyMAle78rAKAU7bUIg8ljuiAd U0Pm1eVsj2aQ5OaV/xP3YH+0oC3ePaireTWPDd1BrOyWBCYnd6If5cTA17pnfsq8 YyqqJWdSAIGEGtREDllrDq82/qEav1JQnfDIOgEiPOe81LMxSxae8oA8R9/Sl9BO 3xXrcLopaefWVirSHw/Wge7plj/QGTGI07pfZsKJ4Pcq5QJrSvZb6fdUlQAIsWk0 bl40gZ5qJbD3pgmhW6EpnLH1oYd8ZqLm8J53VBZu9G1WBaHODVS7opc/jzg7j8TT pbppA3ZNdHxLk6kQ9/W/N6ct -----END CERTIFICATE-----Generated at Tue Jul 28 21:00:41 2026 by rpki-client