$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: QqHXi8dHA+uGOXNitCFR6mHk9tu39HVPADTROFSo7KA= Subject key identifier: EC:79:05:1B:61:A9:91:EF:92:66:CA:FC:01:CF:53:99:7C:5A:80:8B Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2C37 Signing time: Tue 28 Jul 2026 14:26:41 +0000 Manifest this update: Tue 28 Jul 2026 14:26:41 +0000 Manifest next update: Tue 04 Aug 2026 14:26:41 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: NCRDy7TKCcf5EkbwLw1hkouRLoYh6bxdihjFZdL7Tv0=) 2: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=) 3: F645F318500C11EBA2295426C4F9AE02.roa (hash: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11345 (0x2c51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Jul 28 14:26:41 2026 GMT Not After : Aug 4 14:26:41 2026 GMT Subject: CN=6a68bc21-9967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:46:a3:3c:fb:45:e1:60:fd:c8:7a:4b:e8: 05:3a:41:1e:4d:a8:90:7d:95:0d:6e:2a:8c:96:95: 97:09:09:7a:b9:90:86:ce:52:5c:d7:85:4e:8a:10: 50:f5:2d:60:47:08:7c:79:9d:a2:c7:d7:4b:90:26: ce:0f:15:ec:e1:83:55:f1:2c:56:ad:71:b0:dd:44: c4:89:85:35:b7:b8:98:aa:90:ec:aa:7c:20:71:72: ab:42:2a:3b:91:b1:a6:50:17:bb:da:73:5a:86:5c: c2:5d:0f:17:11:67:e6:72:8d:7d:d6:08:5b:aa:9c: 35:1c:a5:dd:ee:eb:12:1a:66:b8:83:41:66:6d:66: c1:70:55:bb:0b:aa:ea:5a:9d:09:5b:10:ce:34:c8: d2:a6:d7:df:03:2d:e4:da:b3:1d:7a:ec:30:7e:32: d9:62:39:4a:46:24:75:22:5e:b2:b0:11:96:9f:29: f7:ea:cb:20:d0:e2:e7:7b:b3:0d:88:8a:f2:08:55: 3a:e1:ed:6d:d6:66:94:c3:71:d8:24:43:e8:3a:0b: 03:47:a5:25:9d:8c:40:0c:e2:ae:92:98:2d:d9:5f: 2f:05:ae:7a:6f:cb:43:9a:14:09:cb:98:e6:9d:79: c6:bf:07:b1:d5:b2:e6:1b:e1:02:66:2f:c4:eb:b4: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:79:05:1B:61:A9:91:EF:92:66:CA:FC:01:CF:53:99:7C:5A:80:8B X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f4:53:56:87:30:69:a7:9d:ba:0b:14:72:7d:b6:b5:c8:73: 5f:16:c0:bc:27:bf:e3:a5:ed:5d:13:4e:c8:1f:33:7d:d1:e6: 79:26:2f:f8:7c:74:70:f4:73:13:33:61:19:48:07:9e:a3:d9: 5b:3d:c1:97:24:bb:ab:0e:4a:07:08:f9:6b:09:3c:2d:8d:38: 24:ee:75:58:e6:51:c5:c2:e5:dd:81:48:26:00:a3:59:af:63: 78:ec:83:ea:32:fb:f4:3d:d8:ee:2a:75:a5:ba:51:45:83:20: a7:13:a0:5a:28:c7:cf:56:2c:ff:ca:a3:6a:dc:d7:e4:c9:90: ff:56:c0:11:0c:1a:91:ba:0a:bb:ae:0e:b1:79:81:5e:73:d8: 70:ba:42:ce:44:d1:63:49:56:ce:f0:77:78:a1:8e:cf:b9:6b: 85:20:f1:ca:95:93:a2:b2:d0:73:06:2d:48:31:1b:51:92:c9: e8:6e:80:8f:29:a7:77:7f:89:32:fa:18:e3:1d:79:f5:b5:6a: c9:1b:f1:7e:55:b2:e3:e1:eb:07:e2:36:ec:a3:6d:7f:a4:26: 70:97:21:6f:ca:cd:b4:fb:90:a3:81:38:da:e0:79:d1:0a:de: 86:25:c2:e8:b3:e8:87:d8:e0:7f:99:8e:6d:45:09:f5:e7:8c: 80:e5:33:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjYwNzI4MTQyNjQxWhcNMjYwODA0MTQyNjQxWjAYMRYwFAYD VQQDEw02YTY4YmMyMS05OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rlGozz7ReFg/ch6S+gFOkEeTaiQfZUNbiqMlpWXCQl6uZCGzlJc14VOihBQ 9S1gRwh8eZ2ix9dLkCbODxXs4YNV8SxWrXGw3UTEiYU1t7iYqpDsqnwgcXKrQio7 kbGmUBe72nNahlzCXQ8XEWfmco191ghbqpw1HKXd7usSGma4g0FmbWbBcFW7C6rq Wp0JWxDONMjSptffAy3k2rMdeuwwfjLZYjlKRiR1Il6ysBGWnyn36ssg0OLne7MN iIryCFU64e1t1maUw3HYJEPoOgsDR6UlnYxADOKukpgt2V8vBa56b8tDmhQJy5jm nXnGvwex1bLmG+ECZi/E67RDrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx5BRth qZHvkmbK/AHPU5l8WoCLMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYfRTVocwaaedugsUcn22tchzXxbAvCe/46XtXRNOyB8zfdHmeSYv+Hx0cPRz EzNhGUgHnqPZWz3BlyS7qw5KBwj5awk8LY04JO51WOZRxcLl3YFIJgCjWa9jeOyD 6jL79D3Y7ip1pbpRRYMgpxOgWijHz1Ys/8qjatzX5MmQ/1bAEQwakboKu64OsXmB XnPYcLpCzkTRY0lWzvB3eKGOz7lrhSDxypWTorLQcwYtSDEbUZLJ6G6Ajymnd3+J MvoY4x159bVqyRvxflWy4+HrB+I27KNtf6QmcJchb8rNtPuQo4E42uB50QrehiXC 6LPoh9jgf5mObUUJ9eeMgOUzoA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:55:14 2026 by rpki-client