$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: 55L+zl9UeBcTTYcY3XeO1fnjIDfRhv6UNIizb9XfkFo= Subject key identifier: DA:83:C1:E3:06:63:1B:2A:59:8E:17:2E:50:65:D9:21:BF:89:11:04 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 0137 Signing time: Mon 27 Jul 2026 07:32:07 +0000 Manifest this update: Mon 27 Jul 2026 07:32:06 +0000 Manifest next update: Mon 03 Aug 2026 07:32:06 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: qJywbwqdVCNpxes1zBRzZvMFBXIjT36YpzErhMwpTiw=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 5VO9AYfUls793WW6aylahYoLQQVtZJJZe9EelPOo2yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Jul 27 07:32:06 2026 GMT Not After : Aug 3 07:32:06 2026 GMT Subject: CN=6a670977-6b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:b7:b4:e5:20:ee:ae:5b:2f:9c:da:2c:53: 94:5f:8a:3b:9c:80:8d:d8:93:18:81:dd:f5:61:71: 5a:cb:db:b6:7b:10:02:64:dc:df:19:be:61:9a:31: 81:43:a9:62:d2:4d:55:41:02:f4:0e:3d:58:2f:4a: 20:40:13:ee:e9:0d:2c:59:56:28:d4:e7:6c:84:06: 96:db:0e:dc:c3:fc:36:82:8e:b5:6b:0d:5f:4e:50: 99:2b:50:bc:e3:25:28:c9:0a:a2:59:1a:e5:26:73: 7c:52:8f:a7:ec:44:0d:e2:6d:5d:25:ec:f2:11:03: f3:ea:a2:ef:1c:e7:b7:bf:cc:57:13:82:10:f9:5c: 6f:32:d3:0b:4d:8a:29:af:c7:ec:54:f5:1b:b5:b2: 83:2c:fb:21:e4:d1:d2:6f:99:c3:7a:e2:b1:52:60: b0:3a:ed:40:9d:97:c5:9a:7f:26:2f:72:e6:26:89: 8d:4f:b1:1b:5e:87:75:50:66:b4:a3:b6:9d:cb:ba: 51:97:66:a6:ab:cb:94:1d:04:51:d7:55:4a:64:25: 56:95:4d:28:30:ed:b4:94:51:72:94:af:e6:29:43: 72:b2:a4:1b:1b:d3:ea:9c:c1:c9:9b:53:4b:97:dc: 3d:17:57:35:6b:c0:4e:7e:03:34:16:7b:a0:94:9d: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:83:C1:E3:06:63:1B:2A:59:8E:17:2E:50:65:D9:21:BF:89:11:04 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b4:69:f6:e9:da:1d:63:cc:a1:dc:68:f5:15:c6:72:d3:8f: f6:59:30:34:e7:9b:6a:83:b3:4d:d4:51:d3:76:62:47:95:d0: d3:24:12:d1:ca:48:4f:80:d7:05:7e:85:70:90:2a:fd:7b:d0: 10:4c:49:92:b5:95:c3:ee:49:81:e5:d4:ed:ac:97:54:84:73: bf:1a:83:a2:0b:05:30:a6:24:55:08:16:08:d5:2e:8a:71:67: 8c:18:33:e0:90:50:25:c2:e4:16:76:fe:e5:49:cc:7c:81:6a: ba:5b:73:71:21:1e:49:ec:74:6a:b0:2b:30:22:1a:11:8b:f7: 3b:82:15:ce:11:44:23:3d:1d:42:cd:1b:e2:22:db:ee:5d:da: be:de:b8:fd:bd:8a:eb:80:b7:f9:46:c1:7f:50:b8:ab:50:25: 66:85:0c:6c:1e:36:93:44:54:b5:7f:01:21:7a:27:a0:d1:49: dd:82:91:18:96:dd:19:da:19:35:4b:9a:9b:76:d3:fb:d4:cc: c6:6b:b0:a1:ab:81:fb:74:8f:d8:c0:e9:a5:ca:a6:52:aa:1c: 7c:e4:79:d7:23:38:b5:6a:0d:3a:cd:c5:a6:4c:d7:82:f4:7b: 99:07:ad:6d:3e:11:cd:e3:49:8a:c8:7d:13:80:c4:65:df:70: af:ca:f7:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjYwNzI3MDczMjA2WhcNMjYwODAzMDczMjA2WjAYMRYwFAYD VQQDEw02YTY3MDk3Ny02Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBa3tOUg7q5bL5zaLFOUX4o7nICN2JMYgd31YXFay9u2exACZNzfGb5hmjGB Q6li0k1VQQL0Dj1YL0ogQBPu6Q0sWVYo1OdshAaW2w7cw/w2go61aw1fTlCZK1C8 4yUoyQqiWRrlJnN8Uo+n7EQN4m1dJezyEQPz6qLvHOe3v8xXE4IQ+VxvMtMLTYop r8fsVPUbtbKDLPsh5NHSb5nDeuKxUmCwOu1AnZfFmn8mL3LmJomNT7EbXod1UGa0 o7ady7pRl2amq8uUHQRR11VKZCVWlU0oMO20lFFylK/mKUNysqQbG9PqnMHJm1NL l9w9F1c1a8BOfgM0FnuglJ0WKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqDweMG YxsqWY4XLlBl2SG/iREEMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw7Rp9unaHWPModxo9RXGctOP9lkwNOebaoOzTdRR03ZiR5XQ0yQS0cpIT4DX BX6FcJAq/XvQEExJkrWVw+5JgeXU7ayXVIRzvxqDogsFMKYkVQgWCNUuinFnjBgz 4JBQJcLkFnb+5UnMfIFqultzcSEeSex0arArMCIaEYv3O4IVzhFEIz0dQs0b4iLb 7l3avt64/b2K64C3+UbBf1C4q1AlZoUMbB42k0RUtX8BIXonoNFJ3YKRGJbdGdoZ NUuam3bT+9TMxmuwoauB+3SP2MDppcqmUqocfOR51yM4tWoNOs3FpkzXgvR7mQet bT4RzeNJish9E4DEZd9wr8r3kg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:39:49 2026 by rpki-client