$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: eRihfk9t1bC1B5Vq6BHP203tJI+s2gldM7TaliD/UNE= Subject key identifier: 89:56:0B:63:00:68:AE:63:9F:9A:FF:07:39:05:AA:4B:98:E9:58:7A Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 0114 Signing time: Mon 27 Jul 2026 07:57:55 +0000 Manifest this update: Mon 27 Jul 2026 07:57:55 +0000 Manifest next update: Mon 03 Aug 2026 07:57:55 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: XZgC1V5KFIwrOgMnASy2V4wm9RrwRJQHDRWgVr2qvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Jul 27 07:57:55 2026 GMT Not After : Aug 3 07:57:55 2026 GMT Subject: CN=6a670f83-c41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:7d:fc:a5:77:6c:5d:21:20:d7:5b:23:6f: e3:e9:d1:08:46:52:c8:87:e5:bd:5d:74:41:69:26: e6:99:8a:d9:c0:3d:2b:6c:c3:ed:61:a6:68:33:10: d3:ca:9c:68:42:c8:c9:43:43:d3:40:f8:b8:f3:bd: 9a:87:b0:e6:59:a3:80:bc:b6:6d:4c:e0:b6:5e:0e: d6:c0:0f:ea:df:92:2e:a1:4e:ef:75:18:0b:49:1b: 7b:67:59:01:63:4c:cc:2b:50:7a:40:01:81:73:da: 2a:9a:10:d2:da:69:ee:2c:1c:c6:e1:25:5e:1d:7c: 34:e4:cd:ad:0b:27:79:64:59:d2:ed:e4:69:e8:52: 9a:82:f7:69:b6:cf:f5:df:58:95:68:43:fd:9d:21: b3:9f:5e:25:5c:fa:8b:39:61:d1:ce:57:ee:10:e3: 7c:9d:6a:51:41:f0:40:1a:ca:0e:6b:46:1b:f1:59: 4b:37:20:f6:d2:1b:71:b1:de:9d:41:3d:ed:c5:c6: 97:59:16:5a:28:ba:95:13:60:84:9f:1a:c8:b7:f6: bc:e5:5e:90:9b:b6:cf:b3:f4:c6:4f:f2:fb:76:f5: e2:49:13:a8:a8:95:c8:23:20:77:45:4c:22:f0:c1: 0b:bb:d3:bb:ba:dd:a3:06:f3:e0:51:07:d9:fa:7f: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:0B:63:00:68:AE:63:9F:9A:FF:07:39:05:AA:4B:98:E9:58:7A X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:df:2c:0d:07:ea:3e:8f:1e:ab:38:2a:b6:68:d3:cc:ef:1a: fb:79:1b:27:fa:fe:cf:01:b0:10:ee:41:a6:70:2f:6b:4f:97: d3:01:d1:d9:54:2b:92:6d:ab:c9:47:05:f2:5c:42:49:18:9e: 48:71:c1:9e:cb:6d:e8:6d:50:25:b6:d5:0d:04:aa:b8:33:1c: 7d:41:b3:c0:b6:31:55:39:d7:91:95:9b:d0:f4:31:14:aa:0a: df:b7:65:04:fe:3c:96:9d:f0:78:b2:5f:f4:b6:42:0a:83:b7: 62:65:19:33:ec:f6:a6:53:2a:20:6f:b7:d0:31:c3:0f:d7:e7: cd:3d:03:03:cd:d8:bb:a8:2c:96:5f:42:c3:e8:f2:8d:9a:ae: fe:fd:70:ec:8d:12:19:c2:44:eb:83:28:8c:8f:8d:29:f2:bf: 0d:f4:6e:ac:17:aa:fc:87:59:6d:b5:ff:74:4d:7c:e3:3e:93: 7b:e4:fb:65:99:83:4d:24:0c:7b:6d:63:46:8a:bf:9d:85:c2: ac:2c:cb:88:ba:a8:ec:a1:8d:8a:a5:26:62:43:2f:ee:d0:e5: ee:53:b9:52:cd:89:e2:f2:a7:41:e9:73:4e:84:f0:66:f1:b2: 42:f3:5a:6a:12:34:18:0f:1b:5e:66:83:b0:32:27:9b:75:14: 60:fb:93:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKDM0MTdFQkJENzgyRDY1RjI5QzQ0RkMwQkRFNTgxQTRE MUIyREVCQTQwHhcNMjYwNzI3MDc1NzU1WhcNMjYwODAzMDc1NzU1WjAYMRYwFAYD VQQDEw02YTY3MGY4My1jNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9F9/KV3bF0hINdbI2/j6dEIRlLIh+W9XXRBaSbmmYrZwD0rbMPtYaZoMxDT ypxoQsjJQ0PTQPi4872ah7DmWaOAvLZtTOC2Xg7WwA/q35IuoU7vdRgLSRt7Z1kB Y0zMK1B6QAGBc9oqmhDS2mnuLBzG4SVeHXw05M2tCyd5ZFnS7eRp6FKagvdpts/1 31iVaEP9nSGzn14lXPqLOWHRzlfuEON8nWpRQfBAGsoOa0Yb8VlLNyD20htxsd6d QT3txcaXWRZaKLqVE2CEnxrIt/a85V6Qm7bPs/TGT/L7dvXiSROoqJXIIyB3RUwi 8MELu9O7ut2jBvPgUQfZ+n9/ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlWC2MA aK5jn5r/BzkFqkuY6Vh6MB8GA1UdIwQYMBaAFDQX6714LWXynET8C95YGk0bLeuk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81OUFGQzIwQUU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpmS2NSUHdMM2xnYVRSc3Q2 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81OUFGQzIwQUU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpm S2NSUHdMM2xnYVRSc3Q2NlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASN8sDQfqPo8eqzgqtmjTzO8a+3kbJ/r+zwGwEO5BpnAva0+X0wHR2VQrkm2r yUcF8lxCSRieSHHBnstt6G1QJbbVDQSquDMcfUGzwLYxVTnXkZWb0PQxFKoK37dl BP48lp3weLJf9LZCCoO3YmUZM+z2plMqIG+30DHDD9fnzT0DA83Yu6gsll9Cw+jy jZqu/v1w7I0SGcJE64MojI+NKfK/DfRurBeq/IdZbbX/dE184z6Te+T7ZZmDTSQM e21jRoq/nYXCrCzLiLqo7KGNiqUmYkMv7tDl7lO5Us2J4vKnQelzToTwZvGyQvNa ahI0GA8bXmaDsDInm3UUYPuTWQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:13 2026 by rpki-client