$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: Qm9AJHBWirCnhl+hUjTLOS8if7lQyassDXQ62wVxPFw= Subject key identifier: 62:76:82:E1:72:32:5E:C3:A0:54:2A:13:B1:46:D0:0A:9C:C2:1E:C6 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 096D Signing time: Sun 26 Jul 2026 21:08:03 +0000 Manifest this update: Sun 26 Jul 2026 21:08:02 +0000 Manifest next update: Sun 02 Aug 2026 21:08:02 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: zeo2FY1NOSveni7wHLS6iNQ5J5qWDR9J4enQBXyCcNM=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=) 3: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: LpD49WPYOZPaHio5ZklNa5sGnt+yU3gxsH0FPSNIjpQ=) 4: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Jul 26 21:08:02 2026 GMT Not After : Aug 2 21:08:02 2026 GMT Subject: CN=6a667733-9210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:34:6c:aa:56:e7:29:45:2b:69:d3:12:8d: e8:aa:a0:d6:44:14:43:cd:22:10:26:8c:8e:b6:4c: ce:d9:70:65:46:84:7a:98:72:1e:db:7e:ea:d2:b7: 15:3a:39:41:20:eb:18:16:90:94:08:1b:9f:61:18: 2d:a5:a8:4d:b1:af:99:a4:c8:cb:b0:6d:e5:f8:f6: ae:f2:f7:f0:3b:0d:e3:bf:25:52:68:3d:cc:b6:df: 18:76:5c:b2:b4:06:30:bd:f3:2a:6f:6d:fa:52:38: b1:c6:41:56:2b:e7:dc:fa:21:36:34:fd:2f:d1:39: d2:c6:4d:b1:c1:7b:51:f7:81:3f:09:44:bd:7c:7a: b5:45:a5:37:0f:e8:50:09:d2:31:e1:34:b5:cb:bc: f5:e1:43:b8:65:ca:43:21:a9:00:46:65:78:e1:af: bf:b6:4e:eb:25:89:cd:3c:0e:b2:c3:16:01:b1:70: 88:04:1d:8a:91:bf:a4:95:d4:80:a8:b7:b4:a2:b7: f5:49:4e:cf:e0:a2:32:64:d6:7a:83:32:bc:dc:04: 24:b5:27:3f:fa:01:44:8d:e4:26:f6:3a:27:9c:38: 87:b3:0d:07:40:28:fe:18:d7:bf:49:86:14:97:26: db:35:27:cf:aa:fd:88:2a:ed:8d:91:88:10:6b:56: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:76:82:E1:72:32:5E:C3:A0:54:2A:13:B1:46:D0:0A:9C:C2:1E:C6 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:a0:5b:e8:93:48:65:a4:64:5d:22:2c:3c:b0:76:2d:5c: 13:b9:27:0d:8a:3c:f1:09:c4:2f:cc:cf:b1:a7:92:8c:02:3c: 33:27:91:8c:2b:0f:c5:85:13:62:1b:06:10:d8:8e:07:6c:f1: 9a:b0:0e:ce:25:21:95:1e:ab:86:f1:b0:3b:de:8d:67:df:69: 52:cc:5e:2c:31:3d:46:19:b5:45:0e:45:3a:cd:70:80:c3:27: c3:3d:76:c7:e0:bc:f1:b8:93:a8:87:57:58:91:84:9e:16:6a: 2e:54:6f:cf:90:d4:cf:15:0b:66:c7:3c:68:08:df:66:d2:71: 34:18:f4:ba:1f:72:a8:88:a1:ca:0d:91:30:5a:57:52:49:b7: e7:48:65:24:0f:04:0a:ba:7d:73:9c:71:43:db:d1:84:21:08: fc:06:02:35:b9:f9:1b:c2:96:cc:e7:26:56:95:32:d4:39:3f: ad:9b:ae:5b:34:6e:a7:12:3d:4e:3f:a3:e3:4a:5d:b9:20:35: 31:42:c0:34:67:a0:0a:95:b7:49:59:78:60:37:7d:c5:dd:60: 1f:76:81:ff:cb:ff:65:5c:52:df:1d:e8:c2:49:92:96:6f:b2: ee:e3:69:ed:9d:4b:06:73:d5:4f:06:7a:fc:7b:d0:ed:6f:29: 0f:33:9b:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwNzI2MjEwODAyWhcNMjYwODAyMjEwODAyWjAYMRYwFAYD VQQDEw02YTY2NzczMy05MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH40bKpW5ylFK2nTEo3oqqDWRBRDzSIQJoyOtkzO2XBlRoR6mHIe237q0rcV OjlBIOsYFpCUCBufYRgtpahNsa+ZpMjLsG3l+Pau8vfwOw3jvyVSaD3Mtt8Ydlyy tAYwvfMqb236UjixxkFWK+fc+iE2NP0v0TnSxk2xwXtR94E/CUS9fHq1RaU3D+hQ CdIx4TS1y7z14UO4ZcpDIakARmV44a+/tk7rJYnNPA6ywxYBsXCIBB2Kkb+kldSA qLe0orf1SU7P4KIyZNZ6gzK83AQktSc/+gFEjeQm9jonnDiHsw0HQCj+GNe/SYYU lybbNSfPqv2IKu2NkYgQa1bhMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJ2guFy Ml7DoFQqE7FG0Aqcwh7GMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgGgW+iTSGWkZF0iLDywdi1cE7knDYo88QnEL8zPsaeSjAI8MyeRjCsPxYUT YhsGENiOB2zxmrAOziUhlR6rhvGwO96NZ99pUsxeLDE9Rhm1RQ5FOs1wgMMnwz12 x+C88biTqIdXWJGEnhZqLlRvz5DUzxULZsc8aAjfZtJxNBj0uh9yqIihyg2RMFpX Ukm350hlJA8ECrp9c5xxQ9vRhCEI/AYCNbn5G8KWzOcmVpUy1Dk/rZuuWzRupxI9 Tj+j40pduSA1MULANGegCpW3SVl4YDd9xd1gH3aB/8v/ZVxS3x3owkmSlm+y7uNp 7Z1LBnPVTwZ6/HvQ7W8pDzObow== -----END CERTIFICATE-----Generated at Tue Jul 28 18:08:43 2026 by rpki-client