$ rpki-client -vvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: fyYmnlOrd4q0Pa0yaeAgC0bYeXPJ4TRQMajzEX8JQCo= Subject key identifier: 79:2F:C6:6C:0F:F8:EA:08:C3:FB:1A:97:6B:7E:E3:3D:11:38:F8:80 Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 20 Signing time: Thu 11 Jun 2026 11:14:11 +0000 Manifest this update: Thu 11 Jun 2026 11:14:10 +0000 Manifest next update: Thu 18 Jun 2026 11:14:10 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: 2Ec1ahFd6BB/XflYr00IySgPhXBvVxb8k19bu2AZ498=) 2: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) 3: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: Jun 11 11:14:10 2026 GMT Not After : Jun 18 11:14:10 2026 GMT Subject: CN=6a2a9882-4c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:5d:4f:dc:70:4b:5c:a0:98:74:e4:01:da: 15:91:7f:7d:4d:b2:cf:0a:6b:d0:5b:87:e8:f7:e4: ed:9c:b6:54:f7:6a:2c:9a:1f:db:9a:f8:3c:df:7b: 84:a9:f7:05:6b:50:3b:6b:51:79:ba:5b:f5:b1:95: 56:ec:fa:8e:36:97:be:e1:04:7b:3e:3a:42:b8:e6: 22:13:62:16:e5:8b:1e:22:ce:1c:fc:d9:fb:1f:9b: 28:91:55:dc:df:68:05:b8:00:01:63:b4:09:73:5c: e8:2f:ea:03:55:23:90:a3:db:7a:2e:18:90:2d:bc: a5:85:a2:f3:ab:bd:79:e2:ad:29:35:0a:5d:93:f0: bd:c8:e4:89:86:76:b5:2e:1f:01:3c:01:48:7c:12: 41:6d:ac:34:95:f4:e3:31:41:99:9e:9e:36:54:04: 17:51:99:71:9c:f4:e7:64:30:f1:da:4a:6d:05:16: f9:ba:31:21:50:fd:ec:34:bc:86:a3:45:09:04:50: 12:82:b2:74:48:8e:0e:23:c4:8c:13:21:ef:ad:50: fc:ab:bb:81:7d:45:b1:62:8d:fa:b6:b0:2d:c9:28: f8:c9:71:41:10:9b:c8:7c:d5:46:96:7c:9b:fc:6c: 85:2b:47:13:ed:4f:54:8d:65:25:23:1c:45:2c:24: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:C6:6C:0F:F8:EA:08:C3:FB:1A:97:6B:7E:E3:3D:11:38:F8:80 X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:a1:a7:f8:c4:5a:3e:92:18:d7:6c:1e:72:31:48:b1:d2: 95:dc:d3:d5:b7:a6:41:d2:c1:75:30:ad:0b:e6:91:d5:38:18: 02:ac:ab:73:9c:10:da:3d:cb:d6:46:cc:fd:ae:8d:9b:4e:6b: 24:9b:b7:cc:6b:08:fe:54:40:88:ff:f0:0b:db:56:19:05:3f: de:b7:b9:95:11:92:9b:64:63:67:e7:99:53:ed:66:c8:4d:1c: 28:90:34:6c:65:d7:b3:6e:b4:a0:4c:06:4c:45:55:1d:d9:a3: 04:09:fc:ca:70:9c:90:32:5e:7c:84:d8:8d:cf:1e:a5:96:3b: 6e:e7:b0:eb:4d:c7:aa:f2:7b:48:b4:89:2b:3f:88:70:ef:00: bf:8a:d5:2e:04:50:01:64:51:bd:99:a2:4a:f2:f5:71:13:e7: 62:49:f2:95:e2:89:eb:3d:31:d1:e8:0b:4b:1e:34:f4:6e:7b: c7:d7:f5:2e:73:d1:7e:d7:54:9b:3c:62:15:15:ad:46:e9:0b: 31:67:4d:82:ca:4c:af:5d:e6:a6:4c:34:c2:85:18:cf:8d:e5: b7:92:6b:0a:0d:8d:81:ed:13:5e:28:9f:85:ba:b9:ce:2a:82: aa:38:5f:d1:de:5d:7d:b5:ae:82:a2:55:00:35:53:5e:1b:fd: 0a:1d:a0:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjA2MTExMTE0MTBaFw0yNjA2MTgxMTE0MTBaMBgxFjAUBgNV BAMTDTZhMmE5ODgyLTRjMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYil1P3HBLXKCYdOQB2hWRf31Nss8Ka9Bbh+j35O2ctlT3aiyaH9ua+Dzfe4Sp 9wVrUDtrUXm6W/WxlVbs+o42l77hBHs+OkK45iITYhblix4izhz82fsfmyiRVdzf aAW4AAFjtAlzXOgv6gNVI5Cj23ouGJAtvKWFovOrvXnirSk1Cl2T8L3I5ImGdrUu HwE8AUh8EkFtrDSV9OMxQZmenjZUBBdRmXGc9OdkMPHaSm0FFvm6MSFQ/ew0vIaj RQkEUBKCsnRIjg4jxIwTIe+tUPyru4F9RbFijfq2sC3JKPjJcUEQm8h81UaWfJv8 bIUrRxPtT1SNZSUjHEUsJPJ3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeS/GbA/4 6gjD+xqXa37jPRE4+IAwHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBm3KGn+MRaPpIY12wecjFIsdKV3NPVt6ZB0sF1MK0L5pHVOBgCrKtznBDaPcvW Rsz9ro2bTmskm7fMawj+VECI//AL21YZBT/et7mVEZKbZGNn55lT7WbITRwokDRs ZdezbrSgTAZMRVUd2aMECfzKcJyQMl58hNiNzx6lljtu57DrTceq8ntItIkrP4hw 7wC/itUuBFABZFG9maJK8vVxE+diSfKV4onrPTHR6AtLHjT0bnvH1/Uuc9F+11Sb PGIVFa1G6QsxZ02CykyvXeamTDTChRjPjeW3kmsKDY2B7RNeKJ+FurnOKoKqOF/R 3l19ta6ColUANVNeG/0KHaDM -----END CERTIFICATE-----Generated at Sat Jun 13 09:02:47 2026 by rpki-client