$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: f4b9pw2B2dM4bQc5CJC2+IQDMB4f7Nbz37eJO/dkdLQ= Subject key identifier: F7:34:CD:A6:DA:21:D5:5D:33:0D:A5:BB:C5:26:2B:AC:3F:5E:10:80 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 0286 Signing time: Mon 27 Jul 2026 03:11:31 +0000 Manifest this update: Mon 27 Jul 2026 03:11:30 +0000 Manifest next update: Mon 03 Aug 2026 03:11:30 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: hVpcWua53G2NsIhbuSWp+mWJv58ud740H1ZB9RVMtyw=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Jul 27 03:11:30 2026 GMT Not After : Aug 3 03:11:30 2026 GMT Subject: CN=6a66cc62-d6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:58:ac:7a:d6:3e:ca:b9:1a:4f:6f:78:37: a2:9a:54:92:3e:ac:e7:b1:e8:0b:a0:42:7d:68:c9: 2e:a7:f2:be:eb:d9:b2:9c:61:5e:56:b5:2f:61:76: a9:98:c3:46:ee:12:19:71:9d:7b:88:62:42:8b:4a: 30:9c:cf:9a:76:d1:d9:a8:de:4b:43:01:74:73:83: 65:1d:91:79:32:de:f0:c8:68:37:27:ea:77:7d:28: 6e:d6:9b:b3:67:b1:70:65:36:de:9c:18:24:11:73: 1e:de:90:3d:fd:ea:9f:eb:3a:29:85:f2:0d:b3:27: 14:78:21:52:bb:47:72:c2:ca:b9:e1:5a:51:1e:f9: a9:36:75:b9:ca:8e:db:c5:7b:09:95:bf:20:60:19: b2:dd:38:69:78:ee:b9:e2:55:9f:a1:8d:ba:10:de: 38:fd:dc:62:25:9d:2f:1d:ac:4d:43:13:f1:8c:ed: e8:20:df:30:4a:32:4b:77:5f:c4:0b:c2:ba:c5:95: 56:36:d8:60:4b:db:92:96:7c:e1:33:71:47:fb:e8: b3:26:7d:48:c0:5d:44:3d:76:22:45:dd:a2:dd:86: c9:b2:cf:b8:97:37:46:4c:73:85:a4:66:78:9a:93: d5:9f:d1:1b:73:b7:3b:41:a1:a2:93:6a:5d:4b:9e: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:CD:A6:DA:21:D5:5D:33:0D:A5:BB:C5:26:2B:AC:3F:5E:10:80 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c4:57:99:07:67:ef:d4:9f:47:09:dc:3c:68:f6:28:61:dd: 3a:c8:60:16:d2:ab:24:17:15:2e:da:01:f2:3d:c9:b4:d5:a2: e8:04:00:e6:4b:ed:b6:2c:02:fc:37:54:8e:43:ab:0a:dd:fb: 4d:2f:ff:0f:b2:50:75:2f:34:1c:19:48:c9:28:ac:4c:5c:35: 26:2e:84:22:57:e6:3e:2d:de:02:fd:3a:50:c0:a2:88:ef:45: 47:59:23:ad:3c:b7:33:c4:e9:5b:4b:b2:8a:29:c4:25:c8:ef: 5f:8c:13:44:7a:d1:f8:df:7c:a4:af:db:7d:e0:dc:ed:60:e9: 9b:45:e5:04:a8:14:f8:de:9b:47:e6:c4:28:7c:dc:c6:f0:99: a1:c3:56:7b:bd:26:2c:b8:35:99:8d:a2:af:78:ed:e6:50:c8: ac:a6:56:96:77:49:84:02:63:c3:8f:1a:21:32:06:9d:d9:62: 99:02:a3:f2:a3:b4:a8:80:31:d6:d6:5b:af:df:32:4d:6e:65: 47:99:b4:0e:ca:e7:4d:08:5b:34:dd:ff:72:65:90:8e:53:58: 74:c5:36:63:6d:07:b5:b9:64:13:37:10:93:2e:b6:02:1c:b4: 32:44:b9:3d:83:97:4e:f5:33:17:2c:45:8c:17:46:9e:75:2e: 9b:5f:34:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjYwNzI3MDMxMTMwWhcNMjYwODAzMDMxMTMwWjAYMRYwFAYD VQQDEw02YTY2Y2M2Mi1kNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxtYrHrWPsq5Gk9veDeimlSSPqznsegLoEJ9aMkup/K+69mynGFeVrUvYXap mMNG7hIZcZ17iGJCi0ownM+adtHZqN5LQwF0c4NlHZF5Mt7wyGg3J+p3fShu1puz Z7FwZTbenBgkEXMe3pA9/eqf6zophfINsycUeCFSu0dywsq54VpRHvmpNnW5yo7b xXsJlb8gYBmy3ThpeO654lWfoY26EN44/dxiJZ0vHaxNQxPxjO3oIN8wSjJLd1/E C8K6xZVWNthgS9uSlnzhM3FH++izJn1IwF1EPXYiRd2i3YbJss+4lzdGTHOFpGZ4 mpPVn9Ebc7c7QaGik2pdS56F4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPc0zaba IdVdMw2lu8UmK6w/XhCAMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaMRXmQdn79SfRwncPGj2KGHdOshgFtKrJBcVLtoB8j3JtNWi6AQA5kvttiwC /DdUjkOrCt37TS//D7JQdS80HBlIySisTFw1Ji6EIlfmPi3eAv06UMCiiO9FR1kj rTy3M8TpW0uyiinEJcjvX4wTRHrR+N98pK/bfeDc7WDpm0XlBKgU+N6bR+bEKHzc xvCZocNWe70mLLg1mY2ir3jt5lDIrKZWlndJhAJjw48aITIGndlimQKj8qO0qIAx 1tZbr98yTW5lR5m0DsrnTQhbNN3/cmWQjlNYdMU2Y20HtblkEzcQky62Ahy0MkS5 PYOXTvUzFyxFjBdGnnUum1802g== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:44 2026 by rpki-client