$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: 9gmmG17Yo7TzkO5x7LST49y5U9y3ukK7+AgvE6Fbvkw= Subject key identifier: 88:CB:18:51:C8:3B:E7:FA:37:E6:87:7A:E3:C4:03:6F:40:3B:7A:9D Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: DA Signing time: Mon 27 Jul 2026 08:46:22 +0000 Manifest this update: Mon 27 Jul 2026 08:46:21 +0000 Manifest next update: Mon 03 Aug 2026 08:46:21 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: KKnDhhPkFQc9rP4cefJTWuBvMhbcD8MK3sQGQ0jtBuM=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: 1WHv+TkV2LE9j58jQN6HoRvbl9s/+GT559gmESgjHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Jul 27 08:46:21 2026 GMT Not After : Aug 3 08:46:21 2026 GMT Subject: CN=6a671ade-4493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:03:7e:37:7f:a5:4a:9d:57:f0:12:21:cb: fc:b6:ce:28:8c:43:27:b5:98:c7:71:67:8e:7f:b3: 86:f9:14:6e:82:fd:45:05:a4:72:26:d4:f8:45:1f: d0:39:43:fe:d4:f3:12:32:81:ca:6f:2b:8d:09:aa: aa:4f:e0:82:6c:90:d6:eb:ca:57:e9:b3:d2:cf:24: 90:68:4a:f9:ab:81:22:19:0d:6a:79:15:8f:3a:b9: 19:0f:31:7f:de:75:e6:4f:e8:af:1a:3b:0c:60:03: b4:cc:0f:63:81:65:f1:ef:c6:ae:3b:42:18:4a:cd: d3:d2:84:7b:b6:eb:2f:60:a6:0a:ef:84:ed:b3:8f: f8:dd:e9:ba:61:55:d7:4b:39:22:aa:30:4a:95:56: 75:9c:d0:71:10:76:f8:29:dc:b1:69:71:de:ed:b9: 19:5c:96:30:95:45:77:d4:15:8a:3f:da:06:48:46: 2b:9a:1e:0a:9f:43:98:f8:12:d1:92:59:1d:a2:68: 99:88:fe:13:62:07:14:22:0a:bf:53:5a:23:61:86: a3:0c:c1:ef:05:27:fa:10:3f:73:78:2e:98:f2:12: b1:a6:76:bd:c0:92:bb:56:bf:ad:ad:15:ea:c2:95: 95:3b:45:2f:60:81:03:3d:b0:2a:72:bc:a3:50:5b: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:18:51:C8:3B:E7:FA:37:E6:87:7A:E3:C4:03:6F:40:3B:7A:9D X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:cb:2e:e0:e7:c0:39:82:3b:3c:cc:7a:94:3e:7d:7b:26:95: 80:b2:eb:c1:07:c5:ad:e7:0b:c2:8e:13:92:74:fb:58:31:3c: de:8d:86:fb:20:99:97:68:57:03:f9:76:16:ba:21:e2:e6:52: 0a:e0:a2:60:c9:82:35:4d:cb:92:5b:ac:7c:74:4a:b6:05:65: b9:87:7e:29:b6:64:8a:12:43:83:d9:3b:92:75:c7:d0:40:a6: 05:82:ef:f8:3b:cc:91:fd:a9:3b:31:4d:74:c5:d2:ac:93:db: 5a:a9:d9:67:fb:4d:41:d1:82:42:f2:12:76:7a:bc:12:95:2d: a0:bf:e7:fa:7e:c0:11:83:3c:d0:33:d8:43:1a:63:db:37:dd: 84:bd:37:d4:ba:4d:f9:8c:0b:b3:1c:da:52:ff:71:b6:e5:01: 8a:99:22:03:e9:74:43:b3:90:78:26:f4:db:64:c3:cd:33:11: 0c:54:09:bc:f5:7a:6e:3f:50:84:44:f9:3f:66:bb:cf:e3:36: 46:46:05:a0:dc:2f:b9:b7:5c:3d:cc:33:23:bc:04:f5:41:9e: d1:1f:62:5f:d8:eb:ac:c4:9b:e2:d0:82:c9:f7:3b:c8:35:a2: da:d3:e4:05:e2:b0:24:2c:a5:5a:ea:2b:81:ef:c0:46:b8:7e: 36:99:91:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCMzYxMTAvBgNVBAUTKDM0RjBGOENEODdCODhDNEY1MjBFNDZGQjk1RDJEQjg0 RkEwNDMzNjIwHhcNMjYwNzI3MDg0NjIxWhcNMjYwODAzMDg0NjIxWjAYMRYwFAYD VQQDEw02YTY3MWFkZS00NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub0Dfjd/pUqdV/ASIcv8ts4ojEMntZjHcWeOf7OG+RRugv1FBaRyJtT4RR/Q OUP+1PMSMoHKbyuNCaqqT+CCbJDW68pX6bPSzySQaEr5q4EiGQ1qeRWPOrkZDzF/ 3nXmT+ivGjsMYAO0zA9jgWXx78auO0IYSs3T0oR7tusvYKYK74Tts4/43em6YVXX SzkiqjBKlVZ1nNBxEHb4KdyxaXHe7bkZXJYwlUV31BWKP9oGSEYrmh4Kn0OY+BLR klkdomiZiP4TYgcUIgq/U1ojYYajDMHvBSf6ED9zeC6Y8hKxpna9wJK7Vr+trRXq wpWVO0UvYIEDPbAqcryjUFvMLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjLGFHI O+f6N+aHeuPEA29AO3qdMB8GA1UdIwQYMBaAFDTw+M2HuIxPUg5G+5XS24T6BDNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0IzNi83MkU2RkEyNjQw OEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpFOVNEa2I3bGRMYmhQb0VN MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0IzNi83MkU2RkEyNjQwOEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpF OVNEa2I3bGRMYmhQb0VNMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcsu4OfAOYI7PMx6lD59eyaVgLLrwQfFrecLwo4TknT7WDE83o2G+yCZl2hX A/l2Froh4uZSCuCiYMmCNU3LklusfHRKtgVluYd+KbZkihJDg9k7knXH0ECmBYLv +DvMkf2pOzFNdMXSrJPbWqnZZ/tNQdGCQvISdnq8EpUtoL/n+n7AEYM80DPYQxpj 2zfdhL031LpN+YwLsxzaUv9xtuUBipkiA+l0Q7OQeCb022TDzTMRDFQJvPV6bj9Q hET5P2a7z+M2RkYFoNwvubdcPcwzI7wE9UGe0R9iX9jrrMSb4tCCyfc7yDWi2tPk BeKwJCylWuorge/ARrh+NpmRWg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:19 2026 by rpki-client