$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft File: nMJa0Q0U5nMm84672jnBK4x95YM.mft (raw, json) Hash identifier: RmMWrNVfz/rJlCwuKnPyHh4zbleJHUzHxp608+X02wo= Subject key identifier: E5:42:5A:03:8E:98:AA:EA:3C:8C:39:D3:C4:AE:D7:5A:B1:4E:91:0C Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft Manifest number: 16 Signing time: Mon 27 Jul 2026 11:23:58 +0000 Manifest this update: Mon 27 Jul 2026 11:23:57 +0000 Manifest next update: Mon 03 Aug 2026 11:23:57 +0000 Files and hashes: 1: nMJa0Q0U5nMm84672jnBK4x95YM.crl (hash: vVanPjaP0lNi4DXgUavj6ne3LZu8fNZUG2PxyQuTIMA=) 2: 375CD0C4687B11F18B8955F26647A888.roa (hash: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Validity Not Before: Jul 27 11:23:57 2026 GMT Not After : Aug 3 11:23:57 2026 GMT Subject: CN=6a673fce-2f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:9e:4c:8b:c2:d7:f3:ae:43:24:ab:52:64: 21:92:bc:61:73:44:33:e4:4a:9a:7c:22:2a:0b:72: c3:ce:b5:81:5e:bd:e1:44:37:7a:52:27:53:1d:9a: 4c:7d:da:76:ca:59:c8:db:58:6d:f7:52:52:de:7d: ba:29:da:06:54:7e:de:df:8d:72:7c:9e:27:e0:39: 3d:c9:f2:60:b3:6a:f2:ae:5e:45:d8:31:94:fc:23: 99:73:d7:d0:75:ba:9d:e5:f5:db:4c:25:0e:c1:3b: c7:b0:cf:f6:51:1d:e9:ee:01:c9:74:ac:e7:b5:93: 9e:c0:55:c1:9a:66:08:b3:48:8e:71:a9:e5:1a:92: 21:d7:1b:28:ca:56:41:3d:bb:b7:4e:4c:48:f0:5d: 2c:a6:26:3c:5c:10:59:cc:86:65:57:b5:e8:ca:66: 5a:81:c5:cd:f3:0a:29:7a:8c:09:2c:37:c4:ec:88: 9e:98:60:6e:25:ee:f4:07:c8:07:0d:aa:6d:a2:2e: 85:15:46:ca:e2:a0:1b:10:f8:52:2f:2c:cc:99:7e: e8:97:60:6a:3c:77:db:b0:a6:3a:0e:74:08:a9:d0: 91:be:77:c2:57:bf:2b:07:75:62:19:0e:34:c3:a5: e6:e0:84:1d:c6:45:be:12:f6:dc:0e:d0:62:fb:6b: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:5A:03:8E:98:AA:EA:3C:8C:39:D3:C4:AE:D7:5A:B1:4E:91:0C X509v3 Authority Key Identifier: keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6c:12:e8:fa:5a:2c:f7:28:69:ab:fd:dc:b8:4b:d1:3b:29: b3:90:04:77:cc:9c:f4:96:0b:57:ce:7c:42:d5:1a:fa:dd:64: af:bc:79:14:43:1e:9b:8f:dc:57:68:1c:2b:b0:cd:46:85:6e: a3:a8:bc:09:9e:be:83:1b:19:35:ff:bf:6d:d5:58:43:97:3b: d3:c7:2a:4e:15:2d:3f:fc:d4:4b:69:36:19:fa:22:fc:1e:b1: e0:a7:8e:69:b4:4c:e1:06:f6:8d:66:16:2d:90:6c:25:c9:41: aa:5e:2c:77:8b:b4:26:63:49:0b:1b:db:ac:09:44:48:90:0b: 45:50:b7:22:83:7e:b6:05:5c:8a:82:91:d2:71:69:c1:8b:47: 0e:0e:0a:70:92:93:36:57:03:33:23:3b:d7:b7:d0:44:4f:cd: d2:11:39:28:c2:e9:cd:70:e6:e7:a6:08:0b:3b:76:f3:5d:2c: 1a:f2:69:66:67:bb:0f:f5:44:64:a1:6e:c3:24:af:d7:cc:42: 51:70:d5:b2:25:77:7d:c9:4d:12:52:75:13:60:42:d9:c1:41: 65:0d:58:b0:73:ff:c8:22:6d:83:14:a5:fc:d7:59:c5:ca:89: 09:fd:37:42:2d:de:4e:b5:0f:3c:4f:38:a6:af:fa:62:19:44: 9d:9b:03:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTFGOTExMC8GA1UEBRMoOUNDMjVBRDEwRDE0RTY3MzI2RjM4RUJCREEzOUMxMkI4 QzdERTU4MzAeFw0yNjA3MjcxMTIzNTdaFw0yNjA4MDMxMTIzNTdaMBgxFjAUBgNV BAMTDTZhNjczZmNlLTJmMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1pZ5Mi8LX865DJKtSZCGSvGFzRDPkSpp8IioLcsPOtYFeveFEN3pSJ1Mdmkx9 2nbKWcjbWG33UlLefbop2gZUft7fjXJ8nifgOT3J8mCzavKuXkXYMZT8I5lz19B1 up3l9dtMJQ7BO8ewz/ZRHenuAcl0rOe1k57AVcGaZgizSI5xqeUakiHXGyjKVkE9 u7dOTEjwXSymJjxcEFnMhmVXtejKZlqBxc3zCil6jAksN8TsiJ6YYG4l7vQHyAcN qm2iLoUVRsrioBsQ+FIvLMyZfuiXYGo8d9uwpjoOdAip0JG+d8JXvysHdWIZDjTD pebghB3GRb4S9twO0GL7a/8lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5UJaA46Y quo8jDnTxK7XWrFOkQwwHwYDVR0jBBgwFoAUnMJa0Q0U5nMm84672jnBK4x95YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBMUY5L0M4MDRDRUEyNjg3 QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5NbTg0Njcyam5CSzR4OTVZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk1KYTBRMFU1bk1tODQ2NzJqbkJLNHg5NVlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB MUY5L0M4MDRDRUEyNjg3QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5N bTg0Njcyam5CSzR4OTVZTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBbBLo+los9yhpq/3cuEvROymzkAR3zJz0lgtXznxC1Rr63WSvvHkUQx6bj9xX aBwrsM1GhW6jqLwJnr6DGxk1/79t1VhDlzvTxypOFS0//NRLaTYZ+iL8HrHgp45p tEzhBvaNZhYtkGwlyUGqXix3i7QmY0kLG9usCURIkAtFULcig362BVyKgpHScWnB i0cODgpwkpM2VwMzIzvXt9BET83SETkowunNcObnpggLO3bzXSwa8mlmZ7sP9URk oW7DJK/XzEJRcNWyJXd9yU0SUnUTYELZwUFlDViwc//IIm2DFKX811nFyokJ/TdC Ld5OtQ88Tzimr/piGUSdmwOi -----END CERTIFICATE-----Generated at Tue Jul 28 16:46:33 2026 by rpki-client