$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: ipGWgIrThsc7BYtBAslsMYifOX8oCg9dixKFnmLN6+w= Subject key identifier: E3:93:AF:FD:83:1F:F4:4B:14:FA:CA:58:DB:1F:BF:F1:BA:F1:81:D7 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05F4 Signing time: Sun 26 Jul 2026 23:48:50 +0000 Manifest this update: Sun 26 Jul 2026 23:48:50 +0000 Manifest next update: Sun 02 Aug 2026 23:48:50 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: AJAcaJ0+WV5cm+xtvJjhaFCbPba2Q9t775eU0aHDfTk=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: UlkMJAnK6fFfP1AdnmJ8vApdDQzCRL9Tu3cGNLiI+BY=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Jul 26 23:48:50 2026 GMT Not After : Aug 2 23:48:50 2026 GMT Subject: CN=6a669ce2-2e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:bf:f0:2f:e2:37:69:47:5d:49:32:75:e7: 75:2f:6d:a4:9b:39:bd:60:ec:6d:20:b9:0d:ad:f5: 2c:c4:54:65:f7:7e:85:7b:89:5c:8f:dd:f6:c8:62: 26:54:16:80:76:25:28:28:71:40:de:85:8e:c4:77: 15:80:d5:03:81:e6:b9:a4:50:49:4b:d4:ef:da:7b: 2f:6c:51:4c:a2:fc:c7:3e:3a:dc:e5:66:f5:d9:cf: 23:e3:a7:25:50:70:3c:9f:0a:39:75:4c:b5:ce:e9: de:3e:e6:49:5f:3b:f2:26:22:3f:a8:70:14:b5:14: b5:fc:cd:34:65:26:0c:c7:8d:e6:3d:53:4e:af:1e: be:63:98:52:09:94:20:58:d6:8b:4a:db:f1:6c:b3: 15:e6:4f:c4:b0:dc:54:8c:3a:a8:13:d0:80:96:56: 8c:83:35:5f:d2:c4:31:b8:3b:83:55:17:8e:92:2b: 9e:60:7b:ab:e1:86:fc:9b:3f:67:e8:2d:4c:c4:42: 62:da:f9:fc:67:a9:91:26:81:d8:1d:66:c9:5b:70: 52:f8:9f:c5:b2:d2:6a:46:c8:d5:e4:65:51:d8:b3: 4a:11:8b:86:03:d6:6f:3c:81:8c:52:b0:2a:ef:5f: aa:0d:f2:6a:c1:c0:c8:96:dd:5f:eb:4c:06:20:15: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:93:AF:FD:83:1F:F4:4B:14:FA:CA:58:DB:1F:BF:F1:BA:F1:81:D7 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:80:5a:3b:25:c2:16:80:cd:63:de:d2:b1:e2:72:c0:fe: fd:d8:92:07:9b:af:89:81:2f:73:f7:ad:32:26:70:9d:71:0f: f4:d6:7a:af:e7:e1:73:f3:7b:6a:64:d4:c6:92:c8:a4:8b:00: cf:18:0b:21:5b:7e:67:2b:b9:b7:5d:a6:58:47:1d:41:96:9c: 40:9d:be:10:20:c5:bf:ac:6f:94:29:76:c7:8c:a4:3d:06:83: b9:7d:c4:1e:c1:0e:f9:f9:5e:1b:5a:84:bc:a2:ca:37:b1:28: a8:27:20:1e:ac:e7:9c:8a:dd:38:f8:06:9b:3b:ef:56:21:c1: 83:45:36:90:12:57:af:9c:71:35:29:8a:b0:36:a5:65:b2:90: d4:83:4a:16:0d:52:32:c7:2c:4d:8e:c7:b4:c1:18:51:df:54: 90:a7:15:ca:5a:bf:34:1f:cd:96:27:11:2c:88:72:8b:8e:02: c8:97:d5:a0:6d:46:ce:e3:2e:95:1d:c0:50:5c:ab:2b:dd:e4: 08:48:e7:5e:59:89:31:88:34:e7:a6:b8:76:a3:ba:ef:2a:32: b9:e1:06:f8:17:4d:6d:ff:8c:71:34:48:2c:a6:06:42:84:47: 1e:94:6f:4d:86:6c:13:07:01:9d:28:3a:ef:23:87:04:ae:21: 70:79:72:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwNzI2MjM0ODUwWhcNMjYwODAyMjM0ODUwWjAYMRYwFAYD VQQDEw02YTY2OWNlMi0yZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MW/8C/iN2lHXUkyded1L22kmzm9YOxtILkNrfUsxFRl936Fe4lcj932yGIm VBaAdiUoKHFA3oWOxHcVgNUDgea5pFBJS9Tv2nsvbFFMovzHPjrc5Wb12c8j46cl UHA8nwo5dUy1zunePuZJXzvyJiI/qHAUtRS1/M00ZSYMx43mPVNOrx6+Y5hSCZQg WNaLStvxbLMV5k/EsNxUjDqoE9CAllaMgzVf0sQxuDuDVReOkiueYHur4Yb8mz9n 6C1MxEJi2vn8Z6mRJoHYHWbJW3BS+J/FstJqRsjV5GVR2LNKEYuGA9ZvPIGMUrAq 71+qDfJqwcDIlt1f60wGIBUe5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOTr/2D H/RLFPrKWNsfv/G68YHXMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFWAWjslwhaAzWPe0rHicsD+/diSB5uviYEvc/etMiZwnXEP9NZ6r+fhc/N7 amTUxpLIpIsAzxgLIVt+Zyu5t12mWEcdQZacQJ2+ECDFv6xvlCl2x4ykPQaDuX3E HsEO+fleG1qEvKLKN7EoqCcgHqznnIrdOPgGmzvvViHBg0U2kBJXr5xxNSmKsDal ZbKQ1INKFg1SMscsTY7HtMEYUd9UkKcVylq/NB/NlicRLIhyi44CyJfVoG1GzuMu lR3AUFyrK93kCEjnXlmJMYg056a4dqO67yoyueEG+BdNbf+McTRILKYGQoRHHpRv TYZsEwcBnSg67yOHBK4hcHlyZQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:32 2026 by rpki-client