$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: E6udQjAYARWnntEeqCUlExQHXz+5a/UrGDdJ//G5L4M= Subject key identifier: 81:AE:1B:B2:20:AA:73:C9:D7:E8:5D:02:51:00:BA:11:B4:0C:12:C7 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 0F Signing time: Mon 27 Jul 2026 11:29:16 +0000 Manifest this update: Mon 27 Jul 2026 11:29:16 +0000 Manifest next update: Mon 03 Aug 2026 11:29:16 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: S2aX0dmVzfgFigPE5F/e9FCzoHkloc7c4ePB1klf9Qs=) 2: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) 3: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) 4: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Jul 27 11:29:16 2026 GMT Not After : Aug 3 11:29:16 2026 GMT Subject: CN=6a67410c-77da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:2a:36:dc:d3:62:5f:55:d8:6e:c2:da:8f: 17:fa:fb:4b:71:36:e0:9f:04:75:5c:e8:dc:31:a1: 5c:23:d7:bf:c8:17:af:f1:23:5d:a3:6f:36:dc:26: be:15:c2:72:17:14:70:26:0d:52:cd:9e:2c:00:60: bf:35:2b:64:a6:b5:69:f9:a9:a4:11:d1:ea:8c:97: 85:5b:1a:bd:2b:a7:ec:c3:ad:cb:4f:63:87:ec:f7: 49:9f:10:e7:b2:4e:ee:1e:17:0d:4d:d1:a9:8a:f7: c9:6f:8a:ea:6d:aa:87:e1:4c:4b:ab:d6:68:2d:94: 9f:ff:35:43:d9:3b:2a:83:bd:9c:ce:72:ec:b0:8d: bd:f1:f0:69:67:48:7e:e8:19:ff:41:2d:8f:ca:96: 32:07:fd:e5:50:31:6f:40:f4:61:61:b6:48:96:99: 6b:de:39:e5:dd:0c:02:b8:f7:0e:0d:44:0b:1e:72: 5e:dc:f7:f2:a8:ef:a8:b9:4b:a0:d3:c0:f7:f6:a0: 73:91:8c:39:95:df:44:39:8c:f7:83:f8:d4:08:76: 60:48:80:03:53:7f:3e:42:78:86:f0:c1:38:8e:f1: cd:94:e1:54:90:a6:4a:2e:ef:81:44:21:de:2b:2b: c4:39:93:b2:db:5a:bb:f2:62:58:eb:b0:d3:79:43: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:1B:B2:20:AA:73:C9:D7:E8:5D:02:51:00:BA:11:B4:0C:12:C7 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:67:12:1a:d3:b4:73:b0:60:00:65:01:3b:8f:53:9c:d4: a4:c9:c3:d0:23:76:a8:ab:9c:16:6d:51:2a:6c:62:5d:a9:95: e2:e7:a3:6c:fd:37:0e:1e:0b:ae:6d:41:a4:3f:77:3a:fb:00: 39:73:de:e1:65:e4:0c:33:4b:19:1d:67:95:c9:8c:75:13:ed: 38:13:99:e1:60:17:7c:de:93:e1:91:cf:94:e5:d6:b7:cc:9d: 2a:a6:e5:32:9e:8d:e2:79:37:e7:98:28:e7:72:09:14:60:4a: 43:bd:21:90:e7:80:d5:db:c3:96:6f:5a:ee:3d:73:64:e3:93: 5b:61:bc:88:50:f9:75:91:93:ef:df:aa:44:b3:5e:41:93:ff: 0e:10:4e:e4:d0:6a:ee:1d:a4:46:e3:11:26:f0:a4:33:90:39: 11:91:13:7b:14:fe:68:8a:40:ac:8e:d2:55:c9:7e:00:72:fd: e4:54:02:77:51:7b:87:d1:17:30:e9:37:84:62:ab:d9:98:77: 91:2d:46:e8:b0:eb:c4:d0:4e:80:8b:f1:22:df:e5:52:48:f1: d2:e0:2e:8b:4c:31:b6:8c:78:2f:11:1a:8d:8b:3c:48:3d:f7: dc:2e:08:11:08:86:54:4c:08:0d:18:65:d2:7d:b1:21:3c:ff: af:a4:c8:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA3MjcxMTI5MTZaFw0yNjA4MDMxMTI5MTZaMBgxFjAUBgNV BAMTDTZhNjc0MTBjLTc3ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ISo23NNiX1XYbsLajxf6+0txNuCfBHVc6NwxoVwj17/IF6/xI12jbzbcJr4V wnIXFHAmDVLNniwAYL81K2SmtWn5qaQR0eqMl4VbGr0rp+zDrctPY4fs90mfEOey Tu4eFw1N0amK98lviuptqofhTEur1mgtlJ//NUPZOyqDvZzOcuywjb3x8GlnSH7o Gf9BLY/KljIH/eVQMW9A9GFhtkiWmWveOeXdDAK49w4NRAsecl7c9/Ko76i5S6DT wPf2oHORjDmV30Q5jPeD+NQIdmBIgANTfz5CeIbwwTiO8c2U4VSQpkou74FEId4r K8Q5k7LbWrvyYljrsNN5Q15tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUga4bsiCq c8nX6F0CUQC6EbQMEscwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnsmcSGtO0c7BgAGUBO49TnNSkycPQI3aoq5wWbVEqbGJdqZXi56Ns/TcOHguu bUGkP3c6+wA5c97hZeQMM0sZHWeVyYx1E+04E5nhYBd83pPhkc+U5da3zJ0qpuUy no3ieTfnmCjncgkUYEpDvSGQ54DV28OWb1ruPXNk45NbYbyIUPl1kZPv36pEs15B k/8OEE7k0GruHaRG4xEm8KQzkDkRkRN7FP5oikCsjtJVyX4Acv3kVAJ3UXuH0Rcw 6TeEYqvZmHeRLUbosOvE0E6Ai/Ei3+VSSPHS4C6LTDG2jHgvERqNizxIPffcLggR CIZUTAgNGGXSfbEhPP+vpMg5 -----END CERTIFICATE-----Generated at Tue Jul 28 18:03:12 2026 by rpki-client