$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: FUHmKv4XM51c1g3Fzpy1/A1WBZDtLBoTglX+sViEbao= Subject key identifier: AE:19:27:9A:AA:87:D9:5A:CE:46:0D:CA:D0:4B:AE:FA:EF:35:E9:6A Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0C41 Signing time: Tue 28 Jul 2026 18:56:32 +0000 Manifest this update: Tue 28 Jul 2026 18:56:31 +0000 Manifest next update: Tue 04 Aug 2026 18:56:31 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: 4ztvVkffDormhsoCbKYu0mp5uJHQegD7487tA9HJh8c=) 2: E5675F48336E11EA94623E18C4F9AE02.roa (hash: rQw9zG+Y16msUrYZiSuHrHjmx364wl+z/+PI4vW3/Yo=) 3: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: J7bgw3OjD+bEqGEXKo8Fs8Z0MR84T96zJE637Xnk50M=) 4: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: J0oU2FppnlReFBA754sQNYwJm5OEtnlNnJ9xN5pwhNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jul 28 18:56:31 2026 GMT Not After : Aug 4 18:56:31 2026 GMT Subject: CN=6a68fb60-7f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:1b:04:e2:cb:2a:56:fb:ea:20:ca:8f:f7: af:70:00:73:93:d3:ce:67:1c:78:39:0e:66:58:29: 41:0d:6d:a4:56:a8:5d:1a:04:6c:29:ab:3d:f6:23: 86:26:3d:d0:74:97:7c:c8:e0:0a:cf:7d:92:bf:0e: 64:d3:9c:da:2a:5f:71:9a:1c:12:b8:e3:5b:2f:a8: 70:23:46:ee:5c:30:53:4a:e6:8d:be:b0:37:40:17: 84:5b:9e:d9:d2:31:29:b1:7b:e6:3f:da:bd:e1:4f: 5a:1a:9e:10:5c:f3:e2:80:45:5d:00:ea:8d:b1:09: 5f:49:e2:5f:6b:ac:b3:97:43:17:6b:a8:fa:ca:f5: 58:31:a6:55:21:26:02:a3:ad:4c:37:39:c9:32:50: 30:2c:37:5d:3f:76:3e:36:5b:20:c0:f9:ce:ea:a9: 27:14:54:e8:8c:82:80:a7:49:38:f2:29:10:2e:3a: e9:39:53:eb:ef:a8:78:de:0e:82:36:27:67:9b:18: 32:1f:6a:bd:76:95:2a:78:b9:89:9d:cb:41:22:48: 0c:7c:ad:0c:1f:2a:4e:73:92:be:93:dd:24:f3:50: 44:2c:61:36:bf:e8:80:6e:e4:16:66:bd:3b:0b:d0: 52:8f:cb:cf:95:ad:83:55:40:ef:70:0a:c3:c6:72: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:19:27:9A:AA:87:D9:5A:CE:46:0D:CA:D0:4B:AE:FA:EF:35:E9:6A X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:91:2e:0e:c5:d7:54:76:3f:d6:77:ad:69:41:9d:82:50:d6: e3:a3:9e:5f:fb:b7:2b:e1:79:ba:1e:4d:b1:e0:f0:8b:cb:b9: ee:89:54:3c:e1:f6:eb:89:39:c4:3e:6d:12:bb:88:3e:fb:fc: ed:b4:9d:ad:46:8c:3d:4f:d8:90:b6:53:4d:2e:45:9f:18:bc: df:aa:17:e6:78:32:ac:ea:c1:e7:fd:fb:d0:b3:81:a8:78:b8: c1:0c:ee:2d:b3:b7:34:c6:20:68:55:6c:81:c8:d2:89:28:9e: 86:f4:e6:c1:c6:3b:7e:3b:03:ce:5a:4e:07:d1:69:d1:45:fa: d9:64:14:c7:a4:c9:44:37:0a:34:d6:43:10:f8:02:06:13:a7: 04:1f:58:10:3e:c7:6c:8a:b9:40:62:2b:e1:e7:21:78:43:14: 03:d8:92:b9:48:a2:40:43:43:82:b7:cd:a7:ca:9c:70:17:09: c8:f8:96:97:9c:90:e5:58:04:72:a5:b0:82:28:ad:3a:f0:d0: fb:6d:9c:d4:b5:14:88:76:bb:78:e1:39:c8:6b:77:d3:c4:b9: 90:47:90:21:3a:f3:60:52:13:3a:1d:b4:a0:fb:9c:31:3b:84: d1:e9:2a:1c:81:78:89:eb:7e:48:cf:79:46:fb:5f:b3:8f:76: aa:b9:4b:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjYwNzI4MTg1NjMxWhcNMjYwODA0MTg1NjMxWjAYMRYwFAYD VQQDEw02YTY4ZmI2MC03ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BkbBOLLKlb76iDKj/evcABzk9POZxx4OQ5mWClBDW2kVqhdGgRsKas99iOG Jj3QdJd8yOAKz32Svw5k05zaKl9xmhwSuONbL6hwI0buXDBTSuaNvrA3QBeEW57Z 0jEpsXvmP9q94U9aGp4QXPPigEVdAOqNsQlfSeJfa6yzl0MXa6j6yvVYMaZVISYC o61MNznJMlAwLDddP3Y+NlsgwPnO6qknFFTojIKAp0k48ikQLjrpOVPr76h43g6C NidnmxgyH2q9dpUqeLmJnctBIkgMfK0MHypOc5K+k90k81BELGE2v+iAbuQWZr07 C9BSj8vPla2DVUDvcArDxnITJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4ZJ5qq h9lazkYNytBLrvrvNelqMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhJEuDsXXVHY/1netaUGdglDW46OeX/u3K+F5uh5NseDwi8u57olUPOH264k5 xD5tEruIPvv87bSdrUaMPU/YkLZTTS5Fnxi836oX5ngyrOrB5/370LOBqHi4wQzu LbO3NMYgaFVsgcjSiSiehvTmwcY7fjsDzlpOB9Fp0UX62WQUx6TJRDcKNNZDEPgC BhOnBB9YED7HbIq5QGIr4echeEMUA9iSuUiiQENDgrfNp8qccBcJyPiWl5yQ5VgE cqWwgiitOvDQ+22c1LUUiHa7eOE5yGt308S5kEeQITrzYFITOh20oPucMTuE0ekq HIF4iet+SM95Rvtfs492qrlLbw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:11:19 2026 by rpki-client