$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: YM1Q+NqRfRnkv6KQKVt/5O4JCOAVUuG1IUGcch66LGw= Subject key identifier: 60:49:FB:69:7E:BD:43:32:C6:B7:EF:5E:73:3E:8F:66:06:82:CC:E6 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09D7 Signing time: Tue 28 Jul 2026 20:11:44 +0000 Manifest this update: Tue 28 Jul 2026 20:11:43 +0000 Manifest next update: Tue 04 Aug 2026 20:11:43 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: lQDz1mJGOabEugTIlbe6Z2yS5kIi9hS7G0ct+K5GF2M=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Jul 28 20:11:43 2026 GMT Not After : Aug 4 20:11:43 2026 GMT Subject: CN=6a690d00-d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:40:b9:1c:c3:96:1a:fb:8c:ba:aa:8f:cb: 42:ba:24:56:c3:35:70:4c:1b:c0:12:51:6a:86:e3: 7e:5d:bd:5a:f5:5f:44:ec:5e:7c:ff:cf:7d:4f:02: af:b8:3c:cb:9f:3e:a6:83:64:65:90:78:ef:62:43: 91:04:cf:50:4a:56:d2:be:9d:0c:eb:91:fa:3d:96: 94:c8:00:7b:78:54:7d:06:7f:3c:5d:47:b7:0f:19: e2:78:6c:ff:86:f5:fe:6d:25:76:98:3f:0a:ea:6e: 76:c3:75:b8:47:f0:c2:11:c5:0b:9b:73:87:e4:ea: b9:8c:c3:c9:b5:0f:5d:7d:6f:49:ba:c7:e4:e7:6b: 97:e4:b9:ea:75:0b:29:40:2a:01:56:ef:6f:04:d5: 87:2b:ba:34:b3:6b:e2:c9:04:c3:14:aa:5e:45:6e: ce:0b:43:d0:d9:fc:48:f6:7f:0a:55:7b:4a:91:4e: 65:64:10:19:68:d4:b1:e0:35:27:3a:88:54:4e:20: 00:c4:8f:7d:3b:b0:4b:32:51:e0:4f:ee:d9:32:2f: 5d:55:1d:44:58:6d:5a:b2:d6:dc:5a:43:2d:db:22: e6:24:ee:73:51:a5:11:7f:ec:33:fb:c6:da:80:ad: 96:42:da:98:8a:83:0b:7f:26:bb:e8:ab:9d:d0:e3: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:FB:69:7E:BD:43:32:C6:B7:EF:5E:73:3E:8F:66:06:82:CC:E6 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:35:8d:59:56:4c:ef:e5:e0:ed:7a:3e:cf:bc:74:22:99:e7: 84:2b:92:6b:cf:6b:35:1e:cf:78:63:de:d7:3f:e8:9a:b1:1d: 7d:ee:11:7c:eb:f2:e4:05:9e:0a:b1:83:9b:76:90:45:4e:83: 17:ab:3a:3e:68:27:09:4b:10:9a:37:71:e3:5e:a3:09:3c:dc: 18:39:84:18:d3:0b:ec:34:b6:77:7f:94:37:53:66:83:65:69: 43:c0:94:50:50:6a:7e:16:fc:e4:a9:de:59:87:50:08:7c:b2: 04:65:5e:e6:d9:15:91:dd:c7:e3:7e:72:7d:22:37:6b:d6:7c: 5b:bc:8f:ae:aa:a5:20:a5:26:90:d6:4e:6b:e0:40:8f:24:93: 19:5b:4e:8d:03:04:35:76:a7:b2:fb:8c:5f:70:87:a4:b2:a5: 4f:0f:aa:3d:0b:72:b3:b6:9f:45:3f:cf:c9:1e:6b:e2:3a:f3: 43:12:22:12:7c:01:4e:97:3d:84:57:ee:4f:10:63:77:93:04: 58:0b:f4:61:c0:01:c7:08:17:a9:ac:a0:23:71:da:21:ce:46: 30:92:89:37:72:fe:2a:e4:4c:67:9b:8a:59:d5:06:b6:2b:eb: 1c:1f:90:1d:42:d4:d3:4c:ee:ab:48:8b:b3:e0:39:22:15:dc: 37:19:b9:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwNzI4MjAxMTQzWhcNMjYwODA0MjAxMTQzWjAYMRYwFAYD VQQDEw02YTY5MGQwMC1kMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSRAuRzDlhr7jLqqj8tCuiRWwzVwTBvAElFqhuN+Xb1a9V9E7F58/899TwKv uDzLnz6mg2RlkHjvYkORBM9QSlbSvp0M65H6PZaUyAB7eFR9Bn88XUe3DxnieGz/ hvX+bSV2mD8K6m52w3W4R/DCEcULm3OH5Oq5jMPJtQ9dfW9Jusfk52uX5LnqdQsp QCoBVu9vBNWHK7o0s2viyQTDFKpeRW7OC0PQ2fxI9n8KVXtKkU5lZBAZaNSx4DUn OohUTiAAxI99O7BLMlHgT+7ZMi9dVR1EWG1astbcWkMt2yLmJO5zUaURf+wz+8ba gK2WQtqYioMLfya76Kud0OPyWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBJ+2l+ vUMyxrfvXnM+j2YGgszmMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKDWNWVZM7+Xg7Xo+z7x0IpnnhCuSa89rNR7PeGPe1z/omrEdfe4RfOvy5AWe CrGDm3aQRU6DF6s6PmgnCUsQmjdx416jCTzcGDmEGNML7DS2d3+UN1Nmg2VpQ8CU UFBqfhb85KneWYdQCHyyBGVe5tkVkd3H435yfSI3a9Z8W7yPrqqlIKUmkNZOa+BA jySTGVtOjQMENXansvuMX3CHpLKlTw+qPQtys7afRT/PyR5r4jrzQxIiEnwBTpc9 hFfuTxBjd5MEWAv0YcABxwgXqaygI3HaIc5GMJKJN3L+KuRMZ5uKWdUGtivrHB+Q HULU00zuq0iLs+A5IhXcNxm5CA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:13:40 2026 by rpki-client