$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: 5LsYXoly7fZ9hO1my5LHNhB9fAjhQCt0RjZyXKSKod0= Subject key identifier: CC:09:53:A6:FF:9F:A9:5E:96:D4:13:BE:ED:C9:C4:50:19:20:D6:99 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01B4 Signing time: Mon 27 Jul 2026 06:01:34 +0000 Manifest this update: Mon 27 Jul 2026 06:01:33 +0000 Manifest next update: Mon 03 Aug 2026 06:01:33 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: X1p/b5YviEdohU4Jm/AGFJrFkV8lIL8Dx6cZp/KOcVo=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jul 27 06:01:33 2026 GMT Not After : Aug 3 06:01:33 2026 GMT Subject: CN=6a66f43e-942d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:d9:c2:2f:04:3a:98:82:ea:9d:da:5f:5c: 49:d3:67:8c:a2:d2:f8:1a:04:99:f1:f8:ed:28:51: a9:c6:cc:55:68:e0:ec:89:d9:b7:6f:a1:e9:68:8a: 80:8c:dc:32:f1:26:66:90:ef:02:a8:b6:61:f5:59: 09:6a:af:5b:6f:a9:f8:dd:dd:a5:5d:71:cf:46:d2: e8:49:44:75:1e:9f:33:0d:c6:49:27:4f:d2:9b:67: eb:a5:e9:4f:87:dd:e9:46:08:39:3d:e4:a4:48:ec: 5b:cf:20:e0:91:22:07:5a:87:0e:35:05:66:e0:a9: ad:07:cb:fc:8a:6f:2c:1a:63:ea:3b:d4:82:2a:f3: 9c:5c:33:06:5c:1f:c5:4c:57:36:23:67:dc:a6:25: 15:59:c2:91:89:2d:5c:35:37:18:ab:c7:61:5b:4f: 90:fe:9d:9b:95:b3:92:cb:61:81:20:6f:95:25:42: a6:f5:3b:64:b1:e6:23:f6:c0:3b:a3:bd:eb:d7:bb: 96:59:cd:3b:e4:51:c2:40:1d:da:ce:c5:b4:b8:00: fc:0d:4e:35:c9:7a:e1:a6:a5:19:dc:e0:85:d2:74: 11:5a:04:9d:6c:67:28:23:d0:93:47:10:87:83:6e: 94:c2:47:c8:78:bc:42:4b:e0:11:10:2a:0a:56:07: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:09:53:A6:FF:9F:A9:5E:96:D4:13:BE:ED:C9:C4:50:19:20:D6:99 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:dc:58:4a:d7:f7:e5:34:e7:59:5b:33:35:9c:8e:cf:96:c4: ce:49:a5:6c:87:4c:2b:1f:7e:22:8a:7c:c6:f3:2a:e4:af:3e: 8c:c3:c5:e2:3f:fe:2b:05:87:04:9e:16:26:91:46:46:41:42: 4a:35:5b:b0:b7:75:44:cb:d2:35:2b:d5:0c:9c:d9:d0:42:0b: 82:95:40:85:a7:51:9d:e0:c6:01:e8:da:a7:61:76:75:9f:56: 63:e4:c2:ea:3e:d6:b0:00:b7:78:b9:4c:03:09:12:4e:5b:3d: e0:48:34:ff:95:13:42:aa:0b:cc:41:c8:8b:2d:ab:88:c5:be: b8:65:e0:a1:a2:23:b9:41:80:65:87:01:c0:58:cd:d4:4d:3e: 02:82:22:40:3b:cc:7b:95:04:ce:ce:3c:cd:90:fc:e9:81:43: 9e:97:d8:87:a8:05:d7:37:34:ee:a8:fa:a9:2a:92:cd:ce:d0: a9:79:5c:b6:00:df:c0:7f:aa:e1:89:26:7c:73:ea:c7:09:c7: 19:59:9e:1b:40:18:ac:c7:48:b6:21:09:c3:95:5f:22:b1:2c: 47:b8:b3:23:4b:d1:25:4a:14:0e:6d:8c:57:a2:57:e7:80:11: e3:71:b4:5f:87:c5:8a:6c:8b:8d:a4:05:28:f9:da:d5:a4:ba: 32:e3:3b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwNzI3MDYwMTMzWhcNMjYwODAzMDYwMTMzWjAYMRYwFAYD VQQDEw02YTY2ZjQzZS05NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseDZwi8EOpiC6p3aX1xJ02eMotL4GgSZ8fjtKFGpxsxVaODsidm3b6HpaIqA jNwy8SZmkO8CqLZh9VkJaq9bb6n43d2lXXHPRtLoSUR1Hp8zDcZJJ0/Sm2frpelP h93pRgg5PeSkSOxbzyDgkSIHWocONQVm4KmtB8v8im8sGmPqO9SCKvOcXDMGXB/F TFc2I2fcpiUVWcKRiS1cNTcYq8dhW0+Q/p2blbOSy2GBIG+VJUKm9TtkseYj9sA7 o73r17uWWc075FHCQB3azsW0uAD8DU41yXrhpqUZ3OCF0nQRWgSdbGcoI9CTRxCH g26UwkfIeLxCS+ARECoKVgeHIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwJU6b/ n6leltQTvu3JxFAZINaZMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNxYStf35TTnWVszNZyOz5bEzkmlbIdMKx9+Iop8xvMq5K8+jMPF4j/+KwWH BJ4WJpFGRkFCSjVbsLd1RMvSNSvVDJzZ0EILgpVAhadRneDGAejap2F2dZ9WY+TC 6j7WsAC3eLlMAwkSTls94Eg0/5UTQqoLzEHIiy2riMW+uGXgoaIjuUGAZYcBwFjN 1E0+AoIiQDvMe5UEzs48zZD86YFDnpfYh6gF1zc07qj6qSqSzc7QqXlctgDfwH+q 4YkmfHPqxwnHGVmeG0AYrMdItiEJw5VfIrEsR7izI0vRJUoUDm2MV6JX54AR43G0 X4fFimyLjaQFKPna1aS6MuM7yA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:32 2026 by rpki-client