$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft File: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft (raw, json) Hash identifier: WH67eeW424L2Q9SxXolq6f/0yjrf2tl8vsNS1SMW0wg= Subject key identifier: 79:BF:9C:AC:FE:A2:DA:86:1F:31:13:01:9E:D7:E1:D9:83:A0:3C:46 Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44 Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft Manifest number: 08 Signing time: Mon 27 Jul 2026 11:36:09 +0000 Manifest this update: Mon 27 Jul 2026 11:36:08 +0000 Manifest next update: Mon 03 Aug 2026 11:36:08 +0000 Files and hashes: 1: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl (hash: 47cZj4lX8rzvQ7dfmUokc70Yd9ceDMRErcXRR+8NITg=) 2: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (hash: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=) 3: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (hash: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44 Validity Not Before: Jul 27 11:36:08 2026 GMT Not After : Aug 3 11:36:08 2026 GMT Subject: CN=6a6742a9-1ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:31:c8:42:59:13:ca:db:0b:5b:7e:78:75: 69:32:c0:78:85:20:5e:6e:fb:62:0f:90:cd:b3:70: cd:4d:7d:6f:08:a8:f4:b3:02:44:23:f1:d4:a7:cf: 69:55:a9:06:a7:5b:24:db:26:10:75:a9:e8:51:3f: 75:3e:d7:92:db:b1:1e:ce:9c:c4:90:77:9c:7b:8b: d5:a1:69:67:31:92:28:c3:ea:e1:b6:11:e4:4a:a8: 93:93:df:25:d1:b1:c5:ae:ce:61:d5:59:72:fe:ec: 52:cf:03:3c:c4:c9:fe:3c:c2:4e:45:5e:98:40:35: 80:f2:28:f5:8c:2a:5b:e2:c2:16:0c:a1:94:dd:0f: fc:8a:49:1e:48:27:13:fc:91:06:e3:e3:dd:cf:1b: 7b:57:a7:0b:0c:ae:fa:3a:e9:20:1f:dd:c1:e2:4f: 52:fd:2f:39:89:10:8d:e5:57:b2:2e:83:ce:cd:76: b4:9e:79:b7:69:04:9c:4c:fa:7d:ea:4a:93:db:16: 3e:54:af:52:84:23:e7:d0:2e:38:84:f2:0d:03:c7: ff:92:24:c5:eb:43:bc:78:9e:c2:57:d8:d9:6e:3c: d4:c0:05:ad:09:88:25:fd:29:66:62:64:95:79:cb: 30:af:c9:02:a9:d2:e8:7a:f6:6d:e2:ea:4b:7d:c0: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BF:9C:AC:FE:A2:DA:86:1F:31:13:01:9E:D7:E1:D9:83:A0:3C:46 X509v3 Authority Key Identifier: keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ec:d6:d3:a3:f8:f4:91:6c:16:8c:dd:65:43:bf:2f:3c:12: 58:07:5a:1c:97:ed:97:a2:a7:ec:10:b7:69:96:aa:32:7f:64: f0:12:40:6e:bf:f6:96:8c:65:ab:37:fa:a3:75:55:29:60:3b: 07:6e:fa:4f:80:7d:22:f0:ff:8d:27:d7:f3:3a:4e:30:73:3b: 34:d2:e9:4c:8f:6f:53:a3:24:e8:03:8d:13:2f:7f:d2:01:3a: 37:6d:1a:f7:3f:03:47:5a:2b:3e:3d:32:70:64:e8:7f:8b:b6: 87:8f:32:1e:c3:5d:de:fb:b7:e7:27:5a:33:64:31:69:f2:7f: 51:70:4e:9c:26:72:e2:ca:01:af:f3:52:a5:3b:18:ef:fb:90: 29:21:2c:13:04:f4:4f:6a:fc:9e:a7:d5:69:df:7b:c8:e0:11: 48:07:c4:95:95:3d:b4:c4:de:11:fc:2e:94:37:91:5f:2f:e6: 1d:45:81:49:7e:07:f7:a5:2b:31:83:3f:6e:f7:c7:de:83:57: 7d:16:97:9d:3d:bb:3c:bc:6b:cf:ca:93:e9:7c:9f:8c:00:a7: da:05:b9:8a:55:1c:d5:04:fb:93:5a:e6:00:d4:12:66:8f:ef: ea:46:79:11:45:77:89:a5:cd:d0:fa:1d:18:03:59:95:e9:be: bc:c9:fe:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MUY0NzExMC8GA1UEBRMoMzY2REVFNjY0N0VBMTMyOUQ2QkY1QUI5OUNBM0ZFQTgw MjgyRkQ0NDAeFw0yNjA3MjcxMTM2MDhaFw0yNjA4MDMxMTM2MDhaMBgxFjAUBgNV BAMTDTZhNjc0MmE5LTFkZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNDjHIQlkTytsLW354dWkywHiFIF5u+2IPkM2zcM1NfW8IqPSzAkQj8dSnz2lV qQanWyTbJhB1qehRP3U+15LbsR7OnMSQd5x7i9WhaWcxkijD6uG2EeRKqJOT3yXR scWuzmHVWXL+7FLPAzzEyf48wk5FXphANYDyKPWMKlviwhYMoZTdD/yKSR5IJxP8 kQbj493PG3tXpwsMrvo66SAf3cHiT1L9LzmJEI3lV7Iug87NdrSeebdpBJxM+n3q SpPbFj5Ur1KEI+fQLjiE8g0Dx/+SJMXrQ7x4nsJX2NluPNTABa0JiCX9KWZiZJV5 yzCvyQKp0uh69m3i6kt9wFd7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeb+crP6i 2oYfMRMBntfh2YOgPEYwHwYDVR0jBBgwFoAUNm3uZkfqEynWv1q5nKP+qAKC/UQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxRjQ3LzJBNjE5NTY4ODFC NjExRjFBNDUwNTgyMjYxQTMwRkJDL05tM3Vaa2ZxRXluV3YxcTVuS1AtcUFLQ19V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm0zdVprZnFFeW5XdjFxNW5LUC1xQUtDX1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx RjQ3LzJBNjE5NTY4ODFCNjExRjFBNDUwNTgyMjYxQTMwRkJDL05tM3Vaa2ZxRXlu V3YxcTVuS1AtcUFLQ19VUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCw7NbTo/j0kWwWjN1lQ78vPBJYB1ocl+2XoqfsELdplqoyf2TwEkBuv/aWjGWr N/qjdVUpYDsHbvpPgH0i8P+NJ9fzOk4wczs00ulMj29ToyToA40TL3/SATo3bRr3 PwNHWis+PTJwZOh/i7aHjzIew13e+7fnJ1ozZDFp8n9RcE6cJnLiygGv81KlOxjv +5ApISwTBPRPavyep9Vp33vI4BFIB8SVlT20xN4R/C6UN5FfL+YdRYFJfgf3pSsx gz9u98feg1d9FpedPbs8vGvPypPpfJ+MAKfaBbmKVRzVBPuTWuYA1BJmj+/qRnkR RXeJpc3Q+h0YA1mV6b68yf5H -----END CERTIFICATE-----Generated at Tue Jul 28 19:42:32 2026 by rpki-client