$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: mI/ljNCRsDyMxitpAGq+Iv6aTI4YYJuqw88bmcS9kbE= Subject key identifier: 60:51:AB:07:8A:1C:EC:F5:B9:54:D7:B2:2D:17:56:A3:F6:F6:3D:C2 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0DFD Signing time: Tue 28 Jul 2026 17:58:15 +0000 Manifest this update: Tue 28 Jul 2026 17:58:14 +0000 Manifest next update: Tue 04 Aug 2026 17:58:14 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: TyC0a7kAzNZAqOl+bvVySHByLIB52GGCkL/jrfKw/ds=) 2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=) 3: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=) 4: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Jul 28 17:58:14 2026 GMT Not After : Aug 4 17:58:14 2026 GMT Subject: CN=6a68edb6-b9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:a2:5e:c3:7c:03:38:25:c0:ad:3e:3d:69: 35:4a:a2:4b:b4:69:5b:95:3f:80:e5:78:ac:6a:c4: ad:a7:d4:b4:a6:d5:05:c2:b1:47:cc:07:8d:44:59: f8:33:d1:48:85:d2:0e:9f:56:98:aa:36:48:13:ac: 3e:26:a3:54:78:cd:36:b9:eb:1b:d1:0d:fc:ce:f0: 02:fc:c0:8f:7b:f5:6e:8c:89:8d:46:d7:4c:24:71: b9:e9:d7:16:b2:74:59:44:36:ab:b8:2e:67:b4:0b: e8:e7:40:32:d9:1d:be:5d:36:0b:5e:90:d9:dc:8c: 52:95:13:95:b2:62:7e:ec:79:66:67:5d:39:a5:d7: 83:6d:66:d4:bc:35:49:eb:7b:fa:a9:5e:f6:d7:bd: ad:00:4d:a2:72:46:a5:f8:21:95:d4:2b:ea:f6:31: 94:d9:90:5c:70:3b:1b:23:80:85:21:e5:01:df:24: 49:f0:44:bb:e7:3b:34:06:ab:e3:eb:2c:c7:fe:1b: b6:c9:94:c7:34:93:4d:fa:7d:bd:a6:82:6b:6c:46: 3a:92:f6:f4:d8:64:47:d6:c8:f4:11:c2:9a:ac:7f: 5f:af:c5:0e:4f:4a:70:7e:d4:9d:7a:c8:5d:ea:17: 05:64:84:8b:a6:be:d1:5d:fd:f6:a0:df:da:c3:7a: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:51:AB:07:8A:1C:EC:F5:B9:54:D7:B2:2D:17:56:A3:F6:F6:3D:C2 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:52:3d:8b:37:fc:d9:6c:f8:30:89:13:e6:2c:7f:f6:29:68: f0:ec:94:ca:cc:fb:82:c5:01:6a:53:82:5b:0b:a5:34:61:e8: 86:71:4f:8a:eb:97:fc:60:0c:bc:8e:41:9d:e9:3f:83:17:9f: 51:14:b2:74:fc:0e:5e:65:23:81:47:27:a8:b2:94:71:a5:0e: 7e:04:3c:5e:c3:22:6a:f7:ec:94:7a:22:5a:0b:24:e1:b2:f9: 41:20:4a:d3:06:b1:2d:1a:49:a2:2e:4d:d3:4e:5f:e0:d2:a0: 9b:ab:17:1d:9d:a5:9b:8f:9a:8d:83:b1:3a:e3:de:5e:e2:01: a7:fc:b7:8c:d9:8c:1f:38:17:59:b0:c6:77:21:69:ea:b5:29: df:09:2a:65:55:e6:7d:96:7e:3e:0b:2a:85:2e:a4:65:3c:d9: ca:12:95:bb:5d:df:b2:4f:7d:df:92:16:42:37:6e:63:11:8d: 18:68:eb:40:d4:d5:d3:43:e3:9c:d3:6f:73:c3:19:6d:be:db: 3e:65:e7:9e:2b:49:4a:19:c6:d9:72:81:55:4e:d2:9d:e8:71: 8a:d7:1b:dd:69:ce:5c:28:4f:5d:3b:5f:85:f5:7e:c7:a4:58: 6f:c5:d7:b3:64:7e:7a:0e:4d:93:f2:a1:e9:c3:53:77:58:be: 48:d8:8f:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjYwNzI4MTc1ODE0WhcNMjYwODA0MTc1ODE0WjAYMRYwFAYD VQQDEw02YTY4ZWRiNi1iOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FmiXsN8AzglwK0+PWk1SqJLtGlblT+A5XisasStp9S0ptUFwrFHzAeNRFn4 M9FIhdIOn1aYqjZIE6w+JqNUeM02uesb0Q38zvAC/MCPe/VujImNRtdMJHG56dcW snRZRDaruC5ntAvo50Ay2R2+XTYLXpDZ3IxSlROVsmJ+7HlmZ105pdeDbWbUvDVJ 63v6qV72172tAE2ickal+CGV1Cvq9jGU2ZBccDsbI4CFIeUB3yRJ8ES75zs0Bqvj 6yzH/hu2yZTHNJNN+n29poJrbEY6kvb02GRH1sj0EcKarH9fr8UOT0pwftSdeshd 6hcFZISLpr7RXf32oN/aw3pZGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBRqweK HOz1uVTXsi0XVqP29j3CMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUlI9izf82Wz4MIkT5ix/9ilo8OyUysz7gsUBalOCWwulNGHohnFPiuuX/GAM vI5Bnek/gxefURSydPwOXmUjgUcnqLKUcaUOfgQ8XsMiavfslHoiWgsk4bL5QSBK 0waxLRpJoi5N005f4NKgm6sXHZ2lm4+ajYOxOuPeXuIBp/y3jNmMHzgXWbDGdyFp 6rUp3wkqZVXmfZZ+PgsqhS6kZTzZyhKVu13fsk9935IWQjduYxGNGGjrQNTV00Pj nNNvc8MZbb7bPmXnnitJShnG2XKBVU7Snehxitcb3WnOXChPXTtfhfV+x6RYb8XX s2R+eg5Nk/Kh6cNTd1i+SNiPbA== -----END CERTIFICATE-----Generated at Wed Jul 29 08:40:55 2026 by rpki-client