$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: V746x3YuClYTlBhcCV0uKZCmgkCeFzWNBqA4KQNPv/4= Subject key identifier: 9A:9A:42:E8:14:52:3B:BC:AC:3D:D0:2E:E2:24:24:B7:95:61:E9:10 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1EFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1EBA Signing time: Fri 12 Jun 2026 16:01:52 +0000 Manifest this update: Fri 12 Jun 2026 16:01:51 +0000 Manifest next update: Fri 19 Jun 2026 16:01:51 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: olj+MIsYDo+vS/V7juE1zgPvuPmgI0SIhiNNKUCrfQ8=) 2: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: LnqeCppjvfZw+kjrXoa/2ToWPDmJSTa9ohrJhVPCflE=) 3: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: RsEExvcwJC5E9KwjY1oAwXxgW1IttoQBiLKiJe8oXuE=) 4: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: cWHGKEyK1/n+XzphhsGriIZiXwfaKLq/Wm0XGKlIaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7933 (0x1efd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Jun 12 16:01:51 2026 GMT Not After : Jun 19 16:01:51 2026 GMT Subject: CN=6a2c2d70-1e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:c2:9b:f7:3a:0a:9b:e0:89:7e:16:fe:ff: 8c:74:cc:fc:3d:d4:9b:3c:64:80:d7:19:d9:bd:ad: 98:26:52:32:eb:a8:f1:39:c3:8d:23:09:cb:94:5e: 8c:61:9f:b2:0f:bd:1f:73:c5:84:08:6a:5b:59:34: 91:1c:ee:20:0f:5e:f7:43:ae:68:76:d3:a6:6c:54: 27:9d:61:52:68:a8:6f:d0:bb:e3:36:20:ad:1c:91: a5:e8:59:20:df:b6:a5:91:bb:2a:2c:79:fd:84:21: a3:f2:8f:7c:34:f2:cb:52:32:f1:f6:68:12:b2:f1: 9f:51:df:fb:56:96:18:c7:70:85:53:7e:fe:a8:5d: b1:76:68:00:2b:d9:05:f9:65:31:4d:4d:5c:8a:27: 5d:02:a7:a0:59:d5:1e:68:f0:5f:c6:f2:c3:bb:c8: cf:d5:9a:3f:2f:c3:83:95:ce:4d:87:bc:a5:40:5f: 34:5c:37:55:15:fe:ee:18:4e:b0:7b:9e:92:7b:98: 89:68:de:b7:48:bc:6f:f2:aa:ff:e1:2d:1e:ad:fe: 95:df:f2:2c:80:88:e5:f4:91:b0:65:52:7a:79:05: 33:6f:77:69:ad:a1:17:0a:9c:99:14:7e:b5:a2:13: ea:a1:28:3e:f8:cb:de:85:65:ca:4d:16:c4:d8:2d: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9A:42:E8:14:52:3B:BC:AC:3D:D0:2E:E2:24:24:B7:95:61:E9:10 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7d:55:50:f5:90:9e:e2:63:e0:67:f1:79:80:13:13:77:4c: 2a:f7:ce:45:ea:e8:85:b1:8a:29:b6:97:6e:f8:ec:57:d9:2d: 25:12:d5:9f:ff:2f:ca:0f:e2:11:b3:21:46:fa:b0:59:c8:e7: 7d:11:7e:18:49:90:ed:d0:12:50:2a:43:79:66:71:52:85:ab: 25:24:02:ba:7e:95:21:f9:13:0e:34:95:0d:02:42:2e:5c:6a: b6:cf:bd:b7:55:b1:7e:77:f2:42:41:e1:d5:d3:85:c0:15:98: cc:8f:96:df:35:0a:48:62:38:ea:f5:ee:d3:ac:2b:95:02:94: 5f:1f:4f:1c:71:e1:82:4c:44:04:65:91:e4:99:2d:a0:86:5f: 5f:e3:37:b0:87:33:c0:22:23:f8:7b:80:83:0d:16:a7:9e:49: 3e:47:9e:9b:99:73:cf:7f:08:be:33:f0:5e:dd:93:c7:da:0f: 4d:13:3a:11:a5:8c:ae:c7:76:20:d6:1c:fe:45:7d:3d:99:1b: ba:50:5b:96:0b:1c:d2:fb:58:c2:95:b4:c5:d1:2e:d8:d5:62: 7e:59:e8:89:8f:54:3e:c6:a9:0e:23:83:0d:0e:a2:1a:60:51: b2:ed:41:5a:3d:50:c2:f7:eb:38:89:f5:ad:d6:c4:99:98:12: 56:9c:86:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjYwNjEyMTYwMTUxWhcNMjYwNjE5MTYwMTUxWjAYMRYwFAYD VQQDEw02YTJjMmQ3MC0xZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYPCm/c6CpvgiX4W/v+MdMz8PdSbPGSA1xnZva2YJlIy66jxOcONIwnLlF6M YZ+yD70fc8WECGpbWTSRHO4gD173Q65odtOmbFQnnWFSaKhv0LvjNiCtHJGl6Fkg 37alkbsqLHn9hCGj8o98NPLLUjLx9mgSsvGfUd/7VpYYx3CFU37+qF2xdmgAK9kF +WUxTU1ciiddAqegWdUeaPBfxvLDu8jP1Zo/L8ODlc5Nh7ylQF80XDdVFf7uGE6w e56Se5iJaN63SLxv8qr/4S0erf6V3/IsgIjl9JGwZVJ6eQUzb3dpraEXCpyZFH61 ohPqoSg++MvehWXKTRbE2C1GgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqaQugU Uju8rD3QLuIkJLeVYekQMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmn1VUPWQnuJj4GfxeYATE3dMKvfORerohbGKKbaXbvjsV9ktJRLVn/8vyg/i EbMhRvqwWcjnfRF+GEmQ7dASUCpDeWZxUoWrJSQCun6VIfkTDjSVDQJCLlxqts+9 t1WxfnfyQkHh1dOFwBWYzI+W3zUKSGI46vXu06wrlQKUXx9PHHHhgkxEBGWR5Jkt oIZfX+M3sIczwCIj+HuAgw0Wp55JPkeem5lzz38IvjPwXt2Tx9oPTRM6EaWMrsd2 INYc/kV9PZkbulBblgsc0vtYwpW0xdEu2NViflnoiY9UPsapDiODDQ6iGmBRsu1B Wj1QwvfrOIn1rdbEmZgSVpyGdA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:38:45 2026 by rpki-client