$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json) Hash identifier: TUlf/Suux7mZagHuKAxDj0L1DL3vo6liVW7GTx5gEjA= Subject key identifier: D2:12:D6:E6:05:8C:03:6C:DE:93:E5:B9:71:9E:CA:D8:C8:C9:06:8F Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 Certificate issuer: /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft Manifest number: 16 Signing time: Sat 13 Jun 2026 09:06:03 +0000 Manifest this update: Sat 13 Jun 2026 09:06:02 +0000 Manifest next update: Sat 20 Jun 2026 09:06:02 +0000 Files and hashes: 1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: GNgNJq+8xB7wEGyB6xjO8u9FKV9UskFzpu38kK6I9rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Validity Not Before: Jun 13 09:06:02 2026 GMT Not After : Jun 20 09:06:02 2026 GMT Subject: CN=6a2d1d7a-44db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:d6:fc:26:40:f0:e6:24:29:fe:05:92:d6: 4e:57:e8:bb:45:d8:05:cd:95:96:b9:d6:dc:c9:59: db:e0:89:82:90:01:77:07:90:9c:17:c7:11:bc:e3: 29:f8:b3:0b:e4:07:e5:3b:4b:d9:8c:ef:94:77:66: 11:d9:9f:66:6b:39:a6:fc:13:07:c6:14:95:40:58: f1:b7:de:5f:8e:79:cd:6b:6e:f4:25:3b:fc:97:d9: 36:e0:c1:eb:18:66:3f:0a:ea:c6:75:6e:b2:be:a9: b0:bd:2c:ed:6a:0e:cb:6e:64:a5:e1:fb:7a:ea:2a: cc:ac:d3:8c:ea:34:81:11:95:0c:fa:35:06:11:19: 54:5f:43:c2:8f:1a:05:ec:f7:cb:ea:77:b2:3c:46: b2:68:c7:e7:54:a0:51:45:94:37:e3:cc:d0:e6:f2: bf:12:3f:e7:b1:3f:1e:8b:d3:39:b4:42:f7:ff:29: 46:b8:9d:52:ff:81:c8:1b:43:08:b9:92:04:9d:76: 01:15:5e:21:6f:75:94:ba:05:7e:8a:05:ce:1b:a3: 64:dd:75:0b:a2:7a:fe:75:19:f6:4d:ca:84:0f:b4: 8c:81:d2:a3:05:b0:0c:21:8e:80:47:d5:6a:a3:ae: 96:27:47:c5:25:a1:7c:c3:a7:1a:9e:9b:ed:61:08: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:12:D6:E6:05:8C:03:6C:DE:93:E5:B9:71:9E:CA:D8:C8:C9:06:8F X509v3 Authority Key Identifier: keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:da:35:ad:f3:75:7d:c9:64:b8:a0:11:0d:94:8e:06:8f:dc: 69:39:0b:79:5e:01:ba:e0:06:e5:38:c3:bd:c9:46:ce:64:79: 26:a4:0a:22:ec:15:67:6d:b2:a1:2f:ad:ce:6c:df:2d:a3:bc: 6e:02:90:0f:20:bf:f7:2e:6e:e0:5d:4c:da:e7:12:0a:49:f8: a6:60:31:4a:85:dc:ab:9e:6f:c2:ac:38:2c:14:e8:34:9a:bf: 17:40:44:fc:70:9c:d3:e1:43:54:94:e4:2a:18:0f:55:b4:33: 2f:e3:cf:b8:96:86:de:69:d6:7e:20:4e:13:74:0c:b3:f4:0a: b3:81:bf:2c:eb:50:15:e4:53:51:5d:71:1c:ad:f5:bf:e0:de: 7d:d8:03:70:e2:2a:96:25:66:da:44:5c:87:5e:66:39:a9:d2: cc:30:24:4d:8b:1f:23:f2:5e:d5:46:34:3d:1b:0f:92:4d:1b: dc:24:81:c0:ad:f5:67:71:10:b9:48:44:25:94:57:fd:8c:79: 77:76:a3:eb:63:d4:d2:94:69:b7:69:0b:9d:8e:26:03:f7:fa: d5:28:19:5d:8e:4c:26:8b:ce:e2:58:39:9f:9d:3c:fa:f5:03: 8a:70:b5:54:52:79:4a:21:5f:b7:49:f0:f2:15:63:46:8f:81: b6:7f:a1:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDcyNzExMC8GA1UEBRMoMzYxMDRBRDVEMUNFMjlGQTZGMDM1RDU5NjkwQ0ZFMTIz OTExODU5NTAeFw0yNjA2MTMwOTA2MDJaFw0yNjA2MjAwOTA2MDJaMBgxFjAUBgNV BAMTDTZhMmQxZDdhLTQ0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16Nb8JkDw5iQp/gWS1k5X6LtF2AXNlZa51tzJWdvgiYKQAXcHkJwXxxG84yn4 swvkB+U7S9mM75R3ZhHZn2ZrOab8EwfGFJVAWPG33l+Oec1rbvQlO/yX2TbgwesY Zj8K6sZ1brK+qbC9LO1qDstuZKXh+3rqKsys04zqNIERlQz6NQYRGVRfQ8KPGgXs 98vqd7I8RrJox+dUoFFFlDfjzNDm8r8SP+exPx6L0zm0Qvf/KUa4nVL/gcgbQwi5 kgSddgEVXiFvdZS6BX6KBc4bo2TddQuiev51GfZNyoQPtIyB0qMFsAwhjoBH1Wqj rpYnR8UloXzDpxqem+1hCOoBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0hLW5gWM A2zek+W5cZ7K2MjJBo8wHwYDVR0jBBgwFoAUNhBK1dHOKfpvA11ZaQz+EjkRhZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0Y4MjNDOUE4NDlG RDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2ZwdkExMVphUXotRWprUmha VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhCSzFkSE9LZnB2QTExWmFRei1FamtSaFpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NzI3L0Y4MjNDOUE4NDlGRDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2Zw dkExMVphUXotRWprUmhaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBG2jWt83V9yWS4oBENlI4Gj9xpOQt5XgG64AblOMO9yUbOZHkmpAoi7BVnbbKh L63ObN8to7xuApAPIL/3Lm7gXUza5xIKSfimYDFKhdyrnm/CrDgsFOg0mr8XQET8 cJzT4UNUlOQqGA9VtDMv48+4lobeadZ+IE4TdAyz9Aqzgb8s61AV5FNRXXEcrfW/ 4N592ANw4iqWJWbaRFyHXmY5qdLMMCRNix8j8l7VRjQ9Gw+STRvcJIHArfVncRC5 SEQllFf9jHl3dqPrY9TSlGm3aQudjiYD9/rVKBldjkwmi87iWDmfnTz69QOKcLVU UnlKIV+3SfDyFWNGj4G2f6Hj -----END CERTIFICATE-----Generated at Sat Jun 13 14:45:55 2026 by rpki-client