$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json) Hash identifier: C1vZCj3Wbm+b6VglL+S/tmgpb9qxHv0TQrqQmcukIzU= Subject key identifier: E4:63:F0:2D:66:E7:6F:36:FF:67:54:1A:DC:9B:9A:0C:47:F4:48:65 Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 Certificate issuer: /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft Manifest number: 2B Signing time: Mon 27 Jul 2026 11:08:08 +0000 Manifest this update: Mon 27 Jul 2026 11:08:08 +0000 Manifest next update: Mon 03 Aug 2026 11:08:08 +0000 Files and hashes: 1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: 7c86GZaCizCjywYmzcH7uSuAgMbyXklib0mbTPF+iI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Validity Not Before: Jul 27 11:08:08 2026 GMT Not After : Aug 3 11:08:08 2026 GMT Subject: CN=6a673c18-fddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:f2:46:45:ad:43:34:0c:52:13:a4:65:2f: 02:2e:b3:6a:12:3a:80:f9:fb:20:f4:a3:cd:0b:81: 97:3c:81:df:73:f4:d0:5f:0e:53:88:ef:b3:3b:38: 1d:a9:7c:fb:de:6f:b4:e7:fa:24:08:c6:d3:b6:ef: d4:7b:89:1a:5f:77:d2:a0:09:40:ce:5a:00:aa:50: 5e:36:d2:2e:4b:28:8a:f3:f4:2a:24:15:c9:03:ca: a8:85:63:c8:be:99:f5:43:3e:27:8f:c5:1d:b5:73: 31:5d:31:0e:37:54:d8:d0:32:43:7f:29:2f:a8:3c: 86:45:b3:79:96:b7:de:a3:69:f0:91:b5:00:66:f8: c2:59:4f:01:17:e0:2c:2f:a2:50:1d:15:35:a1:21: ea:9a:03:58:9e:5d:a1:25:60:ec:07:01:29:82:00: 1a:27:79:df:81:05:28:0c:e7:7d:91:c1:fa:30:b3: 60:a8:83:61:85:ec:d7:2d:a8:a9:3c:7f:3e:15:52: 01:9a:13:0e:b7:28:71:40:ca:20:0a:07:d1:57:29: 70:bb:e8:7e:25:45:79:83:73:9c:aa:95:54:04:50: 13:40:9d:b1:3f:74:7e:be:50:a3:ba:88:da:90:82: a9:e1:3b:26:fb:8d:72:93:4c:55:a6:e4:f8:39:f7: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:F0:2D:66:E7:6F:36:FF:67:54:1A:DC:9B:9A:0C:47:F4:48:65 X509v3 Authority Key Identifier: keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:f3:4d:0b:87:16:d5:a9:43:12:95:46:20:2c:73:7a:a6: ef:1e:67:61:3b:79:ec:83:6d:20:bf:25:3a:56:8f:f4:96:63: 3b:7e:bf:6a:e0:36:1c:7b:b2:2f:3f:0c:07:29:f8:18:92:c9: 8d:24:fe:a2:9c:11:44:66:5b:44:b6:ac:69:b6:e3:b0:64:03: 86:09:96:8a:3b:c3:eb:23:46:14:65:d5:c5:d1:a1:a0:b0:f7: 63:65:93:bb:34:16:84:15:3f:b0:c9:b4:6f:56:0c:a6:13:fb: 2a:9b:73:34:3f:28:b9:ca:c9:26:a5:2f:b3:4f:d9:6f:17:f4: ce:cb:03:5c:d5:b8:c3:6e:8a:14:82:fb:46:8c:ac:77:a6:eb: 54:eb:7b:ff:24:1c:f5:93:65:a1:7c:a3:39:65:ce:61:cf:c6: 6e:ac:ab:ba:e8:58:8e:b2:e7:10:10:fb:4f:fa:4a:85:99:91: 31:c2:48:d0:2c:15:0f:95:13:71:a9:57:43:f0:b5:e4:af:d5: 78:18:f7:38:7a:29:f5:e4:05:6f:a5:83:08:27:44:72:33:51: 5c:cb:ea:58:cb:16:51:41:2f:ee:b0:4f:11:d9:cc:b7:93:b0: 2d:b7:48:32:e1:37:f1:7b:c0:54:ca:42:5f:e1:dd:6c:d0:db: 9d:03:77:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDcyNzExMC8GA1UEBRMoMzYxMDRBRDVEMUNFMjlGQTZGMDM1RDU5NjkwQ0ZFMTIz OTExODU5NTAeFw0yNjA3MjcxMTA4MDhaFw0yNjA4MDMxMTA4MDhaMBgxFjAUBgNV BAMTDTZhNjczYzE4LWZkZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6bfJGRa1DNAxSE6RlLwIus2oSOoD5+yD0o80LgZc8gd9z9NBfDlOI77M7OB2p fPveb7Tn+iQIxtO279R7iRpfd9KgCUDOWgCqUF420i5LKIrz9CokFckDyqiFY8i+ mfVDPiePxR21czFdMQ43VNjQMkN/KS+oPIZFs3mWt96jafCRtQBm+MJZTwEX4Cwv olAdFTWhIeqaA1ieXaElYOwHASmCABoned+BBSgM532Rwfows2Cog2GF7NctqKk8 fz4VUgGaEw63KHFAyiAKB9FXKXC76H4lRXmDc5yqlVQEUBNAnbE/dH6+UKO6iNqQ gqnhOyb7jXKTTFWm5Pg590BHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5GPwLWbn bzb/Z1Qa3JuaDEf0SGUwHwYDVR0jBBgwFoAUNhBK1dHOKfpvA11ZaQz+EjkRhZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0Y4MjNDOUE4NDlG RDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2ZwdkExMVphUXotRWprUmha VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhCSzFkSE9LZnB2QTExWmFRei1FamtSaFpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NzI3L0Y4MjNDOUE4NDlGRDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2Zw dkExMVphUXotRWprUmhaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNKvNNC4cW1alDEpVGICxzeqbvHmdhO3nsg20gvyU6Vo/0lmM7fr9q4DYce7Iv PwwHKfgYksmNJP6inBFEZltEtqxptuOwZAOGCZaKO8PrI0YUZdXF0aGgsPdjZZO7 NBaEFT+wybRvVgymE/sqm3M0Pyi5yskmpS+zT9lvF/TOywNc1bjDbooUgvtGjKx3 putU63v/JBz1k2WhfKM5Zc5hz8ZurKu66FiOsucQEPtP+kqFmZExwkjQLBUPlRNx qVdD8LXkr9V4GPc4ein15AVvpYMIJ0RyM1Fcy+pYyxZRQS/usE8R2cy3k7Att0gy 4Tfxe8BUykJf4d1s0NudA3c1 -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:13 2026 by rpki-client