$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: hyIyw6swIrn2M9Y4h/90e/38eB8U8cZsnzhS2bKuK78= Subject key identifier: 1F:D2:4D:4E:E3:41:46:0F:53:7E:DF:E3:BE:CB:74:A4:2E:3A:18:50 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 02AA Signing time: Mon 27 Jul 2026 02:54:23 +0000 Manifest this update: Mon 27 Jul 2026 02:54:23 +0000 Manifest next update: Mon 03 Aug 2026 02:54:23 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: TQRC717MsPy+mqFvJ8gByI7I2yEp54DBfH0ejma/9SA=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Jul 27 02:54:23 2026 GMT Not After : Aug 3 02:54:23 2026 GMT Subject: CN=6a66c85f-ba28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:fb:fd:2e:20:2c:d2:ec:1c:78:1b:85:fc: d1:0c:84:4e:47:96:02:4d:b3:47:f9:08:fd:94:26: a3:34:97:86:17:bd:96:c3:0d:4c:89:fe:95:8b:4f: 66:a4:f2:30:42:fe:1b:93:dc:9c:fb:5c:28:a8:d2: 7d:95:a4:92:25:f2:94:30:7f:fd:37:bf:a0:5c:bd: 7a:d2:5a:05:c9:1f:19:65:6d:89:ab:0f:f7:6a:b4: a9:67:1a:4c:e6:90:8d:e6:d8:f5:93:c7:3e:ee:db: ac:8d:86:3d:fa:e4:39:a6:16:22:48:ab:05:5a:00: f6:98:35:72:f2:ec:a5:3b:ce:41:d3:7b:4c:af:fd: b1:94:9d:e2:d0:30:21:d4:cb:2d:cc:c0:f1:f1:ce: 27:5c:d4:20:96:c8:9e:99:b3:54:8e:d2:58:76:f8: 11:65:05:05:6a:33:10:8d:47:92:c1:a9:86:1c:c1: 83:5b:b4:f1:4b:40:d1:6c:4b:e8:d5:b6:9a:bb:9f: 3f:77:25:30:c4:64:a0:df:8e:0a:86:b0:5f:92:45: ab:4f:2a:b2:0f:27:48:86:f8:8d:36:bb:23:0c:3f: 95:16:25:56:0e:67:5f:09:68:62:91:c0:a7:3e:36: 39:e2:7d:1e:48:2c:b8:19:5e:89:74:59:49:d1:0c: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:4D:4E:E3:41:46:0F:53:7E:DF:E3:BE:CB:74:A4:2E:3A:18:50 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:3a:db:a5:5e:c5:01:fd:2f:76:de:16:b5:6f:05:43:ec:24: ba:a0:57:69:fa:53:f1:06:19:e8:bf:c3:21:6f:f1:54:d9:2f: 07:6b:f9:e7:68:99:03:79:29:70:fe:24:65:02:b6:1a:b4:75: 39:db:ac:37:ea:80:39:f3:39:1f:be:15:d2:62:bb:27:ce:2c: 83:83:00:ec:b3:1b:21:42:d7:05:f3:2d:51:22:4c:45:c3:2f: 8e:9c:cb:fe:4c:53:51:f2:f4:2c:72:7f:88:84:e4:90:50:f5: 65:9c:98:ac:e2:c1:6c:21:aa:d1:72:7d:a9:ae:5e:65:18:8c: d6:9e:c6:d2:47:9d:b4:2c:f6:e6:9b:5e:5b:cf:41:7a:72:cd: 48:d1:b1:47:2f:56:aa:52:bc:ef:d2:41:01:1d:56:2a:42:e7: 5d:d9:f2:4e:78:f5:cc:3a:1a:4e:c9:a5:e9:5a:92:bf:1a:e7: c1:77:26:27:a9:13:fa:55:de:4b:36:88:73:bd:bd:b4:08:83: 1c:a6:0d:c1:0e:5e:ec:04:40:3b:d4:05:b8:d3:98:b8:3a:09: f4:c7:d9:85:a3:16:42:bc:e9:ac:73:e3:32:c1:9f:88:54:a3: de:b8:b8:bb:2e:9b:64:1d:62:fc:45:d9:e6:e8:3f:3a:ba:ca: 27:ca:47:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjYwNzI3MDI1NDIzWhcNMjYwODAzMDI1NDIzWjAYMRYwFAYD VQQDEw02YTY2Yzg1Zi1iYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tb7/S4gLNLsHHgbhfzRDIROR5YCTbNH+Qj9lCajNJeGF72Www1Mif6Vi09m pPIwQv4bk9yc+1woqNJ9laSSJfKUMH/9N7+gXL160loFyR8ZZW2Jqw/3arSpZxpM 5pCN5tj1k8c+7tusjYY9+uQ5phYiSKsFWgD2mDVy8uylO85B03tMr/2xlJ3i0DAh 1MstzMDx8c4nXNQglsiembNUjtJYdvgRZQUFajMQjUeSwamGHMGDW7TxS0DRbEvo 1baau58/dyUwxGSg344KhrBfkkWrTyqyDydIhviNNrsjDD+VFiVWDmdfCWhikcCn PjY54n0eSCy4GV6JdFlJ0QwBjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/STU7j QUYPU37f477LdKQuOhhQMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzDrbpV7FAf0vdt4WtW8FQ+wkuqBXafpT8QYZ6L/DIW/xVNkvB2v552iZA3kp cP4kZQK2GrR1OdusN+qAOfM5H74V0mK7J84sg4MA7LMbIULXBfMtUSJMRcMvjpzL /kxTUfL0LHJ/iITkkFD1ZZyYrOLBbCGq0XJ9qa5eZRiM1p7G0kedtCz25pteW89B enLNSNGxRy9WqlK879JBAR1WKkLnXdnyTnj1zDoaTsml6VqSvxrnwXcmJ6kT+lXe SzaIc729tAiDHKYNwQ5e7ARAO9QFuNOYuDoJ9MfZhaMWQrzprHPjMsGfiFSj3ri4 uy6bZB1i/EXZ5ug/OrrKJ8pH6A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:21 2026 by rpki-client