$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: lbA3p+mLBRaiPDEepWyEtExJ2qKMTGAx8kUnwK5AwWc= Subject key identifier: E5:BC:2E:55:07:F0:79:5A:49:AD:C4:8E:D3:CA:46:AA:83:60:18:74 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 0132 Signing time: Mon 21 Sep 2026 05:37:07 +0000 Manifest this update: Mon 21 Sep 2026 05:37:06 +0000 Manifest next update: Mon 28 Sep 2026 05:37:06 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: HHupRT1TsKG7wEa2Rjwiuz+YuKEGFovgf2ENZo3nMeU=) 2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=) 3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Sep 21 05:37:06 2026 GMT Not After : Sep 28 05:37:06 2026 GMT Subject: CN=6ab0c283-4aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:30:e0:d2:7a:d5:5f:69:68:43:bd:76:6e: 87:a5:91:fc:ac:48:a3:c2:66:95:00:70:64:74:01: 94:59:59:8b:f2:5a:9c:11:ee:bc:b9:9f:c6:33:09: 9c:59:d6:ab:8c:e3:39:a5:a5:59:53:68:5d:6f:b5: b1:3e:52:01:3b:ab:d8:fe:2e:21:43:39:02:3a:3b: 50:ba:5d:fc:8f:b2:e0:59:f6:99:aa:fa:e3:f3:c7: 3a:56:d5:0d:5c:10:9b:50:73:c0:d7:e7:62:3e:58: 6a:50:97:31:24:54:2e:2a:ca:2a:5c:44:b7:48:71: 18:a5:eb:eb:46:5e:d4:0f:30:a9:3f:6e:8e:fb:eb: 36:f1:9d:d8:01:c4:f5:a3:4d:a6:91:2a:13:84:31: 8e:86:1b:a7:e1:e3:79:3c:00:3a:62:57:71:3e:9b: f1:23:76:69:73:6f:c9:17:a2:d4:9f:a0:59:de:27: 7e:a2:59:47:37:b6:f3:28:3f:a4:9e:5f:e9:ae:0f: e8:e8:3f:79:06:b1:e7:3f:e3:80:0a:10:5f:f2:a2: 07:28:80:4f:73:c0:b3:6e:ae:8c:f3:08:36:0e:02: 69:9a:be:f7:4d:42:63:98:d2:ae:6c:af:30:99:41: e3:ce:37:72:76:88:59:cb:2e:b5:0c:1f:21:da:46: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BC:2E:55:07:F0:79:5A:49:AD:C4:8E:D3:CA:46:AA:83:60:18:74 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:72:e5:32:18:7b:38:5d:2e:6b:e7:88:a3:81:bf:f4:1f:90: b0:9e:ea:b1:e8:f4:28:4d:f7:d5:53:0c:8d:6c:12:2f:e0:c4: 04:ce:dd:76:3c:62:ec:e5:07:97:eb:85:d9:13:0f:a9:73:4a: 55:a1:6f:7b:ff:a7:e2:c9:80:36:b3:bf:22:a2:c4:42:f1:c6: 79:ab:c4:04:e5:a0:f4:6a:8e:b6:9c:a5:81:65:32:4e:60:a8: da:95:97:eb:09:48:3b:5f:95:b9:74:2e:10:88:fa:65:ba:8d: b6:39:3a:2f:76:2f:a5:ac:17:1b:66:df:de:04:24:d3:da:70: c2:45:88:cf:d3:68:e2:93:6b:d4:e7:04:8b:9c:8f:da:c6:17: fe:47:8d:d5:f2:56:a3:13:cf:ee:a9:f8:08:b8:29:ea:60:36: 05:27:bf:4c:f3:56:06:b8:5b:c2:59:3d:32:1f:51:71:35:c5: 62:4b:6d:f1:b7:e6:7f:c7:82:8a:80:3d:3d:c2:df:2e:5e:db: 3f:b4:f5:3e:54:49:26:8d:b7:13:9b:19:b0:55:59:97:2a:0f: 44:a0:e4:c3:61:c1:f0:c9:12:87:97:6b:51:f7:3b:12:ce:7f: c0:1e:4b:5b:df:0c:1f:79:67:a9:8a:ee:6c:68:f4:08:05:e7: e5:4d:16:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjYwOTIxMDUzNzA2WhcNMjYwOTI4MDUzNzA2WjAYMRYwFAYD VQQDEw02YWIwYzI4My00YWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLkw4NJ61V9paEO9dm6HpZH8rEijwmaVAHBkdAGUWVmL8lqcEe68uZ/GMwmc WdarjOM5paVZU2hdb7WxPlIBO6vY/i4hQzkCOjtQul38j7LgWfaZqvrj88c6VtUN XBCbUHPA1+diPlhqUJcxJFQuKsoqXES3SHEYpevrRl7UDzCpP26O++s28Z3YAcT1 o02mkSoThDGOhhun4eN5PAA6YldxPpvxI3Zpc2/JF6LUn6BZ3id+ollHN7bzKD+k nl/prg/o6D95BrHnP+OAChBf8qIHKIBPc8Czbq6M8wg2DgJpmr73TUJjmNKubK8w mUHjzjdydohZyy61DB8h2kaheQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOW8LlUH 8HlaSa3EjtPKRqqDYBh0MB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeXLlMhh7OF0ua+eIo4G/9B+QsJ7qsej0KE331VMMjWwSL+DEBM7ddjxi7OUH l+uF2RMPqXNKVaFve/+n4smANrO/IqLEQvHGeavEBOWg9GqOtpylgWUyTmCo2pWX 6wlIO1+VuXQuEIj6ZbqNtjk6L3YvpawXG2bf3gQk09pwwkWIz9No4pNr1OcEi5yP 2sYX/keN1fJWoxPP7qn4CLgp6mA2BSe/TPNWBrhbwlk9Mh9RcTXFYktt8bfmf8eC ioA9PcLfLl7bP7T1PlRJJo23E5sZsFVZlyoPRKDkw2HB8MkSh5drUfc7Es5/wB5L W98MH3lnqYrubGj0CAXn5U0WNg== -----END CERTIFICATE-----Generated at Wed Sep 23 01:15:41 2026 by rpki-client