$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: eQwrHf6NF281aWOCtbRlQa8KYjJg4IrwbNlh4LJSdVA= Subject key identifier: 6C:24:83:21:94:82:50:6C:73:CA:13:70:DA:AC:42:BE:2E:A0:04:1C Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 04D4 Signing time: Thu 24 Sep 2026 23:48:35 +0000 Manifest this update: Thu 24 Sep 2026 23:48:34 +0000 Manifest next update: Thu 01 Oct 2026 23:48:34 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: LuY89/fN4xJkB3M4YKYM1iDLJ7Sa9qurnglwQAbIg4Q=) 2: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: WL7M1FpRwrUsyaj0X9ZGaQ0c/XqE32u0/lc5P4wkeOI=) 3: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: VWdUzB6vXIKkRn/XdO/qNXY7fvd6Iad/udykpaussds=) 4: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: h7on1h70EQUkl7YA2uV3PQ8RC/fzA9+qPqnRbP0SURQ=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: B6+cUUkQlPaj9J4kFZO9C4R2/ipX521sHO4j6bzzqNE=) 6: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /ybLb79FD1QsPf5vPSYHi+deCRb+HGVM3JZtL0Bj/K0=) 7: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: czE7NJl7/t7hwLc6wB3QFn+FdCDmuyeRfw1z4n513xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 24 23:48:34 2026 GMT Not After : Oct 1 23:48:34 2026 GMT Subject: CN=6ab5b6d2-a74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:14:93:51:4a:66:b7:60:fe:94:8d:8a:de: 11:7f:37:c7:e7:58:68:93:78:65:31:29:b0:8c:3f: 02:29:b4:cb:78:99:3a:21:8b:cc:c0:89:50:ea:b4: c0:6f:ee:40:00:88:34:c5:77:73:1b:05:90:b2:1e: 5a:4e:ff:3d:8a:ae:c7:38:b2:83:7c:84:8b:04:45: b1:a8:9f:44:57:50:17:dd:c3:6f:42:1f:ff:c8:5e: fa:3d:68:f6:bf:b2:1d:99:46:3b:b7:b0:c5:d5:25: 94:15:2b:c9:6b:6f:71:d1:6c:fa:84:ae:42:87:2a: 1d:aa:f9:d7:8c:d6:b2:98:a1:a0:d9:ad:33:cb:47: df:13:ec:30:79:59:6a:d4:9b:39:79:d9:e5:97:b0: ee:8e:0b:5d:c5:52:32:d6:41:b9:e2:e9:2f:2a:a7: e0:35:3a:f4:02:ac:82:e8:ac:54:79:7a:4e:9a:c6: 27:46:56:86:5a:a6:45:10:e6:96:a1:d1:d7:02:19: 61:fc:cf:08:54:c9:66:16:0f:79:05:bb:75:fa:3f: 0b:fc:07:bf:93:16:fc:94:0f:2f:c1:50:56:bc:29: 32:d6:a9:f6:ba:15:c6:33:ea:34:53:1b:4a:66:10: 97:90:6d:b0:29:6e:f1:55:4e:a4:5c:d2:70:2c:b0: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:24:83:21:94:82:50:6C:73:CA:13:70:DA:AC:42:BE:2E:A0:04:1C X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:95:00:09:40:ad:2c:45:54:c0:c7:8d:e8:bd:a9:d5:a3: ad:64:6c:7f:5d:50:b7:d5:b2:4a:63:a0:29:0c:48:22:04:5f: c7:18:f0:4f:d2:d7:77:38:9a:a4:f0:1b:3a:6e:cd:96:e7:81: 7f:2d:f0:57:0b:32:af:53:52:c8:d9:9d:03:43:02:9f:30:47: b4:85:31:3e:cd:90:6e:08:89:aa:b7:b2:9c:57:ea:1a:6b:b2: fb:fc:c3:3f:0c:44:44:31:d4:89:de:83:f9:47:5d:cb:f5:07: 3e:85:94:f3:84:ed:0b:02:3a:5f:b0:22:5d:84:ae:11:a6:f6: 6f:ae:fb:8b:9d:1c:86:ab:1a:14:d1:78:40:2c:cc:15:da:03: 6d:ca:45:94:58:38:f6:0c:1e:27:e8:eb:0b:01:c7:6f:78:99: 7b:ef:b5:31:3b:f0:e6:1c:e4:13:45:e2:a2:3f:48:98:4d:40: fd:c5:b6:a5:bf:ea:1f:e0:91:80:0a:b6:03:38:c0:dd:39:2a: 24:c3:90:05:b3:ee:40:be:af:f5:7d:72:0c:ba:cb:06:87:72: 7d:cb:c7:65:db:40:a9:a9:83:af:31:53:fb:2f:fb:f6:eb:90: bc:ac:26:07:62:f5:3d:5b:ed:f1:17:d3:f1:45:43:b5:ca:d1: 73:bf:be:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwOTI0MjM0ODM0WhcNMjYxMDAxMjM0ODM0WjAYMRYwFAYD VQQDEw02YWI1YjZkMi1hNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxgUk1FKZrdg/pSNit4RfzfH51hok3hlMSmwjD8CKbTLeJk6IYvMwIlQ6rTA b+5AAIg0xXdzGwWQsh5aTv89iq7HOLKDfISLBEWxqJ9EV1AX3cNvQh//yF76PWj2 v7IdmUY7t7DF1SWUFSvJa29x0Wz6hK5ChyodqvnXjNaymKGg2a0zy0ffE+wweVlq 1Js5ednll7DujgtdxVIy1kG54ukvKqfgNTr0AqyC6KxUeXpOmsYnRlaGWqZFEOaW odHXAhlh/M8IVMlmFg95Bbt1+j8L/Ae/kxb8lA8vwVBWvCky1qn2uhXGM+o0UxtK ZhCXkG2wKW7xVU6kXNJwLLClJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwkgyGU glBsc8oTcNqsQr4uoAQcMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdiVAAlArSxFVMDHjei9qdWjrWRsf11Qt9WySmOgKQxIIgRfxxjwT9LXdzia pPAbOm7NlueBfy3wVwsyr1NSyNmdA0MCnzBHtIUxPs2QbgiJqreynFfqGmuy+/zD PwxERDHUid6D+Uddy/UHPoWU84TtCwI6X7AiXYSuEab2b677i50chqsaFNF4QCzM FdoDbcpFlFg49gweJ+jrCwHHb3iZe++1MTvw5hzkE0Xioj9ImE1A/cW2pb/qH+CR gAq2AzjA3TkqJMOQBbPuQL6v9X1yDLrLBodyfcvHZdtAqamDrzFT+y/79uuQvKwm B2L1PVvt8RfT8UVDtcrRc7++pA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:57:09 2026 by rpki-client