$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: uzTS2vhuYhpJpR23Vov3uTkGPDSdPeRi4NnvAmJDbug= Subject key identifier: 5E:84:57:52:FA:7B:7A:ED:7B:8B:B0:B3:F4:77:E5:47:0A:6D:FB:EB Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2B4A Signing time: Thu 24 Sep 2026 15:30:55 +0000 Manifest this update: Thu 24 Sep 2026 15:30:54 +0000 Manifest next update: Thu 01 Oct 2026 15:30:54 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 3qzQshiXytcVwgXD/TgILH0rLhcnKDScf2nY5Mc1FF4=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11150 (0x2b8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Sep 24 15:30:54 2026 GMT Not After : Oct 1 15:30:54 2026 GMT Subject: CN=6ab5422e-d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:39:54:fe:f0:7b:a2:e2:37:9f:5c:4b:0c: 60:27:78:bc:b8:86:60:9b:9e:a2:e5:ba:da:6c:8f: 82:35:61:8f:97:84:9c:d3:9b:b5:54:96:a8:ca:da: 69:4a:35:ab:86:43:13:42:67:23:86:27:da:a9:c4: dc:30:f8:83:e7:64:6f:d1:73:c8:ca:ff:2b:51:6f: 8a:dc:ef:6e:73:c2:98:98:50:0b:ef:77:c3:b1:b4: fa:f5:bd:c3:80:59:70:12:50:5d:9e:b2:85:28:59: 43:5d:0e:7a:1f:11:b3:16:23:3b:4b:6f:3b:55:4c: 5d:15:59:e8:be:c2:9a:00:d2:89:73:a2:d0:2b:c2: f7:4e:d3:ea:50:0b:4b:e3:45:e7:4e:f2:23:86:3e: ce:a1:73:1a:ae:f2:cd:6a:f9:c8:e9:d8:b8:f8:15: 05:ba:f0:b8:8a:32:48:a5:f1:06:d5:db:b7:5c:b6: df:04:77:af:5a:c5:3a:a5:4b:2e:0d:b5:cb:f9:7e: 32:19:d2:57:9d:a8:20:3d:7d:fb:ba:f4:14:8f:93: 6c:72:83:7b:e2:e5:30:18:8a:e0:a4:84:f3:cf:e4: 71:75:9d:fc:27:cc:50:6d:6c:1a:3b:44:7d:0d:2d: f6:b5:aa:08:ae:7f:c9:4f:d2:a7:ba:84:50:33:a5: 2d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:57:52:FA:7B:7A:ED:7B:8B:B0:B3:F4:77:E5:47:0A:6D:FB:EB X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1c:ec:47:99:66:5e:0e:c1:9b:db:6e:b4:07:ac:7d:6a:d5: cd:aa:1c:ca:cf:29:1d:0b:8f:99:07:b2:a8:70:af:73:43:e8: 5f:44:56:25:52:fe:50:35:63:c4:49:45:67:d2:6b:73:f4:80: b0:8e:72:02:12:aa:70:18:1b:56:c9:92:53:3c:82:27:85:bd: e3:12:77:0c:36:2a:35:73:2d:02:2c:1a:6d:aa:63:80:5a:76: ee:64:e0:c5:b1:21:a5:ec:58:94:bf:b7:83:8a:66:47:5d:1a: 04:a0:02:08:46:7b:62:e6:0c:e8:27:f6:be:ff:7d:9b:42:b8: 9b:5d:c2:74:61:13:aa:83:b6:78:20:24:b2:75:5f:b9:5e:a9: 9c:2b:4b:44:28:da:ec:e9:4a:d1:3e:9d:ef:16:b8:65:4c:86: 07:36:e8:dd:42:3f:6d:36:69:c5:7c:e6:b9:48:36:63:e6:3b: dd:b9:52:d3:9f:c7:b9:29:60:00:ea:89:61:f0:33:64:3d:65: 81:6c:c8:01:fa:20:a3:d7:41:8e:39:96:90:b1:c6:e2:d1:fe: 01:1f:60:85:95:a5:7f:88:42:9b:aa:bc:91:8f:02:be:25:e6: 2d:8f:a4:02:0e:48:2b:90:70:c3:fd:6a:fb:b4:50:dc:92:ba: 51:5f:74:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwOTI0MTUzMDU0WhcNMjYxMDAxMTUzMDU0WjAYMRYwFAYD VQQDEw02YWI1NDIyZS1kNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfI5VP7we6LiN59cSwxgJ3i8uIZgm56i5brabI+CNWGPl4Sc05u1VJaoytpp SjWrhkMTQmcjhifaqcTcMPiD52Rv0XPIyv8rUW+K3O9uc8KYmFAL73fDsbT69b3D gFlwElBdnrKFKFlDXQ56HxGzFiM7S287VUxdFVnovsKaANKJc6LQK8L3TtPqUAtL 40XnTvIjhj7OoXMarvLNavnI6di4+BUFuvC4ijJIpfEG1du3XLbfBHevWsU6pUsu DbXL+X4yGdJXnaggPX37uvQUj5NscoN74uUwGIrgpITzz+RxdZ38J8xQbWwaO0R9 DS32taoIrn/JT9KnuoRQM6UtMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6EV1L6 e3rte4uws/R35UcKbfvrMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAchzsR5lmXg7Bm9tutAesfWrVzaocys8pHQuPmQeyqHCvc0PoX0RWJVL+UDVj xElFZ9Jrc/SAsI5yAhKqcBgbVsmSUzyCJ4W94xJ3DDYqNXMtAiwabapjgFp27mTg xbEhpexYlL+3g4pmR10aBKACCEZ7YuYM6Cf2vv99m0K4m13CdGETqoO2eCAksnVf uV6pnCtLRCja7OlK0T6d7xa4ZUyGBzbo3UI/bTZpxXzmuUg2Y+Y73blS05/HuSlg AOqJYfAzZD1lgWzIAfogo9dBjjmWkLHG4tH+AR9ghZWlf4hCm6q8kY8CviXmLY+k Ag5IK5Bww/1q+7RQ3JK6UV90+A== -----END CERTIFICATE-----Generated at Fri Sep 25 13:31:58 2026 by rpki-client