$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: W2+9CHEKBovEvDsIHOPgqObRxJvMx2Ir6gKmRZoxNzU= Subject key identifier: 37:DD:CE:78:E4:3D:5A:D8:19:57:8C:F4:88:77:95:03:FA:22:B9:B8 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0D16 Signing time: Thu 24 Sep 2026 18:29:44 +0000 Manifest this update: Thu 24 Sep 2026 18:29:44 +0000 Manifest next update: Thu 01 Oct 2026 18:29:44 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: QcSC4TTMw1sm4JmCvhClcEjXPk/q/0dOFTJw/7P3VJ4=) 2: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 3: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 4: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 5: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 6: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 7: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Sep 24 18:29:44 2026 GMT Not After : Oct 1 18:29:44 2026 GMT Subject: CN=6ab56c18-b3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:b7:d3:8d:a4:06:91:a4:ca:0a:24:31:39: 9b:7e:22:0d:74:99:a2:a2:81:c2:36:46:9a:f3:8e: 6b:e5:e4:0f:50:11:2d:b6:5a:5c:7d:67:24:66:49: ef:06:08:0a:07:bc:7f:74:4d:c4:c0:0c:c4:45:d3: 30:9f:fb:2d:47:e4:ff:4b:9e:ae:f0:14:e0:0c:22: 6d:f9:b0:2f:c0:94:6e:51:cf:88:e5:bb:24:10:00: bf:6a:16:80:01:69:3f:40:c8:0c:91:c2:84:c9:51: c1:68:fe:cc:f1:b6:df:6a:22:00:a9:f1:0c:09:fe: 2d:0d:79:ef:2f:ad:11:5d:a1:dd:99:1a:0b:6e:10: ba:e3:90:d0:b1:a6:5e:56:c4:71:68:69:0d:0b:87: ed:32:eb:3f:cd:27:96:78:fb:85:af:66:e9:47:d4: 68:68:5d:f7:1b:b1:90:ee:6a:bb:cc:c5:c6:42:7c: e4:e4:ee:18:98:15:90:3d:af:3e:cb:6e:6e:25:54: d2:1d:44:e6:a5:d2:00:b8:8b:d4:42:cd:8b:37:54: 29:98:75:b7:58:47:26:62:20:7c:29:31:d1:c8:7f: 0d:6b:39:43:c3:32:4b:3d:7e:36:90:5f:f3:3f:4f: 6a:44:77:58:7b:63:2a:5b:b6:db:dc:f4:e6:27:6e: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DD:CE:78:E4:3D:5A:D8:19:57:8C:F4:88:77:95:03:FA:22:B9:B8 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8f:67:cb:36:72:17:23:d1:c6:9d:74:61:5b:5c:b2:a7:df: c2:67:8b:34:a1:dd:05:b8:63:d7:9e:5e:7f:95:bd:3e:80:c4: 95:cd:e1:72:b5:6e:42:90:cf:12:97:cc:a8:a5:21:d8:51:bd: c3:ba:9d:89:4c:9d:3f:6d:bd:b3:7c:f0:6c:ce:73:99:73:7d: 2e:7e:5b:e9:f1:f1:22:78:68:30:01:19:ea:e7:08:d5:fc:27: c2:9f:71:4f:ce:42:c7:1a:96:b6:16:bb:ef:68:53:1b:83:de: 83:23:75:f5:35:38:7c:02:f2:92:d5:50:25:b3:eb:ae:0f:fd: 7a:7c:3d:d4:b8:a5:34:66:90:15:9e:28:c8:32:3d:24:e7:2c: 99:b6:49:36:12:7b:e2:70:66:07:97:23:d9:95:ad:d6:e3:4c: 9c:18:e9:1b:fd:b5:5a:fc:76:2e:34:cc:54:5d:ef:8d:4d:b4: 2a:db:5e:14:5b:74:d1:19:74:41:76:3a:51:ee:48:bf:a8:74: 8a:67:a2:ce:23:ed:c3:67:49:c7:2b:d3:b3:ac:94:9d:f6:24: 74:3d:25:e9:10:49:01:1c:4d:29:bc:60:fe:b1:f6:e3:19:08: 44:93:f5:b5:15:5e:05:23:27:21:7a:95:17:ee:74:4a:0e:1e: c8:de:fa:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwOTI0MTgyOTQ0WhcNMjYxMDAxMTgyOTQ0WjAYMRYwFAYD VQQDEw02YWI1NmMxOC1iM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QG3042kBpGkygokMTmbfiINdJmiooHCNkaa845r5eQPUBEttlpcfWckZknv BggKB7x/dE3EwAzERdMwn/stR+T/S56u8BTgDCJt+bAvwJRuUc+I5bskEAC/ahaA AWk/QMgMkcKEyVHBaP7M8bbfaiIAqfEMCf4tDXnvL60RXaHdmRoLbhC645DQsaZe VsRxaGkNC4ftMus/zSeWePuFr2bpR9RoaF33G7GQ7mq7zMXGQnzk5O4YmBWQPa8+ y25uJVTSHUTmpdIAuIvUQs2LN1QpmHW3WEcmYiB8KTHRyH8NazlDwzJLPX42kF/z P09qRHdYe2MqW7bb3PTmJ25CYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfdznjk PVrYGVeM9Ih3lQP6Irm4MB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH49nyzZyFyPRxp10YVtcsqffwmeLNKHdBbhj155ef5W9PoDElc3hcrVuQpDP EpfMqKUh2FG9w7qdiUydP229s3zwbM5zmXN9Ln5b6fHxInhoMAEZ6ucI1fwnwp9x T85CxxqWtha772hTG4PegyN19TU4fALyktVQJbPrrg/9enw91LilNGaQFZ4oyDI9 JOcsmbZJNhJ74nBmB5cj2ZWt1uNMnBjpG/21Wvx2LjTMVF3vjU20KtteFFt00Rl0 QXY6Ue5Iv6h0imeiziPtw2dJxyvTs6yUnfYkdD0l6RBJARxNKbxg/rH24xkIRJP1 tRVeBSMnIXqVF+50Sg4eyN76Yw== -----END CERTIFICATE-----Generated at Sat Sep 26 08:34:09 2026 by rpki-client