$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: Ud5+VktJTN1bpPg/aqCccjfQF7hp/A1gP2CbfVcOWwU= Subject key identifier: E2:DD:AA:90:D7:1D:4B:2F:62:D3:6D:9C:85:11:10:38:43:19:CC:E0 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CD1 Signing time: Tue 12 May 2026 18:40:59 +0000 Manifest this update: Tue 12 May 2026 18:40:59 +0000 Manifest next update: Tue 19 May 2026 18:40:59 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: a8IdLNxeGPJ2TBa31BY0oJGN6UCBMgZqpTo1Ok+37S4=) 2: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 3: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 4: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 5: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 6: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 7: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3390 (0xd3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: May 12 18:40:59 2026 GMT Not After : May 19 18:40:59 2026 GMT Subject: CN=6a03743b-ddb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:0f:26:ff:9d:87:19:b9:10:53:f3:30:4a: 3c:98:52:f4:21:74:bc:d9:4c:70:6d:ff:92:db:4b: 8a:b4:25:14:52:f6:8b:5e:db:7f:be:bb:08:e4:0e: 8e:f0:57:dc:5b:96:9e:91:ea:12:56:0e:32:f3:36: 89:9e:db:5c:70:14:7d:e7:b4:3d:c5:f1:6e:b3:cf: c9:28:41:1e:10:2e:78:bb:de:87:48:d4:96:2e:f9: ad:09:b2:bd:ff:bc:a8:e5:c0:8f:89:4d:76:97:33: cd:37:e7:56:11:29:38:f1:f8:9b:0d:9b:8d:56:22: 97:26:d8:e7:83:ed:a4:2c:c6:0f:1c:a8:09:54:16: ef:ea:21:22:bf:2b:dc:07:80:40:2a:33:57:98:50: 96:3b:fa:2f:38:b0:98:92:5b:49:8e:fe:17:76:0a: 1a:8b:4d:c2:02:a9:c3:b0:b3:b6:d8:14:6f:b3:f4: cf:03:af:2c:61:f8:6d:0a:e5:13:8b:4e:61:fe:a2: f1:4e:a0:5e:e1:7d:be:61:97:2e:50:9d:4f:97:69: b4:d8:1b:d4:08:2e:1c:f3:32:b0:8e:8a:c5:ce:d2: 8c:28:8b:81:5d:3d:c4:cf:e1:ea:00:4a:ba:b6:12: 56:4a:40:a7:c9:58:e0:19:2d:51:01:4d:39:8c:ad: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:AA:90:D7:1D:4B:2F:62:D3:6D:9C:85:11:10:38:43:19:CC:E0 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:60:ca:4d:a2:75:1a:2e:3e:c5:dc:57:ac:d7:f5:c5:c4:e0: f0:ef:cc:4f:2d:af:dd:94:f0:c3:cf:f2:e6:ef:f6:67:fd:29: 42:f5:39:e9:f0:b7:3d:49:51:86:66:3a:82:2f:f4:ab:51:1c: 58:e2:33:90:61:4a:10:97:69:5f:7d:36:10:2b:60:48:23:2d: 56:d7:d3:05:30:ae:c2:d8:6c:df:19:77:50:d0:88:ea:aa:c0: 5c:41:86:76:f9:f7:a1:60:ab:f2:57:5f:55:40:19:76:79:67: f1:21:79:d7:9a:ad:0c:4e:6c:9b:af:1b:95:f4:f2:ac:4a:28: 89:9b:7b:e3:2c:ed:51:e1:69:3c:37:62:f4:aa:a5:ba:dd:e9: e3:5a:13:d2:74:2b:f3:a9:08:16:59:55:dc:ae:31:07:10:ca: e9:34:bb:1b:6a:b3:36:e4:12:b7:0d:ca:59:46:3c:64:e4:84: 90:93:17:bd:9c:4f:d5:e0:5b:83:9d:2d:ff:57:f8:05:93:f0: 2b:f0:76:c3:2a:59:de:79:3b:f8:10:ed:da:96:0b:d5:3a:c5: 93:37:4b:cc:73:7e:20:02:7c:bc:9e:d2:92:9b:10:e0:9f:da: 17:c4:71:91:02:16:7f:3f:80:6d:b7:57:8e:06:6a:18:6f:50: 08:c2:71:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNTEyMTg0MDU5WhcNMjYwNTE5MTg0MDU5WjAYMRYwFAYD VQQDEw02YTAzNzQzYi1kZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreoPJv+dhxm5EFPzMEo8mFL0IXS82Uxwbf+S20uKtCUUUvaLXtt/vrsI5A6O 8FfcW5aekeoSVg4y8zaJnttccBR957Q9xfFus8/JKEEeEC54u96HSNSWLvmtCbK9 /7yo5cCPiU12lzPNN+dWESk48fibDZuNViKXJtjng+2kLMYPHKgJVBbv6iEivyvc B4BAKjNXmFCWO/ovOLCYkltJjv4Xdgoai03CAqnDsLO22BRvs/TPA68sYfhtCuUT i05h/qLxTqBe4X2+YZcuUJ1Pl2m02BvUCC4c8zKwjorFztKMKIuBXT3Ez+HqAEq6 thJWSkCnyVjgGS1RAU05jK2DTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLdqpDX HUsvYtNtnIUREDhDGczgMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACGDKTaJ1Gi4+xdxXrNf1xcTg8O/MTy2v3ZTww8/y5u/2Z/0pQvU56fC3PUlR hmY6gi/0q1EcWOIzkGFKEJdpX302ECtgSCMtVtfTBTCuwths3xl3UNCI6qrAXEGG dvn3oWCr8ldfVUAZdnln8SF515qtDE5sm68blfTyrEooiZt74yztUeFpPDdi9Kql ut3p41oT0nQr86kIFllV3K4xBxDK6TS7G2qzNuQStw3KWUY8ZOSEkJMXvZxP1eBb g50t/1f4BZPwK/B2wypZ3nk7+BDt2pYL1TrFkzdLzHN+IAJ8vJ7SkpsQ4J/aF8Rx kQIWfz+AbbdXjgZqGG9QCMJx+Q== -----END CERTIFICATE-----Generated at Wed May 13 12:45:20 2026 by rpki-client