$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: XrkuM2SG+ZQd1WM0GXHjk9PxJLCUNQbhj47apkKND94= Subject key identifier: 9E:DE:FA:54:13:87:F5:E3:1B:1E:58:58:32:9F:F7:DE:87:91:09:6C Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 098F Signing time: Tue 22 Sep 2026 20:15:30 +0000 Manifest this update: Tue 22 Sep 2026 20:15:29 +0000 Manifest next update: Tue 29 Sep 2026 20:15:29 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: ZQ8oF2EFo6+d+AFPDGbfn+/jVFWrLkSHka5lkgtM+94=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI=) 4: 47B17AE48B2911F198C4B09681EE528E.roa (hash: jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Sep 22 20:15:29 2026 GMT Not After : Sep 29 20:15:29 2026 GMT Subject: CN=6ab2e1e2-664f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:f7:88:31:4f:0a:61:9b:e6:71:f5:49:7a: 77:13:e1:13:99:cc:4d:ec:e6:cf:32:04:8c:c1:f1: 93:49:88:d1:ba:57:e5:50:e3:5c:53:8c:28:c1:cf: 67:5d:19:7c:73:95:f1:68:ce:a5:4a:3b:25:95:a4: c1:be:15:fc:93:66:3e:f6:8f:f6:b6:1a:74:e1:ad: b6:e4:ca:9f:55:93:b4:4c:3e:c3:1f:ef:18:7e:e6: 7a:35:fc:0f:ec:40:16:3b:0d:8c:0a:c6:26:2c:80: e5:6c:0c:0b:e8:1d:a0:92:ac:be:96:ca:f9:50:c9: 0a:73:0e:c2:66:49:28:c4:f2:9c:65:57:73:cd:5b: 4d:f5:d4:ff:8d:c1:39:cb:ac:25:a4:ce:b0:36:52: 1a:dc:3e:f4:37:2b:20:8c:65:27:60:54:7b:af:55: 7c:44:57:07:5e:d9:e6:25:69:b9:02:9f:4c:30:62: f7:50:41:d8:79:d3:2d:44:a8:b6:a9:fb:48:16:78: 1a:22:39:fc:d7:ea:41:9d:d3:1f:1e:72:02:f4:a9: 41:a8:0e:93:b5:2f:2c:33:f1:f6:e7:2a:b7:e2:37: 94:2c:08:53:a3:cf:80:d1:47:b1:88:f7:49:69:65: 5a:f5:d6:df:e4:e1:de:99:a1:94:f3:16:15:d4:6b: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:FA:54:13:87:F5:E3:1B:1E:58:58:32:9F:F7:DE:87:91:09:6C X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:a7:3e:23:e2:5f:77:ac:f7:e3:f4:8b:c2:28:08:40:00: 30:45:26:0c:de:b2:c0:f7:6f:99:85:ad:8e:03:f0:74:88:00: 56:e9:5d:9f:43:f0:2c:3a:ec:f5:dc:8d:70:a1:d8:63:61:ca: 30:f2:26:e9:b3:12:42:40:12:4f:e6:5e:e3:10:ec:52:6d:11: b0:f2:ad:31:6d:11:7f:97:dc:49:be:4e:43:d0:4a:d2:86:a5: 90:89:e4:88:22:6a:e7:ed:c5:fe:9d:c2:45:8e:22:cd:3b:66: 70:0d:a2:95:3d:ae:cb:17:93:82:71:00:3a:47:e2:bb:94:1b: 87:09:5f:08:7a:dc:05:50:2c:6c:01:fb:4f:1c:f9:fd:74:d0: 3b:06:2c:f9:71:c7:a2:d5:34:fd:ef:7e:a1:7e:28:56:bd:a0: 7e:e1:a7:0b:09:bf:89:bc:66:69:51:5c:c0:d1:4c:91:a7:9e: 49:3e:a8:d5:fc:40:1c:78:82:6c:15:38:c2:73:57:d0:2d:45: bd:b9:0c:e1:09:22:4c:63:c0:dd:1d:b3:34:64:60:f9:b6:55: 90:a9:36:85:0e:b5:ba:5f:0e:5d:28:79:09:6d:52:ac:05:3c: 9b:30:f2:7c:da:96:6d:02:14:65:59:0c:01:39:15:e7:c6:5a: cb:84:4c:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwOTIyMjAxNTI5WhcNMjYwOTI5MjAxNTI5WjAYMRYwFAYD VQQDEw02YWIyZTFlMi02NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lf3iDFPCmGb5nH1SXp3E+ETmcxN7ObPMgSMwfGTSYjRulflUONcU4wowc9n XRl8c5XxaM6lSjsllaTBvhX8k2Y+9o/2thp04a225MqfVZO0TD7DH+8YfuZ6NfwP 7EAWOw2MCsYmLIDlbAwL6B2gkqy+lsr5UMkKcw7CZkkoxPKcZVdzzVtN9dT/jcE5 y6wlpM6wNlIa3D70NysgjGUnYFR7r1V8RFcHXtnmJWm5Ap9MMGL3UEHYedMtRKi2 qftIFngaIjn81+pBndMfHnIC9KlBqA6TtS8sM/H25yq34jeULAhTo8+A0UexiPdJ aWVa9dbf5OHemaGU8xYV1Gu7TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7e+lQT h/XjGx5YWDKf996HkQlsMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARWanPiPiX3es9+P0i8IoCEAAMEUmDN6ywPdvmYWtjgPwdIgAVuldn0PwLDrs 9dyNcKHYY2HKMPIm6bMSQkAST+Ze4xDsUm0RsPKtMW0Rf5fcSb5OQ9BK0oalkInk iCJq5+3F/p3CRY4izTtmcA2ilT2uyxeTgnEAOkfiu5QbhwlfCHrcBVAsbAH7Txz5 /XTQOwYs+XHHotU0/e9+oX4oVr2gfuGnCwm/ibxmaVFcwNFMkaeeST6o1fxAHHiC bBU4wnNX0C1FvbkM4QkiTGPA3R2zNGRg+bZVkKk2hQ61ul8OXSh5CW1SrAU8mzDy fNqWbQIUZVkMATkV58Zay4RMLw== -----END CERTIFICATE-----Generated at Wed Sep 23 07:05:37 2026 by rpki-client