$ rpki-client -vvvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: TlxHIpcgnjUpcvfaapYvVfFJ6w0WUWYgUlaqMgaswsE= Subject key identifier: DC:12:1E:21:8B:EA:29:7F:2F:88:9D:31:FB:5A:49:41:96:CD:98:64 Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 55 Signing time: Fri 25 Sep 2026 08:21:24 +0000 Manifest this update: Fri 25 Sep 2026 08:21:24 +0000 Manifest next update: Fri 02 Oct 2026 08:21:24 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: ww2Y5ia/DwCSdCnlLpKe4yUjIsYOUPLHomTeLIw7fTI=) 2: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) 3: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: Sep 25 08:21:24 2026 GMT Not After : Oct 2 08:21:24 2026 GMT Subject: CN=6ab62f04-7d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:b8:7a:7b:bd:30:75:da:3f:41:a9:97:e8: bf:dd:d6:5b:52:0a:be:17:30:5f:cd:dc:28:72:ad: 57:92:3f:59:6a:75:ec:9b:1b:28:9b:56:bb:3b:78: de:c6:34:9b:69:f9:37:0c:83:8c:9c:8f:56:c4:b5: 55:fe:87:bd:1a:39:fc:56:8f:6f:57:90:76:70:d0: 64:23:f5:1e:88:55:c1:7a:90:5e:32:65:24:d6:87: a9:d7:ab:02:b1:0b:71:28:6a:6f:8b:40:47:73:22: 6b:5f:2a:04:82:f4:41:69:ef:bc:2e:ec:8e:f3:13: 94:98:e2:c9:81:26:79:80:c8:22:c3:8f:c7:4d:2b: 7b:c0:04:f1:54:05:67:ea:f5:10:ff:57:a8:31:8b: e9:a8:83:9c:de:5f:4a:17:6b:ef:5a:a4:5f:9a:9e: fe:04:74:c7:be:ef:9c:1d:fe:07:6d:bc:b5:53:7f: 54:85:6b:eb:f7:c9:0b:fd:32:00:4c:0d:c0:03:be: c5:85:85:d8:e9:5c:e7:b2:8f:fd:7f:4f:d2:c5:61: fa:f5:1d:fa:f7:31:c8:3c:12:d3:15:c4:25:75:9b: f0:ae:46:f1:bb:2d:0c:84:43:64:32:26:09:c2:a0: 9d:4e:f8:be:be:b2:fe:5e:e3:e6:f3:49:db:78:f0: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:12:1E:21:8B:EA:29:7F:2F:88:9D:31:FB:5A:49:41:96:CD:98:64 X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:aa:75:e5:12:39:33:39:8f:4b:23:75:55:97:88:56:97:bb: 16:2c:ba:d7:f0:2a:c0:52:d5:f7:14:d7:6a:31:f4:68:f7:93: 4e:99:29:34:49:7f:cf:cc:a8:fb:99:82:62:76:62:88:50:d3: 44:74:98:03:42:09:17:02:3b:40:b0:43:16:f1:45:c5:1a:09: 62:82:f5:64:4f:a3:cf:17:e6:c8:fd:1f:51:99:fa:1b:66:fd: 20:03:0e:1a:85:ec:b5:ee:88:a4:60:c4:bd:f7:ba:ae:0c:8f: af:6d:4d:13:7b:af:5e:ec:9b:d6:4e:8c:1c:0d:11:fa:3e:d6: c5:f5:c1:23:67:47:9a:e5:41:4d:11:45:af:07:41:cf:5d:f4: b5:03:0c:2b:67:43:51:3d:ad:6a:13:35:c8:dc:12:31:8b:26: 91:47:0c:c7:b4:c1:80:e7:d3:14:29:2b:7f:8e:99:b5:6f:f4: 93:72:b7:c7:09:0c:82:b0:ef:a6:a7:ee:b5:fa:96:d5:27:c6: 29:12:f6:b5:4f:97:4e:81:3b:4e:1b:be:e1:97:86:e5:1a:55: 66:c5:fd:18:24:05:69:03:cd:d0:cb:e7:f6:f7:8d:a1:3c:23: 4c:77:d7:18:87:2a:84:89:5e:17:75:25:b7:be:cc:38:50:22: f6:dd:9a:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjA5MjUwODIxMjRaFw0yNjEwMDIwODIxMjRaMBgxFjAUBgNV BAMTDTZhYjYyZjA0LTdkNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2q7h6e70wddo/QamX6L/d1ltSCr4XMF/N3ChyrVeSP1lqdeybGyibVrs7eN7G NJtp+TcMg4ycj1bEtVX+h70aOfxWj29XkHZw0GQj9R6IVcF6kF4yZSTWh6nXqwKx C3Eoam+LQEdzImtfKgSC9EFp77wu7I7zE5SY4smBJnmAyCLDj8dNK3vABPFUBWfq 9RD/V6gxi+mog5zeX0oXa+9apF+anv4EdMe+75wd/gdtvLVTf1SFa+v3yQv9MgBM DcADvsWFhdjpXOeyj/1/T9LFYfr1Hfr3Mcg8EtMVxCV1m/CuRvG7LQyEQ2QyJgnC oJ1O+L6+sv5e4+bzSdt48EYpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3BIeIYvq KX8viJ0x+1pJQZbNmGQwHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgqnXlEjkzOY9LI3VVl4hWl7sWLLrX8CrAUtX3FNdqMfRo95NOmSk0SX/PzKj7 mYJidmKIUNNEdJgDQgkXAjtAsEMW8UXFGgligvVkT6PPF+bI/R9RmfobZv0gAw4a hey17oikYMS997quDI+vbU0Te69e7JvWTowcDRH6PtbF9cEjZ0ea5UFNEUWvB0HP XfS1AwwrZ0NRPa1qEzXI3BIxiyaRRwzHtMGA59MUKSt/jpm1b/STcrfHCQyCsO+m p+61+pbVJ8YpEva1T5dOgTtOG77hl4blGlVmxf0YJAVpA83Qy+f2942hPCNMd9cY hyqEiV4XdSW3vsw4UCL23ZpK -----END CERTIFICATE-----Generated at Sat Sep 26 20:47:24 2026 by rpki-client