$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json) Hash identifier: n0+rELYwciWt48IFGsvz6lyKVdQZIDEW/uw9OwNeGtU= Subject key identifier: 74:C9:42:46:D0:46:5A:DF:3A:9E:D4:41:C4:69:7C:EC:AF:9F:62:26 Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft Manifest number: 058A Signing time: Thu 24 Sep 2026 23:07:53 +0000 Manifest this update: Thu 24 Sep 2026 23:07:53 +0000 Manifest next update: Thu 01 Oct 2026 23:07:53 +0000 Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: bjfxLduZ8Q+ybroSgj4GWua0UIQCWuN9uL2o+KVvv78=) 2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: /jQYkc5f5l8Pbu5OorjTzCnm6qjRNO98wm8eYK6GV7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463 Validity Not Before: Sep 24 23:07:53 2026 GMT Not After : Oct 1 23:07:53 2026 GMT Subject: CN=6ab5ad49-6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:94:fb:1a:4f:41:22:e4:a2:43:0f:21:55: e0:ee:41:99:b7:73:e6:22:9d:f3:75:e9:96:1c:d0: 3a:63:06:f6:d9:59:b5:63:89:c7:20:7c:3a:d6:9a: dd:e8:77:f9:9f:a4:d3:04:a1:ef:46:ed:d8:f0:ba: 33:80:1d:79:7d:a0:5d:8c:b8:10:5b:26:19:61:3b: 62:38:a8:63:95:62:5a:f1:97:45:8d:51:a9:92:90: b6:01:6c:a2:10:5e:27:21:82:78:cd:fc:46:e8:03: c4:d5:c6:5d:cf:a2:44:aa:f0:d6:0f:3f:a5:86:2a: 7a:e5:3d:ff:f5:a6:6a:d5:65:10:fc:c4:25:87:58: a2:24:22:9c:fd:6a:51:b8:98:4c:46:66:29:dd:b1: 5d:b6:ba:6b:b3:27:a0:0a:2d:70:44:10:63:c0:fb: d4:c2:ce:03:2b:f2:d7:8d:11:cd:48:f3:65:b5:59: 11:cd:8d:ee:92:6e:ce:4d:c4:9a:af:fe:05:7b:dd: 49:2e:16:b1:05:c4:33:66:4e:69:f2:64:3d:fb:dd: 56:3d:a7:07:ad:0c:2d:2f:80:05:23:60:98:66:a3: d2:fa:8b:29:96:36:91:a0:8f:e7:30:22:3d:95:03: fd:b4:cb:d7:f9:40:ff:84:97:30:94:c5:bd:bf:bd: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:42:46:D0:46:5A:DF:3A:9E:D4:41:C4:69:7C:EC:AF:9F:62:26 X509v3 Authority Key Identifier: keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:24:a1:df:d3:41:f3:cc:e0:91:e2:f8:61:12:44:67:48:18: 81:bd:31:33:c7:0a:c3:61:6c:82:eb:2d:2d:81:eb:8d:c3:fb: 05:da:a4:45:53:68:3b:d8:61:fd:98:9e:c2:3f:52:88:da:cc: 0e:fc:4b:52:7f:b9:4e:82:f5:a5:b6:6c:bb:60:89:ea:23:53: 73:fb:dc:e9:75:59:26:64:13:cd:f1:14:3c:46:fb:f8:e8:4e: 65:a2:69:c2:6e:76:cc:86:7c:53:0b:60:4f:c4:e6:8a:55:c7: c2:ac:4e:0e:84:f8:23:23:46:06:88:a6:8a:e8:cc:05:09:99: d7:d1:f4:34:db:fa:29:aa:6e:e5:32:56:79:ba:79:dc:82:b6: 24:34:1a:47:68:b2:65:8c:31:2b:e0:e8:97:98:a2:42:b0:4d: d1:c3:02:df:80:7d:f3:d0:bf:df:04:17:18:50:06:3a:57:23: d1:71:8b:d2:bc:51:9c:19:f1:17:8a:f3:c3:63:aa:f3:55:d5: 50:52:c6:d5:89:a6:64:0f:8e:40:de:3b:5a:d6:62:91:b0:0b: 63:bb:10:8a:c4:db:b0:4d:b3:24:84:b5:9c:4f:12:bb:e2:63: c0:99:10:45:d1:b7:92:1e:7f:ec:74:42:00:45:b5:d0:ad:4c: ee:34:9b:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF QTZERDM0NjMwHhcNMjYwOTI0MjMwNzUzWhcNMjYxMDAxMjMwNzUzWjAYMRYwFAYD VQQDEw02YWI1YWQ0OS02ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo2U+xpPQSLkokMPIVXg7kGZt3PmIp3zdemWHNA6Ywb22Vm1Y4nHIHw61prd 6Hf5n6TTBKHvRu3Y8LozgB15faBdjLgQWyYZYTtiOKhjlWJa8ZdFjVGpkpC2AWyi EF4nIYJ4zfxG6APE1cZdz6JEqvDWDz+lhip65T3/9aZq1WUQ/MQlh1iiJCKc/WpR uJhMRmYp3bFdtrprsyegCi1wRBBjwPvUws4DK/LXjRHNSPNltVkRzY3ukm7OTcSa r/4Fe91JLhaxBcQzZk5p8mQ9+91WPacHrQwtL4AFI2CYZqPS+ospljaRoI/nMCI9 lQP9tMvX+UD/hJcwlMW9v73X9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTJQkbQ RlrfOp7UQcRpfOyvn2ImMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut YXFDQkN3SmV0SlBxYmROR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGySh39NB88zgkeL4YRJEZ0gYgb0xM8cKw2FsgustLYHrjcP7BdqkRVNoO9hh /Ziewj9SiNrMDvxLUn+5ToL1pbZsu2CJ6iNTc/vc6XVZJmQTzfEUPEb7+OhOZaJp wm52zIZ8UwtgT8TmilXHwqxODoT4IyNGBoimiujMBQmZ19H0NNv6Kapu5TJWebp5 3IK2JDQaR2iyZYwxK+Dol5iiQrBN0cMC34B989C/3wQXGFAGOlcj0XGL0rxRnBnx F4rzw2Oq81XVUFLG1YmmZA+OQN47WtZikbALY7sQisTbsE2zJIS1nE8Su+JjwJkQ RdG3kh5/7HRCAEW10K1M7jSbUQ== -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:27 2026 by rpki-client