$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: 1OVwrwvm04PGort8L1c3WJ3Xg9gz9QIK59el3PAQq7U= Subject key identifier: E3:5C:5E:60:16:4E:5C:4E:8D:7E:44:EB:DE:F2:62:7B:51:15:31:E1 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09B0 Signing time: Tue 12 May 2026 19:59:36 +0000 Manifest this update: Tue 12 May 2026 19:59:36 +0000 Manifest next update: Tue 19 May 2026 19:59:36 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: lfc7XT3N8UpCXsHYHYWTCTk6XQOHMAB/NBJq9SkXCV8=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: May 12 19:59:36 2026 GMT Not After : May 19 19:59:36 2026 GMT Subject: CN=6a0386a8-7703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:eb:7d:31:ed:0d:9f:1d:8e:a8:c2:c8:f7: 23:b8:63:7f:1b:d4:e7:9d:ca:4c:14:d2:97:31:46: 2b:8c:6f:20:ab:01:41:3e:be:6b:d1:98:2a:b8:41: ee:bc:62:aa:97:76:2b:a2:31:36:b1:51:bb:2a:ca: 01:63:8e:8e:c0:48:84:25:07:c7:80:98:62:9c:e3: 7e:45:73:00:09:e8:f6:2c:a2:b2:43:3e:a1:aa:3f: cf:2d:33:2b:86:49:74:bc:65:48:1f:1e:c9:e9:cc: 90:d8:30:dc:3c:dc:ba:a2:00:1d:22:e8:0a:c4:31: 36:88:20:8a:72:3f:f4:82:33:f4:02:20:e6:59:63: 11:d2:7b:93:a1:7a:0e:8a:8e:e6:53:2a:01:a4:94: 5e:f5:d9:96:5e:d7:02:9c:92:59:d4:13:35:95:03: 02:14:01:90:e3:a4:f3:2e:8f:2c:0c:01:97:32:82: 2e:7d:b3:4c:f5:f0:cd:78:3e:53:86:a0:7b:b4:19: bf:5e:d4:65:56:bf:ba:10:1b:c8:b7:24:11:fd:79: ea:a0:6a:85:06:c0:c3:da:32:55:56:8d:c3:27:d7: 75:68:b3:5f:b6:ef:f5:64:d8:00:93:62:e2:8c:b3: 64:ed:a7:20:15:1c:ff:75:27:cc:71:ad:8f:65:91: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:5E:60:16:4E:5C:4E:8D:7E:44:EB:DE:F2:62:7B:51:15:31:E1 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:78:f3:e5:97:cc:2c:10:05:02:85:eb:5d:dd:0e:a7:61:d0: cc:18:3d:b7:74:e7:d4:39:ea:c9:b9:fd:3b:a8:93:00:f6:15: bb:0d:bb:5e:11:9a:3e:7b:c8:6f:a4:97:1a:31:4f:84:a4:6a: 4a:d9:b8:6a:ee:52:33:c8:63:fc:57:55:c1:3f:f3:7c:1c:05: 8f:ff:c2:54:b6:73:a5:40:10:0d:d0:b4:5a:f0:9b:79:3f:f7: 77:c7:10:b7:8c:00:19:3a:c4:7d:47:27:c3:ac:3e:c6:b6:7b: 3d:74:5f:08:f6:11:64:f4:ce:8f:be:62:31:49:1e:dc:cf:58: a9:a7:07:f5:1d:a5:8f:92:96:76:52:09:a6:e9:a3:46:59:4b: e5:b1:66:b9:ba:16:9a:e1:dd:08:db:6d:99:73:12:b7:54:ee: ff:ed:26:53:33:8e:cb:e0:fd:31:22:2e:47:4f:aa:3c:ba:81: 61:ac:c1:f9:88:74:cb:3d:57:fe:1c:0b:aa:99:5f:2a:af:a3: 38:c0:b6:28:9c:b8:75:48:1f:e9:d2:29:cf:84:5b:86:6b:2b: de:97:c6:ba:4e:4c:4d:6a:8e:76:83:a3:bf:8b:b2:ce:24:93: b5:c5:c9:7b:29:42:9c:ca:64:6c:75:49:cc:8a:cf:52:64:c8: f0:f1:5a:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwNTEyMTk1OTM2WhcNMjYwNTE5MTk1OTM2WjAYMRYwFAYD VQQDEw02YTAzODZhOC03NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx3rfTHtDZ8djqjCyPcjuGN/G9TnncpMFNKXMUYrjG8gqwFBPr5r0ZgquEHu vGKql3YrojE2sVG7KsoBY46OwEiEJQfHgJhinON+RXMACej2LKKyQz6hqj/PLTMr hkl0vGVIHx7J6cyQ2DDcPNy6ogAdIugKxDE2iCCKcj/0gjP0AiDmWWMR0nuToXoO io7mUyoBpJRe9dmWXtcCnJJZ1BM1lQMCFAGQ46TzLo8sDAGXMoIufbNM9fDNeD5T hqB7tBm/XtRlVr+6EBvItyQR/XnqoGqFBsDD2jJVVo3DJ9d1aLNftu/1ZNgAk2Li jLNk7acgFRz/dSfMca2PZZEwYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONcXmAW TlxOjX5E697yYntRFTHhMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlHjz5ZfMLBAFAoXrXd0Op2HQzBg9t3Tn1Dnqybn9O6iTAPYVuw27XhGaPnvI b6SXGjFPhKRqStm4au5SM8hj/FdVwT/zfBwFj//CVLZzpUAQDdC0WvCbeT/3d8cQ t4wAGTrEfUcnw6w+xrZ7PXRfCPYRZPTOj75iMUke3M9YqacH9R2lj5KWdlIJpumj RllL5bFmuboWmuHdCNttmXMSt1Tu/+0mUzOOy+D9MSIuR0+qPLqBYazB+Yh0yz1X /hwLqplfKq+jOMC2KJy4dUgf6dIpz4Rbhmsr3pfGuk5MTWqOdoOjv4uyziSTtcXJ eylCnMpkbHVJzIrPUmTI8PFaVg== -----END CERTIFICATE-----Generated at Wed May 13 04:52:16 2026 by rpki-client