$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: CSdZtakdSz7WiWIPpZIb4kskccWOyY6zoEjWj5luvQQ= Subject key identifier: 23:1B:8A:02:34:F3:C7:E2:F0:71:D6:8D:18:3F:9D:E5:AC:17:02:54 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 2042 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1F3B Signing time: Sat 10 Oct 2026 16:04:08 +0000 Manifest this update: Sat 10 Oct 2026 16:04:07 +0000 Manifest next update: Sat 17 Oct 2026 16:04:07 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: W/AXvdvQ6be9OakmGQhMiJG51QDAwrb8X7PLgfdqGS0=) 2: CC2D8BDE86EF11F19E006003A7EE528E.roa (hash: d4i+z1Mv2GtUqNC8gLCSYFchOfSALA1lnJbOM2UDKmA=) 3: CB0B87D886EF11F19E006003A7EE528E.roa (hash: 01D0gNOrmeWfFnfKx9BZLWhsvfkWia8AUzDxIIpl65k=) 4: F42FB236896C11F1ABDFBC266B11F970.roa (hash: 7QqNy76CzIOhRtacRyoTS6R/J83/tPFS1SCpQHSPA5M=) 5: C9E1BA1286EF11F19E006003A7EE528E.roa (hash: KeHkWNIoWYBYRdc3VPh8HjB66Rci2N2NvVGwtvQ9bgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8258 (0x2042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Oct 10 16:04:07 2026 GMT Not After : Oct 17 16:04:07 2026 GMT Subject: CN=6aca61f8-f236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:de:b7:20:36:92:1a:a9:8e:6c:86:02:0d: 2d:24:83:8a:7a:e2:94:46:4d:8f:1a:02:ae:2d:59: 35:e8:7b:de:e8:0d:9f:11:78:00:1e:1b:f4:28:54: 22:7c:23:fb:24:bc:c7:88:9c:b2:dc:f0:48:cf:e0: c8:d2:9c:2b:29:67:7d:01:fc:ed:64:c8:a9:9b:ad: 72:f2:eb:64:9d:8e:ce:ce:fb:f8:fe:ec:56:37:7c: 9c:f3:e8:53:5d:32:35:0e:29:b3:69:89:3c:05:8b: 4d:e0:c9:cd:2c:67:da:ca:f2:06:5b:f5:ae:ec:9e: e8:70:46:ae:af:5f:1d:22:b8:c8:86:21:ed:ca:7a: ba:27:42:83:68:3f:03:55:57:43:d4:9f:74:56:b2: 17:e4:cd:ae:bc:18:b7:86:2a:39:69:60:00:53:9e: 16:ab:11:a7:71:0f:9d:65:b3:6a:3c:93:b1:17:cc: 30:04:f8:51:23:c8:df:9f:8f:1c:96:4f:a0:ac:fa: b5:1f:eb:d3:d0:60:bf:64:84:c2:14:1f:28:cd:7d: a7:88:8d:7e:65:de:b1:69:ff:b2:ba:24:6a:3e:44: 5e:21:a3:a9:f3:31:5f:51:53:95:83:bf:6b:31:6b: 50:d5:ab:75:f3:63:f8:ef:c7:3e:0a:bc:72:79:df: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:8A:02:34:F3:C7:E2:F0:71:D6:8D:18:3F:9D:E5:AC:17:02:54 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:45:69:a9:b1:ae:96:bf:5d:8c:bd:69:88:b7:7e:21:80:ab: e0:5d:d5:ea:df:22:5f:33:0e:b9:85:0e:f5:68:df:10:c1:7b: 1b:5b:d9:51:44:09:97:aa:de:81:53:98:92:3a:61:5e:93:7a: 68:c9:de:c7:f5:c6:c8:b3:7c:e5:01:06:44:32:22:82:94:16: b5:f9:7f:21:c8:05:d4:28:00:bd:a7:73:1f:12:13:f5:98:21: 95:1e:b2:aa:2d:06:95:df:c0:a1:bf:1f:22:be:92:11:c5:e5: 32:f3:9f:88:30:b2:27:7a:f8:7f:de:0a:72:af:64:da:15:da: b1:06:ec:41:c7:93:30:62:1b:99:e8:39:23:a8:24:49:0d:0f: f9:d8:2a:36:9d:e5:22:9e:cc:c1:6d:55:97:09:f1:a6:a5:6d: 0e:48:ed:ca:e0:64:2d:10:df:89:80:3a:88:c9:e3:9c:be:22: 58:36:12:55:dc:69:3a:a9:e2:a3:32:49:88:16:d1:92:a7:8c: db:a7:37:64:7e:0a:9b:5c:18:87:c4:c5:39:3c:2c:ab:fc:9b: 5e:f3:80:16:fe:76:84:a1:7b:6a:82:54:65:92:43:21:f8:66: 49:09:91:aa:31:6f:ab:37:af:2d:01:53:58:b9:a9:ce:ee:13: 7f:49:e0:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYxMDEwMTYwNDA3WhcNMjYxMDE3MTYwNDA3WjAYMRYwFAYD VQQDEw02YWNhNjFmOC1mMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LjetyA2khqpjmyGAg0tJIOKeuKURk2PGgKuLVk16Hve6A2fEXgAHhv0KFQi fCP7JLzHiJyy3PBIz+DI0pwrKWd9AfztZMipm61y8utknY7Ozvv4/uxWN3yc8+hT XTI1DimzaYk8BYtN4MnNLGfayvIGW/Wu7J7ocEaur18dIrjIhiHtynq6J0KDaD8D VVdD1J90VrIX5M2uvBi3hio5aWAAU54WqxGncQ+dZbNqPJOxF8wwBPhRI8jfn48c lk+grPq1H+vT0GC/ZITCFB8ozX2niI1+Zd6xaf+yuiRqPkReIaOp8zFfUVOVg79r MWtQ1at182P478c+Crxyed+htwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMbigI0 88fi8HHWjRg/neWsFwJUMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXUVpqbGulr9djL1piLd+IYCr4F3V6t8iXzMOuYUO9WjfEMF7G1vZUUQJl6re gVOYkjphXpN6aMnex/XGyLN85QEGRDIigpQWtfl/IcgF1CgAvadzHxIT9ZghlR6y qi0Gld/Aob8fIr6SEcXlMvOfiDCyJ3r4f94Kcq9k2hXasQbsQceTMGIbmeg5I6gk SQ0P+dgqNp3lIp7MwW1VlwnxpqVtDkjtyuBkLRDfiYA6iMnjnL4iWDYSVdxpOqni ozJJiBbRkqeM26c3ZH4Km1wYh8TFOTwsq/ybXvOAFv52hKF7aoJUZZJDIfhmSQmR qjFvqzevLQFTWLmpzu4Tf0ngPA== -----END CERTIFICATE-----Generated at Sun Oct 11 08:57:57 2026 by rpki-client