$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: QpBO598i+TpHROi+i6/OcyHMz+XLzOWKSOfzCYlogvM= Subject key identifier: 8A:AE:68:DC:38:03:46:E1:1B:36:B9:B6:81:B4:11:0E:17:3E:E3:6E Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1FC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1ED7 Signing time: Wed 13 May 2026 02:23:47 +0000 Manifest this update: Wed 13 May 2026 02:23:46 +0000 Manifest next update: Wed 20 May 2026 02:23:46 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: LHu9cseJTqKp5ccvwjJq135utn9zZG7dyiOFEXTaAVo=) 2: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: KoK5Iooccdm7bF48V5K9NM5q4apf+ptZxZFi9KLj3gs=) 3: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: WHxcaULN9Ht//+q/uqSA9HqAeVbgvVuD0sa6vgTe7C4=) 4: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: E8KCulpW5x2sAiN2CA+1RrMgxss5nyN9/hSLHOWwHsE=) 5: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=) 6: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=) 7: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8131 (0x1fc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: May 13 02:23:46 2026 GMT Not After : May 20 02:23:46 2026 GMT Subject: CN=6a03e0b3-8fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:23:7c:72:1a:66:04:fb:b7:62:5b:31:d0: 5a:d9:5c:4e:d4:fa:98:98:56:4d:cc:94:3f:4f:7c: 87:80:2c:dd:19:da:38:73:59:25:a7:98:c5:55:25: 82:d2:c0:ca:40:c9:d2:d4:cc:f3:8a:08:86:d9:a8: fe:cf:e5:00:b9:23:27:1f:ab:35:d2:10:55:6e:a3: 89:e5:31:43:89:f6:50:80:fa:9e:3d:3c:5a:eb:43: 8c:86:ea:a0:99:6a:21:74:a7:1e:56:7f:81:fc:a7: ae:1b:5a:16:18:ab:0d:5e:de:ea:c5:bc:fc:f7:de: 44:2e:c9:7e:c2:70:1a:b3:de:24:9b:c3:1b:34:0c: bd:72:a6:bc:3e:ff:61:e6:ca:53:7c:87:05:23:65: 05:cd:c5:90:2c:62:8a:82:1f:d1:9b:c8:be:3b:e9: 38:b6:e6:33:0a:eb:54:51:24:cd:20:24:f1:e4:9c: bc:37:62:3d:35:06:a3:17:6b:70:de:63:06:22:a0: 3f:66:9b:00:89:b8:37:a4:fa:e3:1c:1a:53:f7:88: 71:0d:78:ce:50:d1:8c:ab:65:34:c5:e7:fe:53:8b: 58:30:0f:b0:63:1b:85:2e:84:77:c7:38:a0:50:0e: 96:db:38:70:9c:ff:20:eb:92:05:80:ed:d9:b8:50: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:68:DC:38:03:46:E1:1B:36:B9:B6:81:B4:11:0E:17:3E:E3:6E X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:3a:f6:f6:d9:86:35:73:09:b4:9f:72:14:98:1d:e0:e0: 40:64:86:f8:1e:73:24:8b:7e:d5:7b:29:6f:44:f8:74:e7:71: 08:36:53:f3:52:4a:22:f8:88:75:4c:e6:3a:6c:9b:f0:1e:6a: c4:97:fc:64:e4:25:be:85:da:ec:c8:2a:bb:5b:06:6c:08:f7: bb:89:0e:5f:f5:f9:7a:1c:c3:e5:d1:21:5d:e3:39:e8:c7:ab: bf:8b:25:77:e2:c7:57:d2:9c:73:a0:0f:cd:75:5e:1a:0c:31: 64:55:50:7d:e2:25:ef:1e:86:0c:d0:06:30:33:3d:5a:d8:39: b9:cc:71:c7:f8:0d:fb:50:92:b8:f6:13:0a:f2:9a:f4:ba:3e: 7d:66:f4:af:1d:b3:7e:02:29:0a:98:18:8f:2c:aa:83:87:91: 79:65:1f:4b:c5:4b:98:ba:bf:b0:d5:52:97:1f:8d:65:be:72: 10:6a:00:86:bf:5e:5c:95:d3:d7:fd:d5:ad:1b:48:cd:ca:f9: 24:89:3c:3a:a5:94:64:56:4e:66:d8:14:7a:72:e2:8b:36:45: a9:dd:cb:9e:68:3f:11:75:ef:7b:aa:38:34:3c:fb:cc:0b:18: 67:33:cf:08:a6:1a:26:7b:83:d6:29:56:0e:c7:db:2c:4f:78: ec:07:8f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwNTEzMDIyMzQ2WhcNMjYwNTIwMDIyMzQ2WjAYMRYwFAYD VQQDEw02YTAzZTBiMy04ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooEjfHIaZgT7t2JbMdBa2VxO1PqYmFZNzJQ/T3yHgCzdGdo4c1klp5jFVSWC 0sDKQMnS1MzzigiG2aj+z+UAuSMnH6s10hBVbqOJ5TFDifZQgPqePTxa60OMhuqg mWohdKceVn+B/KeuG1oWGKsNXt7qxbz8995ELsl+wnAas94km8MbNAy9cqa8Pv9h 5spTfIcFI2UFzcWQLGKKgh/Rm8i+O+k4tuYzCutUUSTNICTx5Jy8N2I9NQajF2tw 3mMGIqA/ZpsAibg3pPrjHBpT94hxDXjOUNGMq2U0xef+U4tYMA+wYxuFLoR3xzig UA6W2zhwnP8g65IFgO3ZuFDPQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIquaNw4 A0bhGza5toG0EQ4XPuNuMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcps69vbZhjVzCbSfchSYHeDgQGSG+B5zJIt+1Xspb0T4dOdxCDZT81JKIviI dUzmOmyb8B5qxJf8ZOQlvoXa7Mgqu1sGbAj3u4kOX/X5ehzD5dEhXeM56Merv4sl d+LHV9Kcc6APzXVeGgwxZFVQfeIl7x6GDNAGMDM9Wtg5ucxxx/gN+1CSuPYTCvKa 9Lo+fWb0rx2zfgIpCpgYjyyqg4eReWUfS8VLmLq/sNVSlx+NZb5yEGoAhr9eXJXT 1/3VrRtIzcr5JIk8OqWUZFZOZtgUenLiizZFqd3Lnmg/EXXve6o4NDz7zAsYZzPP CKYaJnuD1ilWDsfbLE947AePMQ== -----END CERTIFICATE-----Generated at Wed May 13 15:32:54 2026 by rpki-client