$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: ExHvkitheEDA6egdia38bQLjg9MmYC1Fgt1QTbsDOGk= Subject key identifier: 9F:F1:E8:0F:05:0D:23:E3:1D:E5:5D:87:17:4F:47:1E:0B:A2:7C:96 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 014E Signing time: Sat 05 Sep 2026 05:07:51 +0000 Manifest this update: Sat 05 Sep 2026 05:07:50 +0000 Manifest next update: Sat 12 Sep 2026 05:07:50 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: qAifyDhus2WrxRLoiZH0N1JZRqp/nWQ3xARJf6EVZpk=) 2: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=) 3: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Sep 5 05:07:50 2026 GMT Not After : Sep 12 05:07:50 2026 GMT Subject: CN=6a9ba3a7-db49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:1f:22:d9:fc:be:63:f0:43:4b:40:1b:bd: 0a:e1:19:78:db:8a:17:65:c1:18:b8:9b:c2:29:c6: 4c:69:26:65:58:37:0e:d8:4a:13:cd:b9:02:c2:60: 9e:bf:ba:08:db:d1:0b:bc:0c:b4:53:6b:7e:f5:a4: d2:44:05:bf:e2:f9:7d:0c:db:e6:66:b9:2b:df:e4: 9a:82:49:59:fa:f8:92:2e:b3:d4:b0:e6:3e:d2:cc: 40:40:3c:99:fc:b0:95:d3:2c:bd:95:30:5c:10:30: 44:e6:87:51:93:98:98:3a:75:47:90:80:2d:05:8d: 6e:17:27:e7:42:2c:f9:53:40:83:6b:4e:30:46:ec: 8d:d5:dc:4b:54:aa:19:80:17:14:9c:10:aa:42:07: 12:bb:9a:80:b9:45:a7:fb:b4:03:75:af:1b:f0:ac: 19:d3:22:71:b0:b4:17:ce:26:51:07:a0:1f:a1:9e: 43:fa:a6:2c:73:cd:c8:46:05:bb:5a:17:a8:29:2b: 33:44:86:4d:5d:e6:c7:c6:5c:9c:62:f4:4a:2e:31: 63:6c:cd:ee:e6:ed:5e:b5:cb:80:43:c6:35:5c:c6: 45:99:e2:5f:e1:d0:b4:3d:95:81:7c:47:24:ed:30: 6d:fe:b4:7b:09:00:66:2a:4d:69:93:ab:a9:9e:83: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:E8:0F:05:0D:23:E3:1D:E5:5D:87:17:4F:47:1E:0B:A2:7C:96 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b9:20:27:4a:3f:d0:f0:f5:d2:d3:9f:88:48:ee:60:81:19: 4d:e0:1f:bc:cd:f9:de:53:94:71:c6:dd:94:f6:96:f9:5b:27: 78:f1:d8:15:18:aa:79:0e:41:19:50:94:28:c2:de:97:43:88: db:d6:24:08:ae:9b:c5:6c:27:aa:27:0e:fe:e8:33:b3:52:1c: de:2d:eb:14:99:4d:9a:ca:40:00:c7:bb:d3:e9:6d:fe:ca:3e: f1:b9:92:0e:ac:ed:42:0f:ae:a6:72:b2:13:fb:9a:92:31:ad: 74:15:08:92:03:84:c7:9d:b2:bd:00:e1:cd:09:e0:65:f1:10: 6f:a8:d4:52:1c:98:03:38:7e:35:cb:1d:d1:af:9d:4a:a7:c6: 60:11:8c:5c:a5:f3:30:ef:8f:c7:c5:b9:11:6d:0e:98:f8:59: df:62:e5:15:8e:41:64:99:0e:02:fe:db:cc:1d:aa:23:a6:30: fd:66:b0:5d:ac:b1:16:67:82:91:1c:69:74:96:a3:69:7c:18: 81:66:5a:80:42:85:14:52:5e:82:ae:6e:6e:36:fe:34:f7:f6: 20:37:89:70:5e:11:de:96:ad:ea:49:11:dd:7d:31:f3:1f:3c: fd:77:c1:d4:7d:4b:16:4b:23:fc:30:66:cf:dc:c9:fa:8a:bd: 85:95:4b:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjYwOTA1MDUwNzUwWhcNMjYwOTEyMDUwNzUwWjAYMRYwFAYD VQQDEw02YTliYTNhNy1kYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUkfItn8vmPwQ0tAG70K4Rl424oXZcEYuJvCKcZMaSZlWDcO2EoTzbkCwmCe v7oI29ELvAy0U2t+9aTSRAW/4vl9DNvmZrkr3+SagklZ+viSLrPUsOY+0sxAQDyZ /LCV0yy9lTBcEDBE5odRk5iYOnVHkIAtBY1uFyfnQiz5U0CDa04wRuyN1dxLVKoZ gBcUnBCqQgcSu5qAuUWn+7QDda8b8KwZ0yJxsLQXziZRB6AfoZ5D+qYsc83IRgW7 WheoKSszRIZNXebHxlycYvRKLjFjbM3u5u1etcuAQ8Y1XMZFmeJf4dC0PZWBfEck 7TBt/rR7CQBmKk1pk6upnoOD/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/x6A8F DSPjHeVdhxdPRx4LonyWMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD7kgJ0o/0PD10tOfiEjuYIEZTeAfvM353lOUccbdlPaW+VsnePHYFRiqeQ5B GVCUKMLel0OI29YkCK6bxWwnqicO/ugzs1Ic3i3rFJlNmspAAMe70+lt/so+8bmS DqztQg+upnKyE/uakjGtdBUIkgOEx52yvQDhzQngZfEQb6jUUhyYAzh+Ncsd0a+d SqfGYBGMXKXzMO+Px8W5EW0OmPhZ32LlFY5BZJkOAv7bzB2qI6Yw/WawXayxFmeC kRxpdJajaXwYgWZagEKFFFJegq5ubjb+NPf2IDeJcF4R3pat6kkR3X0x8x88/XfB 1H1LFksj/DBmz9zJ+oq9hZVLdg== -----END CERTIFICATE-----Generated at Sat Sep 5 10:35:41 2026 by rpki-client