$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: hm8e7mmBxkD4O3lu8ImE7aGDo9T6pEBU3Jch2k3AN90= Subject key identifier: 9F:F7:7C:99:62:E9:A8:0E:A1:4B:B3:71:7D:86:CB:08:0F:63:8C:EE Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0986 Signing time: Fri 04 Sep 2026 20:22:05 +0000 Manifest this update: Fri 04 Sep 2026 20:22:04 +0000 Manifest next update: Fri 11 Sep 2026 20:22:04 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: HEswpP4E65Mc6Ar76pPAkY6TDkAZelzEJuyQc0tFo0o=) 2: 47B17AE48B2911F198C4B09681EE528E.roa (hash: jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=) 3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=) 4: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Sep 4 20:22:04 2026 GMT Not After : Sep 11 20:22:04 2026 GMT Subject: CN=6a9b286d-3b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:c9:6a:68:7c:97:9b:c3:93:db:99:a2:ff: f3:2d:47:07:1b:a8:c5:b3:8a:a3:d2:92:c8:33:53: 57:b3:9d:3e:10:41:cd:2d:d4:90:21:47:fb:28:d9: bd:26:bb:d5:c5:4b:13:67:20:e3:f8:c8:45:b2:fd: 68:71:d5:fd:98:5e:7e:50:ec:13:ad:9b:09:bc:46: d1:75:04:aa:d8:68:e6:81:8a:44:71:d7:d1:e8:8f: bd:c4:f1:4e:98:6c:73:6c:a9:fa:e3:c3:98:ba:a0: 39:02:91:e3:ab:03:b6:bf:35:40:b4:07:ef:ac:24: 1d:01:5e:13:b0:dc:83:f8:e4:89:9d:47:fe:37:bb: 7f:b2:5c:c5:e1:04:97:d2:c2:c6:0d:91:fb:fb:27: 8f:f6:4c:dc:6a:05:f5:10:e0:68:24:b3:3a:47:46: 65:21:ed:20:1a:66:07:5d:12:13:ef:f3:82:83:94: 95:c3:e0:8b:c8:b2:44:5c:94:e8:0a:4f:4b:3b:6d: 37:3e:d2:06:2b:ca:bb:a7:87:95:12:ee:56:f9:b1: 57:23:09:c1:41:67:45:13:67:9f:57:9d:6f:7f:e3: 84:42:0c:57:d4:0f:65:c9:9b:ca:cb:36:e6:6c:e7: e8:bc:52:78:48:6d:39:19:d6:85:2e:ac:c8:0a:a2: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F7:7C:99:62:E9:A8:0E:A1:4B:B3:71:7D:86:CB:08:0F:63:8C:EE X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:cd:52:c8:d7:a5:9b:7b:7b:30:e1:96:26:ed:78:17:81:81: f2:be:8e:ae:e7:11:47:0a:07:21:9c:72:8c:bc:84:fa:0a:ab: 4d:6d:96:ab:39:35:35:69:dc:fb:d3:3f:4f:f7:2a:5b:d4:00: 85:19:e1:ae:1e:1f:21:0c:16:98:fc:f3:71:c2:27:fa:18:23: d3:68:64:32:57:df:19:a6:4f:9c:d8:f5:30:eb:99:b5:7d:ff: 9b:a6:8b:7a:fa:79:ec:8c:70:7b:f0:d0:bf:5f:49:f3:5e:83: b0:19:45:19:9e:4d:32:17:ed:4c:23:82:1d:ec:1a:1a:55:79: 65:69:5b:09:07:56:21:54:15:17:8d:13:24:78:c5:36:5b:91: 82:24:75:41:49:af:c4:f2:1b:6b:b3:3e:55:9d:14:8a:2c:f8: 4d:66:c5:a2:94:5a:df:81:9a:ec:6c:2e:36:31:b0:34:af:a2: d5:5b:43:81:fe:41:33:88:49:d9:b0:e4:7d:6e:1e:da:e1:eb: ad:10:3c:a6:c7:20:2e:90:53:2f:e0:db:b9:10:10:f6:6d:95: ea:82:b5:8d:45:fc:3b:a6:62:94:c1:76:c0:a0:ff:71:5c:3f: 67:d6:17:34:03:94:39:9c:53:0c:2b:bd:3e:11:f8:00:b2:27: bb:23:55:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwOTA0MjAyMjA0WhcNMjYwOTExMjAyMjA0WjAYMRYwFAYD VQQDEw02YTliMjg2ZC0zYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuLJamh8l5vDk9uZov/zLUcHG6jFs4qj0pLIM1NXs50+EEHNLdSQIUf7KNm9 JrvVxUsTZyDj+MhFsv1ocdX9mF5+UOwTrZsJvEbRdQSq2GjmgYpEcdfR6I+9xPFO mGxzbKn648OYuqA5ApHjqwO2vzVAtAfvrCQdAV4TsNyD+OSJnUf+N7t/slzF4QSX 0sLGDZH7+yeP9kzcagX1EOBoJLM6R0ZlIe0gGmYHXRIT7/OCg5SVw+CLyLJEXJTo Ck9LO203PtIGK8q7p4eVEu5W+bFXIwnBQWdFE2efV51vf+OEQgxX1A9lyZvKyzbm bOfovFJ4SG05GdaFLqzICqINtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/3fJli 6agOoUuzcX2GywgPY4zuMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArM1SyNelm3t7MOGWJu14F4GB8r6OrucRRwoHIZxyjLyE+gqrTW2Wqzk1NWnc +9M/T/cqW9QAhRnhrh4fIQwWmPzzccIn+hgj02hkMlffGaZPnNj1MOuZtX3/m6aL evp57Ixwe/DQv19J816DsBlFGZ5NMhftTCOCHewaGlV5ZWlbCQdWIVQVF40TJHjF NluRgiR1QUmvxPIba7M+VZ0Uiiz4TWbFopRa34Ga7GwuNjGwNK+i1VtDgf5BM4hJ 2bDkfW4e2uHrrRA8pscgLpBTL+DbuRAQ9m2V6oK1jUX8O6ZilMF2wKD/cVw/Z9YX NAOUOZxTDCu9PhH4ALInuyNVYw== -----END CERTIFICATE-----Generated at Sat Sep 5 01:02:35 2026 by rpki-client