$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: 3q8/O41eugMq18WxUJfPWfWJcb7mxq6re2p7JFBSNcw= Subject key identifier: 2A:A6:32:C3:63:58:D9:80:F8:BB:3D:23:44:9B:D2:A5:0A:8D:F8:11 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 1071 Signing time: Tue 08 Sep 2026 17:27:17 +0000 Manifest this update: Tue 08 Sep 2026 17:27:17 +0000 Manifest next update: Tue 15 Sep 2026 17:27:17 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: zKvv365gmF5F9SRqn77cRZQobWLR2Y8fwaBuoH6am/Y=) 2: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=) 3: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=) 4: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=) 5: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=) 6: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=) 7: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 17:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Sep 8 17:27:17 2026 GMT Not After : Sep 15 17:27:17 2026 GMT Subject: CN=6aa04575-a901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:f8:3f:0b:da:96:f4:a5:f1:bf:1b:eb:45: 34:64:84:7a:f5:2a:53:e6:d8:af:ad:82:0a:e7:dd: f1:42:19:89:d3:4c:dc:7d:b9:aa:0d:08:61:79:cd: 0e:ce:f6:b9:aa:77:98:ac:e6:f7:1e:db:b0:98:c8: 0f:89:dc:46:02:03:95:16:1b:60:32:c2:f4:b4:b1: ae:29:10:9d:89:c4:71:62:22:6a:30:81:5e:80:46: 39:cd:26:64:92:08:93:c4:f1:24:24:f9:b7:af:28: 8d:f5:95:80:41:4c:be:5e:28:a3:72:3b:9b:72:a3: be:8c:04:63:4e:27:7a:97:85:13:36:40:75:a7:ab: 3a:15:2d:b7:34:65:93:4e:b0:2b:1c:2d:64:a0:d6: 43:38:e9:e0:e3:7b:fd:ff:78:39:40:57:26:ed:d5: 62:ce:d7:03:b3:e9:a9:73:63:81:ad:5c:00:c9:f7: 20:1d:cf:64:17:fb:ac:7e:fe:0e:f4:b6:bc:0b:2d: 66:7e:47:68:85:68:7b:5e:1f:eb:da:3e:9c:c0:80: cb:4f:ff:bb:02:55:48:e3:5d:20:eb:c7:fd:c8:2b: 37:43:0f:33:2e:66:43:0f:81:60:ff:97:84:e2:f2: 43:c8:19:9e:58:a7:b6:6d:cb:37:c0:e1:8a:2f:67: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A6:32:C3:63:58:D9:80:F8:BB:3D:23:44:9B:D2:A5:0A:8D:F8:11 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b6:6d:e9:53:a6:72:0e:c3:df:e7:8c:f3:ab:f4:a1:35:23: 0f:32:75:72:3a:15:06:51:da:e7:f7:40:78:11:60:b9:46:ef: df:0c:30:34:f0:48:28:b2:bc:67:1d:7c:2e:16:7d:08:84:2d: a3:61:42:30:de:f4:f7:ef:fa:e0:f7:f2:d1:6f:6e:9d:dd:c4: 28:2a:12:cf:bd:94:39:75:9a:d1:a1:1c:82:ed:f7:97:96:76: c5:b8:27:c2:2b:62:ad:98:2f:de:d1:c4:cf:80:1b:6f:6f:bb: c2:7a:0f:8f:da:c4:61:f8:d6:84:06:ea:ac:fd:02:f4:73:43: 18:2c:d9:78:29:25:e7:93:50:6d:09:a0:f7:72:7b:d9:81:ee: 3c:7c:8e:ff:49:18:5b:d3:9d:9f:d4:f8:78:60:43:72:3f:86: 73:39:d4:c6:74:c1:65:da:50:d7:1f:61:ce:35:98:3c:35:99: 27:94:96:9a:f0:0f:93:ae:ac:e7:1c:93:07:ed:53:36:c7:eb: 6f:37:b3:c1:f2:b8:5d:14:91:bd:da:86:51:bd:13:6c:d9:e9: 39:33:82:da:27:4a:fd:ab:70:08:2a:93:0b:81:60:57:99:1d: 2c:8b:2a:9c:d2:d5:a9:86:7c:3b:c4:f5:a9:5b:c6:cc:af:a3: 6f:f6:04:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjYwOTA4MTcyNzE3WhcNMjYwOTE1MTcyNzE3WjAYMRYwFAYD VQQDEw02YWEwNDU3NS1hOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1r4PwvalvSl8b8b60U0ZIR69SpT5tivrYIK593xQhmJ00zcfbmqDQhhec0O zva5qneYrOb3HtuwmMgPidxGAgOVFhtgMsL0tLGuKRCdicRxYiJqMIFegEY5zSZk kgiTxPEkJPm3ryiN9ZWAQUy+XiijcjubcqO+jARjTid6l4UTNkB1p6s6FS23NGWT TrArHC1koNZDOOng43v9/3g5QFcm7dViztcDs+mpc2OBrVwAyfcgHc9kF/usfv4O 9La8Cy1mfkdohWh7Xh/r2j6cwIDLT/+7AlVI410g68f9yCs3Qw8zLmZDD4Fg/5eE 4vJDyBmeWKe2bcs3wOGKL2eNOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqmMsNj WNmA+Ls9I0Sb0qUKjfgRMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7Zt6VOmcg7D3+eM86v0oTUjDzJ1cjoVBlHa5/dAeBFguUbv3wwwNPBIKLK8 Zx18LhZ9CIQto2FCMN709+/64Pfy0W9und3EKCoSz72UOXWa0aEcgu33l5Z2xbgn witirZgv3tHEz4Abb2+7wnoPj9rEYfjWhAbqrP0C9HNDGCzZeCkl55NQbQmg93J7 2YHuPHyO/0kYW9Odn9T4eGBDcj+GcznUxnTBZdpQ1x9hzjWYPDWZJ5SWmvAPk66s 5xyTB+1TNsfrbzezwfK4XRSRvdqGUb0TbNnpOTOC2idK/atwCCqTC4FgV5kdLIsq nNLVqYZ8O8T1qVvGzK+jb/YEPw== -----END CERTIFICATE-----Generated at Thu Sep 10 07:33:14 2026 by rpki-client