$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: OfVtYmHB3UGhWjizK/xTh32CnnH5pJ2ZYeFyCuMKtjk= Subject key identifier: BE:E6:5C:24:C1:05:19:62:15:EE:D0:C5:12:17:29:D5:28:86:BC:E1 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 03A2 Signing time: Sat 05 Sep 2026 00:22:57 +0000 Manifest this update: Sat 05 Sep 2026 00:22:56 +0000 Manifest next update: Sat 12 Sep 2026 00:22:56 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: jNWw46S5lLJLfPQurodMDU0po1jrwr0smqEf0x4Qzqc=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: QwQkgtoePZKxFtkm4cXFgAdorKM4wsMJHhlleIVTFws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Sep 5 00:22:56 2026 GMT Not After : Sep 12 00:22:56 2026 GMT Subject: CN=6a9b60e1-a6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:3a:ec:b8:68:52:4f:92:74:b9:3a:09:07: ee:97:20:b6:4d:fa:6f:b6:16:40:e7:c9:aa:1f:66: 10:49:99:4e:8a:a1:e6:40:cd:f8:7c:23:cc:ba:ee: 52:cd:ef:28:9a:82:1f:88:e7:0a:8c:ef:32:27:da: 7c:be:2c:16:48:84:f8:c1:cd:f4:e2:b1:15:96:07: c8:98:00:f0:6b:91:17:83:0f:39:27:9e:cd:12:b9: e9:e1:d0:5c:a4:9b:6a:48:ac:2e:e8:d5:84:20:ae: 7c:35:60:bc:be:7d:ce:01:28:c8:c0:5f:83:04:77: cd:55:5d:e7:34:09:cf:fc:bc:33:42:8e:3c:b6:7b: 19:0c:99:8f:a9:91:86:e7:98:8e:c3:49:53:b2:49: 26:ce:d0:9b:c6:76:55:7c:d9:3d:cd:e0:ba:03:bf: f2:f7:8b:0a:a7:be:58:7b:ee:a6:15:8c:a2:a8:51: a4:ae:ec:66:9c:c0:fe:9b:52:59:73:79:c6:a9:1f: 3a:30:8a:80:9f:20:e5:16:12:d2:f3:03:02:a1:dd: 99:8b:ea:1f:65:fc:04:a5:e9:4e:96:bf:af:1d:88: 42:e6:c5:57:a4:71:c3:99:33:64:d1:75:e9:5e:9b: b9:24:d8:76:41:89:a2:df:d3:41:3d:04:7b:69:4b: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E6:5C:24:C1:05:19:62:15:EE:D0:C5:12:17:29:D5:28:86:BC:E1 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:bb:a0:6b:2e:7e:71:bf:3a:e1:fa:aa:7a:eb:af:fc:7c:2c: c1:98:f1:d2:39:db:54:5b:4b:c9:2e:cf:b1:2c:60:a4:cb:0e: c2:d2:ea:ad:6c:55:6f:f9:ba:79:9a:c8:38:1b:de:0b:df:72: 6c:02:8c:99:96:fb:e5:81:4d:66:f4:75:b0:cb:7d:07:76:c9: 73:78:fc:61:e4:36:b4:f1:31:fd:a8:c9:cf:6b:34:20:8c:a8: 0b:7f:5d:9d:84:fb:72:7f:96:a4:cb:c1:dc:bb:82:53:a1:17: 41:a1:82:7b:3d:a0:4f:c9:f8:3f:12:44:95:05:3f:1c:a7:d0: bf:2c:99:bf:f4:82:d6:fe:c9:d7:b5:b2:c5:d0:b3:63:9f:fc: c1:08:ce:06:ff:1e:0d:fd:a4:7c:0b:f2:90:6f:59:0a:42:db: d7:6c:86:52:bb:cd:a6:ed:58:6e:c2:9a:08:27:3b:15:d4:d2: 17:87:bb:04:e6:41:ad:0c:da:4c:09:94:88:66:30:ac:61:54: 90:c8:aa:c7:33:9d:18:a8:ea:4a:86:3d:85:a2:54:e9:7b:43: 94:b9:13:e7:92:2b:0c:e5:44:92:2e:b2:ff:24:33:c8:d6:61: e7:13:76:de:dd:51:ea:cd:0f:3f:7e:07:9e:f0:5e:ea:fc:f0: f8:04:99:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYwOTA1MDAyMjU2WhcNMjYwOTEyMDAyMjU2WjAYMRYwFAYD VQQDEw02YTliNjBlMS1hNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzY67LhoUk+SdLk6CQfulyC2TfpvthZA58mqH2YQSZlOiqHmQM34fCPMuu5S ze8omoIfiOcKjO8yJ9p8viwWSIT4wc304rEVlgfImADwa5EXgw85J57NErnp4dBc pJtqSKwu6NWEIK58NWC8vn3OASjIwF+DBHfNVV3nNAnP/LwzQo48tnsZDJmPqZGG 55iOw0lTskkmztCbxnZVfNk9zeC6A7/y94sKp75Ye+6mFYyiqFGkruxmnMD+m1JZ c3nGqR86MIqAnyDlFhLS8wMCod2Zi+ofZfwEpelOlr+vHYhC5sVXpHHDmTNk0XXp Xpu5JNh2QYmi39NBPQR7aUvf/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7mXCTB BRliFe7QxRIXKdUohrzhMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgLugay5+cb864fqqeuuv/HwswZjx0jnbVFtLyS7PsSxgpMsOwtLqrWxVb/m6 eZrIOBveC99ybAKMmZb75YFNZvR1sMt9B3bJc3j8YeQ2tPEx/ajJz2s0IIyoC39d nYT7cn+WpMvB3LuCU6EXQaGCez2gT8n4PxJElQU/HKfQvyyZv/SC1v7J17WyxdCz Y5/8wQjOBv8eDf2kfAvykG9ZCkLb12yGUrvNpu1YbsKaCCc7FdTSF4e7BOZBrQza TAmUiGYwrGFUkMiqxzOdGKjqSoY9haJU6XtDlLkT55IrDOVEki6y/yQzyNZh5xN2 3t1R6s0PP34HnvBe6vzw+ASZBg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:11:48 2026 by rpki-client