$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: 5Z4u0sP1ZgaaLevl10mWPTDZKknHuNC3tXTrD6y/7+s= Subject key identifier: 3D:6B:EC:6B:41:3B:9E:BC:61:0A:68:A9:C1:C4:B2:B1:E0:04:97:95 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2B40 Signing time: Fri 04 Sep 2026 15:30:25 +0000 Manifest this update: Fri 04 Sep 2026 15:30:24 +0000 Manifest next update: Fri 11 Sep 2026 15:30:24 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: G0gIQI5VoGxsC1tY3v258unuSaXqinwWdvsYlEu4sWc=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11140 (0x2b84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Sep 4 15:30:24 2026 GMT Not After : Sep 11 15:30:24 2026 GMT Subject: CN=6a9ae411-9b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:2d:ca:44:c4:e7:70:2b:6a:18:07:2d:8c: 41:f9:0b:0b:c0:c5:9f:15:01:fe:69:a9:0e:a7:c6: 62:e5:c7:82:47:c7:d0:43:02:f8:21:64:90:d7:bf: 98:d3:90:2c:1e:e9:bc:f4:34:be:17:55:e8:4e:a9: ba:b1:f8:da:0b:54:3f:c2:a8:27:11:c5:0a:e8:b9: 20:ff:d1:6e:02:f4:b2:f8:de:01:0b:2e:68:23:bb: 8f:42:9a:68:ab:d2:7e:6b:2a:a6:2f:3f:ac:b6:24: 1c:e2:b8:21:94:36:a5:b3:45:b5:9f:15:95:03:8b: e0:f1:78:48:74:fe:e5:f1:df:4f:49:02:b6:e2:ef: f4:1e:7b:e0:53:14:af:34:67:f7:2d:b3:cf:f7:d9: f5:e3:d9:9f:f8:8d:f7:fe:7d:1a:85:94:af:70:c7: 7a:24:47:d3:72:23:c5:75:aa:41:77:b0:fa:60:38: 63:96:d0:62:8d:44:61:bd:ac:a2:c8:1d:61:4a:08: 29:52:a5:ff:32:19:05:c4:0a:c6:6a:69:3f:44:1b: df:4e:37:e2:57:3f:b4:d0:89:6d:3c:12:c7:e7:25: 24:19:c6:ea:d4:ef:9b:7c:18:b5:fb:c0:fc:77:f6: c0:be:3d:59:36:3a:68:55:28:6d:71:a8:78:7f:fb: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6B:EC:6B:41:3B:9E:BC:61:0A:68:A9:C1:C4:B2:B1:E0:04:97:95 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d9:2f:45:8b:34:2c:82:ac:49:a9:49:4a:ca:d2:7e:93:92: b0:b6:c9:3a:83:4c:be:28:0d:ae:b2:30:5a:52:87:b9:28:b1: f0:46:c3:f0:2c:84:38:be:b1:77:87:74:fe:b4:d0:e3:c7:2b: 2c:86:c7:2c:f9:5c:5b:ea:6f:ab:7b:8a:9d:aa:8c:8d:2b:2f: 93:80:9f:f4:8a:1c:8c:52:d9:cd:e2:99:5d:56:b0:38:a6:be: 03:ce:de:10:32:bc:c6:04:ba:cd:b0:c3:d0:a9:92:47:e6:4b: 05:97:58:25:3f:6c:56:b5:10:01:da:74:d2:63:12:f2:8c:ec: a0:9a:d5:cb:56:7c:2e:da:a6:8f:7d:4f:81:c0:2b:99:28:ca: 54:20:2b:31:0e:0b:90:cf:2a:77:34:fe:8c:82:5f:29:ab:42: da:61:94:cd:de:c7:a2:e9:68:6a:ae:5c:05:03:b4:50:d2:7d: 96:c0:cd:27:f1:19:c9:12:00:32:75:12:37:48:29:99:07:50: 7e:ee:0c:35:0d:87:42:12:f9:e5:71:b8:0b:4c:92:af:6e:b7: 19:4f:d0:e7:2e:97:b3:26:ec:9f:ac:24:37:cb:07:40:bf:d1: db:48:96:b3:9a:04:bc:a4:5a:ab:db:d9:0b:ed:87:b0:de:ea: 04:b2:c5:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwOTA0MTUzMDI0WhcNMjYwOTExMTUzMDI0WjAYMRYwFAYD VQQDEw02YTlhZTQxMS05YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aUtykTE53ArahgHLYxB+QsLwMWfFQH+aakOp8Zi5ceCR8fQQwL4IWSQ17+Y 05AsHum89DS+F1XoTqm6sfjaC1Q/wqgnEcUK6Lkg/9FuAvSy+N4BCy5oI7uPQppo q9J+ayqmLz+stiQc4rghlDals0W1nxWVA4vg8XhIdP7l8d9PSQK24u/0HnvgUxSv NGf3LbPP99n149mf+I33/n0ahZSvcMd6JEfTciPFdapBd7D6YDhjltBijURhvayi yB1hSggpUqX/MhkFxArGamk/RBvfTjfiVz+00IltPBLH5yUkGcbq1O+bfBi1+8D8 d/bAvj1ZNjpoVShtcah4f/sVrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1r7GtB O568YQpoqcHEsrHgBJeVMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMtkvRYs0LIKsSalJSsrSfpOSsLbJOoNMvigNrrIwWlKHuSix8EbD8CyEOL6x d4d0/rTQ48crLIbHLPlcW+pvq3uKnaqMjSsvk4Cf9IocjFLZzeKZXVawOKa+A87e EDK8xgS6zbDD0KmSR+ZLBZdYJT9sVrUQAdp00mMS8ozsoJrVy1Z8Ltqmj31PgcAr mSjKVCArMQ4LkM8qdzT+jIJfKatC2mGUzd7Houloaq5cBQO0UNJ9lsDNJ/EZyRIA MnUSN0gpmQdQfu4MNQ2HQhL55XG4C0ySr263GU/Q5y6Xsybsn6wkN8sHQL/R20iW s5oEvKRaq9vZC+2HsN7qBLLFNg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:14:50 2026 by rpki-client