$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: 88Adpwzm0IH9dBYxnaC4Mz9xOxdYcsBZxcBf8gF+Ijc= Subject key identifier: 1F:8B:33:82:FC:AC:3D:91:65:29:74:3A:11:9E:43:FE:CE:B8:D8:A4 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0D24 Signing time: Tue 18 Aug 2026 18:28:29 +0000 Manifest this update: Tue 18 Aug 2026 18:28:28 +0000 Manifest next update: Tue 25 Aug 2026 18:28:28 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: pqPK9p0gstR7JAneWTkNhMkFwGtzGp6+qy27rWCe/hg=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: p0xfscRRYBVGM3y+ZxC5O1NRSo3lZqi2QKi0hB3W0Qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Aug 18 18:28:28 2026 GMT Not After : Aug 25 18:28:28 2026 GMT Subject: CN=6a84a44c-e3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:60:58:6e:10:94:d4:5a:d9:6a:00:7a:66: 90:9c:77:81:ca:57:60:3f:75:ce:46:9c:e4:6f:d2: d7:52:91:4f:67:91:10:5a:21:4b:5b:5f:fd:cd:b7: 06:48:18:19:fc:84:8b:7f:cb:92:7e:05:55:83:2c: 55:b4:71:24:7e:b1:df:78:87:4e:94:c5:f6:62:2e: 10:c4:23:90:c4:ad:c7:7d:ef:be:79:fb:6c:b3:e9: a7:05:7c:82:b4:a8:b2:85:ba:b3:a0:7c:ad:fb:a1: b8:9c:4f:9d:0f:29:1f:c8:ab:5d:b6:ce:e0:9e:18: cd:cd:87:51:49:d6:1b:98:b3:e8:59:ed:e1:cd:8b: 2c:20:07:85:28:39:ca:75:e2:ac:33:ab:b9:42:36: bb:e4:3f:ff:94:9a:8a:32:f1:df:de:ce:12:8f:ba: 97:59:c7:f2:9c:a5:15:33:2c:e2:73:2b:59:15:44: 5f:01:f5:1c:96:7a:b1:74:93:c0:22:92:e4:26:52: 36:88:83:13:aa:9c:e8:af:5e:08:ad:54:51:d3:05: 55:74:b5:09:1c:61:e5:44:bb:90:a4:2b:35:f7:64: 27:6e:21:3b:de:9a:8d:1f:0d:a3:66:5d:01:6a:bf: 9c:b0:8f:67:ff:7c:97:4e:0c:bf:80:5a:5b:82:77: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:33:82:FC:AC:3D:91:65:29:74:3A:11:9E:43:FE:CE:B8:D8:A4 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:d5:3a:1c:57:29:5c:f6:3a:31:cb:59:e0:db:4f:8d:8a: 2d:4b:3d:7e:10:3b:16:26:2f:6e:7e:41:c6:69:7c:ab:1d:ce: 7b:26:eb:86:12:25:da:31:14:69:bb:54:29:1e:51:b4:08:83: 15:26:80:4f:5b:0e:68:17:93:d9:10:77:8a:18:2a:f8:08:bb: d7:8a:de:42:5f:63:cc:41:4a:60:b8:5c:11:2a:20:6b:90:69: ff:11:4d:d2:6f:f6:ef:82:d8:84:de:6b:e6:7d:68:7d:f8:d0: d3:f0:50:29:f0:ce:46:0c:d6:87:ef:43:c5:57:23:49:56:fa: e8:40:8a:f4:6e:f7:9c:58:6f:2c:19:b6:32:ef:e5:68:ea:13: 49:d2:a0:c8:47:2a:01:2f:46:81:7e:2d:fe:34:e0:25:4b:4e: 7a:14:2f:cf:57:ff:7b:ca:e1:9c:ba:99:c0:e0:ca:80:6f:1d: 05:45:24:de:ba:a4:ae:2b:7b:2e:70:c3:2a:2f:3a:bc:e2:1f: ac:29:4c:82:ba:64:21:d2:ac:06:d7:d2:53:09:dd:7b:f5:5d: 52:37:8e:5c:87:73:b0:2f:01:fd:92:d9:e2:09:e5:24:32:eb: 40:8b:3c:53:ed:31:77:4d:d4:f9:01:5a:dd:02:25:a6:d3:02: 13:3e:0c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjYwODE4MTgyODI4WhcNMjYwODI1MTgyODI4WjAYMRYwFAYD VQQDEw02YTg0YTQ0Yy1lM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DhgWG4QlNRa2WoAemaQnHeByldgP3XORpzkb9LXUpFPZ5EQWiFLW1/9zbcG SBgZ/ISLf8uSfgVVgyxVtHEkfrHfeIdOlMX2Yi4QxCOQxK3Hfe++eftss+mnBXyC tKiyhbqzoHyt+6G4nE+dDykfyKtdts7gnhjNzYdRSdYbmLPoWe3hzYssIAeFKDnK deKsM6u5Qja75D//lJqKMvHf3s4Sj7qXWcfynKUVMyzicytZFURfAfUclnqxdJPA IpLkJlI2iIMTqpzor14IrVRR0wVVdLUJHGHlRLuQpCs192QnbiE73pqNHw2jZl0B ar+csI9n/3yXTgy/gFpbgnfevQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+LM4L8 rD2RZSl0OhGeQ/7OuNikMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcADVOhxXKVz2OjHLWeDbT42KLUs9fhA7FiYvbn5Bxml8qx3OeybrhhIl2jEU abtUKR5RtAiDFSaAT1sOaBeT2RB3ihgq+Ai714reQl9jzEFKYLhcESoga5Bp/xFN 0m/274LYhN5r5n1offjQ0/BQKfDORgzWh+9DxVcjSVb66ECK9G73nFhvLBm2Mu/l aOoTSdKgyEcqAS9GgX4t/jTgJUtOehQvz1f/e8rhnLqZwODKgG8dBUUk3rqkrit7 LnDDKi86vOIfrClMgrpkIdKsBtfSUwnde/VdUjeOXIdzsC8B/ZLZ4gnlJDLrQIs8 U+0xd03U+QFa3QIlptMCEz4MmQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:40 2026 by rpki-client