$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 1fEfO1eIm9qDqKvzthQRztVl65w1BP/+jjZw5xG4bYo= Subject key identifier: E3:1F:37:05:6B:6C:67:EA:E0:7C:B0:F3:74:0F:3F:E0:44:17:4E:CF Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CFD Signing time: Thu 06 Aug 2026 18:27:46 +0000 Manifest this update: Thu 06 Aug 2026 18:27:45 +0000 Manifest next update: Thu 13 Aug 2026 18:27:45 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: SWZc9Xi4uxRHvrVuv0cYyKqwi4NEv2w5alIoop4gNs4=) 2: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 3: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 4: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 5: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 6: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 7: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 18:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Aug 6 18:27:45 2026 GMT Not After : Aug 13 18:27:45 2026 GMT Subject: CN=6a74d222-45c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:1d:c9:65:f1:2e:d5:5a:7c:b3:73:43:52: 0f:14:bb:a3:41:d1:c1:2a:b3:ad:b2:40:b7:ff:42: f6:79:43:86:43:93:a3:d9:0d:1f:73:5b:0c:04:dc: 85:3d:0b:dd:79:b8:ad:61:72:32:db:7f:95:6b:82: ba:3a:8c:ff:e4:12:70:6f:7c:47:e0:96:b7:81:c3: 40:0c:9f:8d:bb:62:8c:6a:29:07:c7:94:57:b2:df: d3:93:97:a3:40:77:14:c8:b7:fa:08:39:03:28:8c: 3d:37:1d:99:9c:a3:53:26:83:46:0e:c9:ad:5e:2d: b7:69:c0:09:19:6f:57:3c:b4:61:42:9e:9f:b7:e5: 2b:23:1e:2a:5d:83:14:1c:e6:a1:bf:02:83:26:f4: 3f:9f:f2:be:21:1d:49:3b:1a:d3:bf:3f:39:e8:d1: e6:8c:67:55:ee:26:9c:25:d9:dc:d8:57:c1:8d:25: d7:51:86:6b:b9:b6:87:c9:e7:e8:36:b9:9f:ff:9e: 42:1e:f9:e7:c7:47:9c:13:3f:f4:08:de:cd:c8:c9: 19:42:5c:11:d5:0f:6c:14:c1:5c:e4:b6:9f:ae:a1: 79:dd:6c:c2:e3:7a:15:95:1c:9b:59:25:07:b7:ae: 8e:66:b4:61:49:a7:35:0e:84:99:88:e5:02:9a:f7: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1F:37:05:6B:6C:67:EA:E0:7C:B0:F3:74:0F:3F:E0:44:17:4E:CF X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:08:12:2e:2c:5f:89:1b:15:c5:90:65:fa:49:7b:fb:e8: 23:5d:9a:4c:d5:d9:f0:ef:76:bd:62:86:82:5f:0c:6e:e9:27: 46:9e:65:9f:ff:7e:41:25:c5:53:dd:a0:db:90:db:3c:3a:72: 04:f2:d7:e6:fc:d4:00:a8:8a:18:c7:ac:93:6a:b1:41:8a:76: 3f:a7:fa:33:71:38:bf:ff:98:a7:44:a0:e2:d7:99:46:0e:59: 2d:73:10:19:96:56:ae:70:1e:aa:22:20:0d:b7:b9:71:07:81: 1b:02:ca:ba:f6:9a:60:c1:20:df:a1:57:ef:4a:d8:9f:23:55: e5:99:46:6d:4d:f2:7f:fa:ae:32:05:cc:24:af:5c:d7:8c:dd: 5b:e4:8e:02:c9:3c:6f:96:60:59:ac:00:61:be:79:d9:3e:e5: 47:45:a2:be:43:39:b8:eb:f8:d6:97:64:87:f1:57:19:60:c2: 73:3b:75:66:45:9b:b4:13:d2:69:ff:88:bc:4a:9b:4e:3f:bc: 8f:68:ad:f3:6d:2c:c0:8e:04:ad:34:61:0e:0e:a4:43:04:b9: ec:9a:fe:81:71:db:b6:6d:80:ad:5c:64:a5:22:07:50:15:c8: 5d:0f:c7:4f:61:ef:42:74:bd:59:0c:ed:85:c5:43:77:0b:42: 1a:17:5e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwODA2MTgyNzQ1WhcNMjYwODEzMTgyNzQ1WjAYMRYwFAYD VQQDEw02YTc0ZDIyMi00NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3sdyWXxLtVafLNzQ1IPFLujQdHBKrOtskC3/0L2eUOGQ5Oj2Q0fc1sMBNyF PQvdebitYXIy23+Va4K6Ooz/5BJwb3xH4Ja3gcNADJ+Nu2KMaikHx5RXst/Tk5ej QHcUyLf6CDkDKIw9Nx2ZnKNTJoNGDsmtXi23acAJGW9XPLRhQp6ft+UrIx4qXYMU HOahvwKDJvQ/n/K+IR1JOxrTvz856NHmjGdV7iacJdnc2FfBjSXXUYZrubaHyefo Nrmf/55CHvnnx0ecEz/0CN7NyMkZQlwR1Q9sFMFc5LafrqF53WzC43oVlRybWSUH t66OZrRhSac1DoSZiOUCmvct7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMfNwVr bGfq4Hyw83QPP+BEF07PMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkh8IEi4sX4kbFcWQZfpJe/voI12aTNXZ8O92vWKGgl8MbuknRp5ln/9+QSXF U92g25DbPDpyBPLX5vzUAKiKGMesk2qxQYp2P6f6M3E4v/+Yp0Sg4teZRg5ZLXMQ GZZWrnAeqiIgDbe5cQeBGwLKuvaaYMEg36FX70rYnyNV5ZlGbU3yf/quMgXMJK9c 14zdW+SOAsk8b5ZgWawAYb552T7lR0WivkM5uOv41pdkh/FXGWDCczt1ZkWbtBPS af+IvEqbTj+8j2it820swI4ErTRhDg6kQwS57Jr+gXHbtm2ArVxkpSIHUBXIXQ/H T2HvQnS9WQzthcVDdwtCGhdeGA== -----END CERTIFICATE-----Generated at Sat Aug 8 10:24:07 2026 by rpki-client