$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: +CVsW5j/l9wXRtql7tvcLBqQ6ft6rBwt13P3GeZKyMA= Subject key identifier: 78:FD:E2:14:C3:66:C4:97:F6:0D:F6:15:D9:20:11:86:E4:AF:3D:B9 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CE4 Signing time: Thu 18 Jun 2026 18:35:43 +0000 Manifest this update: Thu 18 Jun 2026 18:35:42 +0000 Manifest next update: Thu 25 Jun 2026 18:35:42 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: VcRKfEUdMuXYA7PLhtP2GmlspaU23Mud5bHjEJN8PG4=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 3: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 4: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 7: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 18:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jun 18 18:35:42 2026 GMT Not After : Jun 25 18:35:42 2026 GMT Subject: CN=6a343a7f-12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f8:51:c1:88:dc:89:d5:30:50:b6:93:ed:d7: 0a:d7:bb:27:14:93:ce:77:a7:48:72:22:22:ed:cc: b2:8b:c5:e0:37:6b:88:93:43:d6:c7:f3:ce:fd:f5: bd:64:1e:af:a5:36:4d:3a:dd:f5:b2:a9:9f:e3:d1: 71:10:6b:38:ab:8d:de:46:41:52:d6:d8:a8:1a:cf: 13:04:55:18:31:67:68:4f:2c:7b:8e:18:a5:6a:ee: 50:b5:a1:72:24:2e:ec:29:62:16:2d:2e:f9:68:e4: 75:d4:48:a6:6c:de:76:10:b8:c7:e7:8f:05:80:1d: 89:e4:24:28:1b:86:c7:ce:b7:4f:cb:ab:6f:66:f7: ea:8b:00:ab:03:90:be:53:67:37:d9:29:ce:14:5a: de:e3:51:28:1b:0c:bd:2a:f6:5f:5d:13:e0:1e:9d: 43:a3:3b:70:1d:1e:82:20:67:dc:85:70:52:e6:06: 28:78:4c:f3:2c:97:81:b2:61:9f:b9:12:24:ce:6a: cd:89:58:63:68:4a:b8:21:6a:b6:a1:25:b3:bb:08: 21:a8:98:09:9f:17:35:80:35:1b:f5:be:29:e7:4f: 31:1f:8d:0d:90:47:0b:91:c9:c5:cd:87:7a:f4:5d: 07:02:93:8e:1d:c9:09:30:cc:50:f5:2c:ae:4c:37: 88:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:E2:14:C3:66:C4:97:F6:0D:F6:15:D9:20:11:86:E4:AF:3D:B9 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:03:61:49:99:96:2a:39:4a:aa:2d:c0:bc:8e:93:46:e3:e5: db:a9:f6:3a:38:ee:c6:74:ab:d0:dd:54:61:2c:5e:a9:aa:76: 37:8f:fd:9b:48:49:99:bc:b5:7a:d7:be:c5:9f:2c:44:fa:40: a3:57:83:fa:7a:8c:7d:46:97:45:f8:a0:89:77:2b:28:11:cb: db:6f:b0:cd:2c:bb:d9:0b:9e:45:aa:1f:ba:98:30:47:38:99: 17:a6:44:b1:b9:29:e0:3e:a9:52:a1:3c:5d:76:a9:2a:10:20: fb:19:8d:db:6d:96:b8:fa:ef:90:7a:60:7c:49:c2:15:8e:de: a7:0d:7a:e7:a9:25:8f:59:b4:02:18:54:2c:ec:06:d8:26:54: f1:cd:23:45:11:16:fd:10:e7:f4:ff:24:67:29:bc:c3:f3:cd: 20:92:8f:69:e7:0c:c3:b9:97:be:4d:ac:af:e0:d9:71:25:02: bb:cf:8d:51:53:31:83:89:1c:e8:2d:1c:1b:62:90:c4:fd:f2: b9:34:b3:90:b2:53:61:eb:46:de:e0:f5:68:75:26:82:82:9a: f8:fc:b2:8a:53:93:50:51:6e:8e:f3:05:bf:5a:1c:9a:1c:b9: eb:20:39:db:2c:37:9e:79:6f:1d:d9:cf:c3:01:c0:4c:fa:8d: 7b:2f:89:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNjE4MTgzNTQyWhcNMjYwNjI1MTgzNTQyWjAYMRYwFAYD VQQDEw02YTM0M2E3Zi0xMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PhRwYjcidUwULaT7dcK17snFJPOd6dIciIi7cyyi8XgN2uIk0PWx/PO/fW9 ZB6vpTZNOt31sqmf49FxEGs4q43eRkFS1tioGs8TBFUYMWdoTyx7jhilau5QtaFy JC7sKWIWLS75aOR11EimbN52ELjH548FgB2J5CQoG4bHzrdPy6tvZvfqiwCrA5C+ U2c32SnOFFre41EoGwy9KvZfXRPgHp1DoztwHR6CIGfchXBS5gYoeEzzLJeBsmGf uRIkzmrNiVhjaEq4IWq2oSWzuwghqJgJnxc1gDUb9b4p508xH40NkEcLkcnFzYd6 9F0HApOOHckJMMxQ9SyuTDeIDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHj94hTD ZsSX9g32FdkgEYbkrz25MB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQNhSZmWKjlKqi3AvI6TRuPl26n2OjjuxnSr0N1UYSxeqap2N4/9m0hJmby1 ete+xZ8sRPpAo1eD+nqMfUaXRfigiXcrKBHL22+wzSy72QueRaofupgwRziZF6ZE sbkp4D6pUqE8XXapKhAg+xmN222WuPrvkHpgfEnCFY7epw1656klj1m0AhhULOwG 2CZU8c0jRREW/RDn9P8kZym8w/PNIJKPaecMw7mXvk2sr+DZcSUCu8+NUVMxg4kc 6C0cG2KQxP3yuTSzkLJTYetG3uD1aHUmgoKa+PyyilOTUFFujvMFv1ocmhy56yA5 2yw3nnlvHdnPwwHATPqNey+J/w== -----END CERTIFICATE-----Generated at Fri Jun 19 03:52:09 2026 by rpki-client