$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: cJif4ZD1Ga9R0Rqc41mTyPXM0jF1mgDJfiii3V3nZTQ= Subject key identifier: DC:80:5D:40:6B:A5:E0:16:BF:D8:80:31:0A:9B:21:5B:43:3A:7B:E7 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CCB Signing time: Thu 30 Apr 2026 18:42:13 +0000 Manifest this update: Thu 30 Apr 2026 18:42:13 +0000 Manifest next update: Thu 07 May 2026 18:42:13 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: 556PMXCGtzASMcDpkkziv6EsK9H3gXIJGW+wkbEz6HA=) 2: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 3: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 5: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 6: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 7: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 18:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Apr 30 18:42:13 2026 GMT Not After : May 7 18:42:13 2026 GMT Subject: CN=69f3a285-ca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:23:04:2c:77:2c:25:a2:13:a7:9a:4c:fc: 4c:ea:aa:42:de:c4:bf:ec:6e:bb:57:f4:cc:cf:aa: 49:ee:cf:2c:c8:40:9d:2e:58:a0:5d:63:31:d3:e7: 8f:6e:17:bf:8b:b1:5c:97:db:2a:98:bb:e7:c7:eb: 1e:e5:ff:21:06:79:d9:b9:c6:21:e2:36:35:57:1c: 29:69:ff:4e:db:e3:61:38:ae:01:ca:9e:b2:b9:6f: 43:37:e1:4e:1c:c8:26:53:99:83:9f:1c:05:3a:36: 56:a4:f4:09:9b:39:6c:9a:48:55:d7:e8:0b:5b:1b: be:12:62:81:14:9c:a0:b8:f2:c2:17:d0:2b:3a:62: 35:d9:e2:6c:5a:50:5d:62:ab:ca:44:39:c6:bc:88: 6a:53:2a:99:48:64:5c:26:0a:51:ed:46:74:1b:73: da:3c:18:a5:bb:05:3a:5f:d7:4b:22:a5:8e:3c:a4: 77:22:73:14:5d:35:30:91:5e:31:d8:f8:cf:f5:14: f7:ac:dc:f1:6b:3a:4d:5e:8e:92:eb:ca:17:67:04: 4d:cd:30:6b:24:4c:c8:f6:af:39:fe:3a:ec:ef:f9: fc:d2:b6:a7:63:03:d3:2e:4f:5d:e1:36:f9:c3:c8: 34:d0:22:71:49:e5:9d:32:a3:c2:62:95:b6:54:56: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:80:5D:40:6B:A5:E0:16:BF:D8:80:31:0A:9B:21:5B:43:3A:7B:E7 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:79:69:3b:57:2e:54:a6:0b:82:6d:48:13:63:2f:4d:d7:ab: 4f:76:62:74:32:c8:57:68:db:3e:4b:a4:9f:25:df:46:56:74: 3a:17:7d:57:67:b0:22:c7:17:90:23:ea:8d:5c:48:cb:ca:8e: c1:1e:bb:95:d9:11:3b:29:3d:c8:89:e1:38:fd:7c:cb:09:8c: a4:71:cc:20:7d:1e:25:3f:09:23:a1:dd:b3:3f:83:af:f7:57: 2d:cd:a4:0c:b7:85:e9:93:3b:25:2a:21:f0:5f:c5:53:32:10: e3:86:c6:11:bc:78:23:c4:ae:75:61:f1:88:3b:94:35:8a:37: c1:3f:77:73:13:ca:b2:e0:89:3f:ba:35:89:c7:0d:cc:df:66: 55:dc:9a:1d:58:20:0e:86:81:54:4c:cc:3c:1b:1b:97:8a:b2: 7d:d1:52:b3:3b:2d:43:f7:1a:3c:6f:ed:f3:0b:59:51:21:16: cc:4d:27:35:06:46:d9:90:57:dc:18:cf:a4:85:0c:04:4a:21: 09:ca:7d:90:c4:ab:13:4f:e4:43:9b:29:12:cb:26:a4:f7:9f: 94:41:61:bc:e4:ca:3d:1e:25:4d:30:fe:41:01:8c:88:f1:37: ab:80:52:73:61:6e:9e:3b:28:ba:b2:9c:db:91:c9:1d:bd:be: c0:67:47:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNDMwMTg0MjEzWhcNMjYwNTA3MTg0MjEzWjAYMRYwFAYD VQQDEw02OWYzYTI4NS1jYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQEjBCx3LCWiE6eaTPxM6qpC3sS/7G67V/TMz6pJ7s8syECdLligXWMx0+eP bhe/i7Fcl9sqmLvnx+se5f8hBnnZucYh4jY1Vxwpaf9O2+NhOK4Byp6yuW9DN+FO HMgmU5mDnxwFOjZWpPQJmzlsmkhV1+gLWxu+EmKBFJyguPLCF9ArOmI12eJsWlBd YqvKRDnGvIhqUyqZSGRcJgpR7UZ0G3PaPBiluwU6X9dLIqWOPKR3InMUXTUwkV4x 2PjP9RT3rNzxazpNXo6S68oXZwRNzTBrJEzI9q85/jrs7/n80ranYwPTLk9d4Tb5 w8g00CJxSeWdMqPCYpW2VFa6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyAXUBr peAWv9iAMQqbIVtDOnvnMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3lpO1cuVKYLgm1IE2MvTderT3ZidDLIV2jbPkuknyXfRlZ0Ohd9V2ewIscX kCPqjVxIy8qOwR67ldkROyk9yInhOP18ywmMpHHMIH0eJT8JI6Hdsz+Dr/dXLc2k DLeF6ZM7JSoh8F/FUzIQ44bGEbx4I8SudWHxiDuUNYo3wT93cxPKsuCJP7o1iccN zN9mVdyaHVggDoaBVEzMPBsbl4qyfdFSszstQ/caPG/t8wtZUSEWzE0nNQZG2ZBX 3BjPpIUMBEohCcp9kMSrE0/kQ5spEssmpPeflEFhvOTKPR4lTTD+QQGMiPE3q4BS c2FunjsourKc25HJHb2+wGdH8g== -----END CERTIFICATE-----Generated at Sat May 2 01:30:05 2026 by rpki-client