$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: Q/m8CCNmc9jdmGXS/hGGZVFXn66O9fDhd2WD7VGbCKQ= Subject key identifier: EA:3A:03:8C:6B:4D:0E:F5:83:F3:AD:CD:58:5C:FA:40:85:2E:2F:02 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 010B Signing time: Sat 05 Sep 2026 05:50:00 +0000 Manifest this update: Sat 05 Sep 2026 05:50:00 +0000 Manifest next update: Sat 12 Sep 2026 05:50:00 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: IA9+CwNpIc7ES+kcBui2fwUli0Qpj9apTq2m/t/U0fQ=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: 73STUG9MRsTj+UMDTuA4X0z5fGUTYqhKS5W5S7xFgxs=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: iEuV0+5znqF8f5T5Ps6WIUoKRiKa2jw2dHDVVLuYtWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Sep 5 05:50:00 2026 GMT Not After : Sep 12 05:50:00 2026 GMT Subject: CN=6a9bad88-495c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:42:ef:a4:39:2c:dd:02:97:ab:22:94:d6: 47:1d:a3:1c:32:63:c5:c7:96:69:cc:99:11:98:b3: a6:7f:43:88:96:0b:ea:e3:4f:be:89:81:ae:72:45: 88:ec:d6:77:41:5b:30:7e:fc:71:b0:53:57:76:a6: 8f:81:16:c8:ab:70:6d:da:0a:76:9d:09:63:9a:46: e3:b5:21:0d:6b:49:5a:4b:0b:da:fc:70:4f:fd:f9: 32:bf:fb:86:d3:3d:7e:69:57:18:d3:46:ad:46:82: e2:50:08:74:3f:2f:86:8c:29:48:89:8f:0a:f6:f1: 7c:5e:65:89:53:d1:a5:8b:ee:ae:c4:af:b7:c3:b3: d6:57:90:f2:97:86:6e:66:3f:e7:b9:19:2d:4c:6d: 9b:26:aa:2a:0c:67:b3:6e:d3:99:8a:e3:3c:5a:a1: 81:88:e5:cf:20:0f:50:93:a1:25:36:24:f3:fa:c4: 63:e6:a7:fd:aa:c5:79:3c:17:6b:58:26:fc:42:21: 47:c1:21:35:5b:e4:d0:18:91:9e:cf:b5:1a:11:e5: f8:80:33:9e:fd:61:3a:f0:69:dd:91:e1:f2:38:04: 21:7e:b8:1b:16:83:4c:d4:9a:b1:6c:95:7b:7e:ff: b0:c1:47:13:43:5f:19:6f:3d:1a:7b:2c:3c:c4:b7: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3A:03:8C:6B:4D:0E:F5:83:F3:AD:CD:58:5C:FA:40:85:2E:2F:02 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:52:38:0b:35:fe:56:05:fd:7f:ab:6a:da:4d:f7:25:ec: c1:00:69:d4:4e:2e:b1:ca:20:1d:b1:54:cd:18:89:89:ce:c7: 2c:f9:19:e8:82:1b:c8:5e:82:92:19:08:6b:76:9e:d9:d0:6f: 5c:2d:72:20:97:74:2d:99:e3:f6:b4:c7:52:6f:33:68:7e:53: 0d:58:5a:75:d6:4a:48:df:3b:b2:36:00:3e:c9:0b:4b:55:fb: 3d:e0:47:c0:f1:f3:24:0a:33:97:71:02:89:bb:27:44:6d:4c: 0e:a8:b3:f5:c6:c2:46:55:79:f3:41:68:af:03:32:2d:55:96: c2:3f:66:69:07:f8:4b:8c:3b:51:78:09:0e:2f:19:e7:19:d7: b6:ab:a8:9d:ba:b9:3f:5c:0b:83:c7:be:47:d8:17:be:35:79: d7:2a:5a:43:64:94:67:f1:0c:f3:37:14:a2:5a:cd:3f:f2:87: 46:08:58:c0:00:2e:73:e0:9d:4b:03:6a:92:12:4e:29:92:78: a3:f0:0a:82:b9:36:b0:82:ba:ab:05:87:7f:75:db:fb:23:27: 3b:bf:9e:f4:9e:22:43:8f:0d:9d:ff:be:e5:e4:65:15:d5:77: 6d:ca:21:a7:56:cd:d8:a1:dc:4b:33:42:89:a6:7c:7e:d3:04: d2:83:89:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGM0UxMTAvBgNVBAUTKDlDRTkxN0RDM0FFMEM1QkEyRTc3Q0I3NzVBM0FEOTlD Njg1QzQwNkIwHhcNMjYwOTA1MDU1MDAwWhcNMjYwOTEyMDU1MDAwWjAYMRYwFAYD VQQDEw02YTliYWQ4OC00OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjm5C76Q5LN0Cl6silNZHHaMcMmPFx5ZpzJkRmLOmf0OIlgvq40++iYGuckWI 7NZ3QVswfvxxsFNXdqaPgRbIq3Bt2gp2nQljmkbjtSENa0laSwva/HBP/fkyv/uG 0z1+aVcY00atRoLiUAh0Py+GjClIiY8K9vF8XmWJU9Gli+6uxK+3w7PWV5Dyl4Zu Zj/nuRktTG2bJqoqDGezbtOZiuM8WqGBiOXPIA9Qk6ElNiTz+sRj5qf9qsV5PBdr WCb8QiFHwSE1W+TQGJGez7UaEeX4gDOe/WE68GndkeHyOAQhfrgbFoNM1JqxbJV7 fv+wwUcTQ18Zbz0aeyw8xLc0ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOo6A4xr TQ71g/OtzVhc+kCFLi8CMB8GA1UdIwQYMBaAFJzpF9w64MW6LnfLd1o62ZxoXEBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUYzRS8zMzlFREU2ODEw RTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hib3VkOHQzV2pyWm5HaGNR R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hi b3VkOHQzV2pyWm5HaGNRR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARrhSOAs1/lYF/X+ratpN9yXswQBp1E4uscogHbFUzRiJic7HLPkZ6IIbyF6C khkIa3ae2dBvXC1yIJd0LZnj9rTHUm8zaH5TDVhaddZKSN87sjYAPskLS1X7PeBH wPHzJAozl3ECibsnRG1MDqiz9cbCRlV580ForwMyLVWWwj9maQf4S4w7UXgJDi8Z 5xnXtquonbq5P1wLg8e+R9gXvjV51ypaQ2SUZ/EM8zcUolrNP/KHRghYwAAuc+Cd SwNqkhJOKZJ4o/AKgrk2sIK6qwWHf3Xb+yMnO7+e9J4iQ48Nnf++5eRlFdV3bcoh p1bN2KHcSzNCiaZ8ftME0oOJTQ== -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:58 2026 by rpki-client