$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: Azp+4LPumHcBXbAUCbdd4Pd7O63tXS8wYi8zqu/VhYk= Subject key identifier: 2D:F9:CE:18:31:64:9A:BC:94:16:3A:50:94:E0:AE:A0:33:1F:28:C5 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 150E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1503 Signing time: Wed 26 Aug 2026 16:46:52 +0000 Manifest this update: Wed 26 Aug 2026 16:46:52 +0000 Manifest next update: Wed 02 Sep 2026 16:46:52 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: sf7TQB0O7L7ZyOrPJ24gMzhYb4WXVMyXrZCmQPzOR+I=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 16:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5390 (0x150e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Aug 26 16:46:52 2026 GMT Not After : Sep 2 16:46:52 2026 GMT Subject: CN=6a8f187c-a988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:de:5e:64:83:77:15:6b:8d:55:dc:8f:c1: 5f:64:3f:89:5f:2c:b8:3e:8e:63:fd:ab:8b:ea:22: 07:d2:4e:b6:8c:46:f2:cf:19:b4:9b:56:1a:10:92: d2:dd:95:72:39:ef:c7:01:35:39:4c:fa:9d:63:85: a8:b8:80:03:0b:a8:7b:e9:5b:82:87:01:c7:96:2f: 86:27:be:64:c7:3e:69:6b:5a:14:f2:13:68:35:dd: 5c:53:68:43:bd:34:98:27:44:53:18:b4:32:8c:0e: d6:88:ba:84:a5:70:d1:7b:9f:4b:17:26:f8:01:6c: 62:0f:ea:97:13:f7:35:59:f9:9d:d4:50:d8:9c:aa: 7a:4f:a6:d4:fa:ca:a4:30:8c:33:dc:69:1c:cb:a7: c1:97:26:83:5a:01:70:7a:a5:a5:92:b5:1e:1a:c1: ea:88:f3:f9:0e:15:1a:b5:06:3d:f6:bb:a3:9f:cd: f4:ad:2c:f7:9f:de:2b:6a:56:55:ef:ee:43:f4:89: d7:a7:3a:87:73:b4:0f:00:82:c5:60:50:f2:57:9b: 90:1e:58:5c:3c:0e:2d:23:c0:00:d3:9a:9a:8e:6a: a8:c2:50:07:6b:c9:06:fb:b8:94:3e:22:d4:1f:68: 0d:4f:25:ca:4b:01:1c:59:89:78:6c:5f:f5:e4:14: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F9:CE:18:31:64:9A:BC:94:16:3A:50:94:E0:AE:A0:33:1F:28:C5 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:11:d2:7a:55:d1:57:f1:6c:81:d6:d7:ef:de:e6:c5:18:11: 48:12:7c:7c:2f:28:6c:a3:3c:ad:00:01:0c:75:a7:58:34:2d: c8:22:08:8c:15:2b:5b:1b:07:82:a7:a9:dd:24:e1:50:99:f2: 5c:88:fa:d2:38:c2:20:5c:1d:ce:4c:cf:0c:9c:d0:39:a8:04: 91:ab:5e:92:49:99:f1:ad:c6:a3:ea:71:4e:61:6c:de:d2:5d: be:27:a4:66:0c:fd:73:b0:ae:5e:01:39:a9:73:81:d2:e2:21: 82:6b:33:9e:c2:18:d6:da:17:81:d8:5d:5a:4e:4c:07:52:8c: 7d:4a:c0:1e:e3:d3:ed:80:ec:25:1c:8b:a3:b4:c7:0b:5e:0d: 76:1a:f6:f8:5a:74:b0:ea:30:f7:32:40:e7:2d:1d:31:f4:80: a7:71:4e:69:8a:82:ae:3c:25:6c:8a:97:a0:f3:0f:76:a5:40: dc:a6:62:e7:39:2e:79:8e:d8:ee:6b:91:5a:3a:16:3d:47:b1: 27:b8:16:85:b5:de:27:9f:6e:a5:88:49:ef:6a:33:ca:de:22: 27:f6:d6:49:25:f4:3c:25:b9:a0:ba:18:c4:b5:93:de:95:7e: b9:ff:f9:88:f2:cf:16:6c:bc:6b:4a:7b:87:57:4a:b7:25:36: 6e:54:a5:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjYwODI2MTY0NjUyWhcNMjYwOTAyMTY0NjUyWjAYMRYwFAYD VQQDEw02YThmMTg3Yy1hOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjineXmSDdxVrjVXcj8FfZD+JXyy4Po5j/auL6iIH0k62jEbyzxm0m1YaEJLS 3ZVyOe/HATU5TPqdY4WouIADC6h76VuChwHHli+GJ75kxz5pa1oU8hNoNd1cU2hD vTSYJ0RTGLQyjA7WiLqEpXDRe59LFyb4AWxiD+qXE/c1Wfmd1FDYnKp6T6bU+sqk MIwz3Gkcy6fBlyaDWgFweqWlkrUeGsHqiPP5DhUatQY99rujn830rSz3n94ralZV 7+5D9InXpzqHc7QPAILFYFDyV5uQHlhcPA4tI8AA05qajmqowlAHa8kG+7iUPiLU H2gNTyXKSwEcWYl4bF/15BQvLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC35zhgx ZJq8lBY6UJTgrqAzHyjFMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhHSelXRV/FsgdbX797mxRgRSBJ8fC8obKM8rQABDHWnWDQtyCIIjBUrWxsH gqep3SThUJnyXIj60jjCIFwdzkzPDJzQOagEkatekkmZ8a3Go+pxTmFs3tJdviek Zgz9c7CuXgE5qXOB0uIhgmsznsIY1toXgdhdWk5MB1KMfUrAHuPT7YDsJRyLo7TH C14Ndhr2+Fp0sOow9zJA5y0dMfSAp3FOaYqCrjwlbIqXoPMPdqVA3KZi5zkueY7Y 7muRWjoWPUexJ7gWhbXeJ59upYhJ72ozyt4iJ/bWSSX0PCW5oLoYxLWT3pV+uf/5 iPLPFmy8a0p7h1dKtyU2blSlJw== -----END CERTIFICATE-----Generated at Thu Aug 27 19:08:40 2026 by rpki-client