$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft File: NyCB99vi7xGkQRvU5q-G8yaYyvo.mft (raw, json) Hash identifier: 3khc54DVrTL2HIeVK+TitiZjn8p/uDBrbUjHwgY/hm8= Subject key identifier: 7F:60:43:85:A3:89:5C:00:F0:3E:A1:ED:CA:23:4D:FA:6A:1E:EF:DB Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft Manifest number: 01AE Signing time: Wed 19 Aug 2026 04:43:44 +0000 Manifest this update: Wed 19 Aug 2026 04:43:43 +0000 Manifest next update: Wed 26 Aug 2026 04:43:43 +0000 Files and hashes: 1: NyCB99vi7xGkQRvU5q-G8yaYyvo.crl (hash: wc0QNwK3ciuEiPHwWHuiTFntpxfRbIFPnKvTUf8uaD4=) 2: 82748D8A8D3A11F0833AB01AC4F9AE02.roa (hash: r4Ca6TL7G33YNpkOkNbOrzu02s5Gj49drdeKjyxRr/8=) 3: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (hash: X9BGtBs1osigY8tUwUmWLsAjtgQ3b+t0twb857Yii5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Validity Not Before: Aug 19 04:43:43 2026 GMT Not After : Aug 26 04:43:43 2026 GMT Subject: CN=6a853480-d7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:cc:a2:f0:19:d2:c8:49:88:50:e6:10:29: a3:4e:68:18:90:8f:e5:9a:04:8a:9f:c7:ca:4b:6c: 70:a0:7a:ae:16:b7:36:53:66:f7:26:56:77:be:c4: bc:c1:ed:c9:53:4d:cf:b5:75:75:0a:1c:69:01:b4: ef:4c:a0:a0:e0:a2:3a:58:1f:73:15:79:ce:9e:b0: a0:d3:d0:ea:67:f9:9d:a6:ca:05:25:5e:24:0d:c2: 7d:a2:c5:69:f6:96:47:31:a5:0f:82:c3:04:65:9a: d1:f3:4d:bd:0a:98:8a:0c:73:8c:67:6a:be:7f:3e: 84:ed:8b:da:e9:8b:81:06:d7:f4:71:11:d5:16:00: 0d:4c:42:c5:d1:fb:37:d7:23:f1:78:6a:d5:25:32: 12:93:8d:3c:18:5c:ac:af:46:05:09:76:a6:47:fa: f7:a0:35:31:84:d8:f0:72:64:d4:09:44:f3:4f:de: d9:ce:20:d7:2b:06:f3:4f:c7:e0:c7:17:24:ee:b2: f6:ab:40:10:8f:2b:b0:a8:2f:0c:35:15:55:a9:10: 01:fe:a6:ff:89:d9:8d:c5:de:f7:aa:e2:64:88:41: b0:47:2d:ad:1e:9f:02:d9:c6:9e:2f:bb:6e:a3:f1: da:18:dc:70:af:2a:1e:fb:8c:2f:4a:6b:8c:ec:ea: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:43:85:A3:89:5C:00:F0:3E:A1:ED:CA:23:4D:FA:6A:1E:EF:DB X509v3 Authority Key Identifier: keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:58:eb:c7:25:55:87:f3:5f:88:46:b5:20:57:a6:19:7d:4d: b8:be:af:2f:8d:1b:e2:91:f0:66:07:e4:fb:0e:9f:0b:45:3d: 7b:2b:ea:25:5a:91:db:32:fe:95:c0:a7:74:fc:d4:90:87:83: ed:98:db:d6:0e:1c:9f:67:e7:0d:4e:87:8f:79:82:36:b0:dd: 22:12:d8:2e:21:48:8a:08:69:e2:ae:0c:cd:1f:fb:79:39:03: 0c:47:78:1d:f0:05:be:08:0f:04:df:e3:3f:ef:ec:7d:88:7c: b2:0b:4c:c9:b7:ca:0c:43:86:dc:51:8c:32:14:47:b9:57:51: 8b:8e:0a:21:29:d9:bf:58:08:48:9c:52:0d:35:cb:48:62:05: 49:f5:10:bc:0c:55:87:9a:f5:d7:24:cd:4a:43:84:a6:ca:1c: 67:ef:78:81:8e:1b:98:c0:54:d0:cc:7d:6a:64:30:f1:4c:56: e4:94:20:35:47:c0:68:8e:a8:21:2e:f3:d3:a2:ac:c7:d8:36: 5a:59:3c:c9:01:48:4e:f0:75:5f:24:fe:f1:83:dc:7e:42:b2: 13:cf:d6:eb:61:d6:c9:f9:05:e7:cd:57:4f:7e:e9:78:fa:e7: 97:8b:0f:1f:ca:9b:54:66:03:cd:09:58:18:a3:2d:85:92:db: dc:fa:45:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz MjY5OENBRkEwHhcNMjYwODE5MDQ0MzQzWhcNMjYwODI2MDQ0MzQzWjAYMRYwFAYD VQQDEw02YTg1MzQ4MC1kN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR/MovAZ0shJiFDmECmjTmgYkI/lmgSKn8fKS2xwoHquFrc2U2b3JlZ3vsS8 we3JU03PtXV1ChxpAbTvTKCg4KI6WB9zFXnOnrCg09DqZ/mdpsoFJV4kDcJ9osVp 9pZHMaUPgsMEZZrR8029CpiKDHOMZ2q+fz6E7Yva6YuBBtf0cRHVFgANTELF0fs3 1yPxeGrVJTISk408GFysr0YFCXamR/r3oDUxhNjwcmTUCUTzT97ZziDXKwbzT8fg xxck7rL2q0AQjyuwqC8MNRVVqRAB/qb/idmNxd73quJkiEGwRy2tHp8C2caeL7tu o/HaGNxwryoe+4wvSmuM7OpGYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9gQ4Wj iVwA8D6h7cojTfpqHu/bMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0 MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5 dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUxOS8xMEM3RjBBQTE0MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4 R2tRUnZVNXEtRzh5YVl5dm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAljrxyVVh/NfiEa1IFemGX1NuL6vL40b4pHwZgfk+w6fC0U9eyvqJVqR2zL+ lcCndPzUkIeD7Zjb1g4cn2fnDU6Hj3mCNrDdIhLYLiFIighp4q4MzR/7eTkDDEd4 HfAFvggPBN/jP+/sfYh8sgtMybfKDEOG3FGMMhRHuVdRi44KISnZv1gISJxSDTXL SGIFSfUQvAxVh5r11yTNSkOEpsocZ+94gY4bmMBU0Mx9amQw8UxW5JQgNUfAaI6o IS7z06Ksx9g2Wlk8yQFITvB1XyT+8YPcfkKyE8/W62HWyfkF581XT37pePrnl4sP H8qbVGYDzQlYGKMthZLb3PpF6Q== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:40 2026 by rpki-client