$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: fT0o+SdJ8vPwvZP4Wt2uWk2l+O9PbTk3LrRkC37/6bs= Subject key identifier: 5D:EA:8A:EB:38:97:FD:4D:86:6F:A8:BC:D1:B9:15:68:DA:80:3E:F1 Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: F2 Signing time: Thu 21 May 2026 06:30:18 +0000 Manifest this update: Thu 21 May 2026 06:30:17 +0000 Manifest next update: Thu 28 May 2026 06:30:17 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: vpPCiLJLr1SGSjCFTCRM6dyFG45rC1PhdgR8ijLxoTk=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: May 21 06:30:17 2026 GMT Not After : May 28 06:30:17 2026 GMT Subject: CN=6a0ea67a-c021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:1d:ae:25:38:bc:fc:48:72:3e:11:80:49: f2:bb:bc:98:11:85:0a:d3:ef:66:88:a5:30:50:26: 8e:0f:12:96:29:b3:b1:83:c2:46:93:d8:17:1f:c3: a7:61:34:9f:d6:59:cc:e3:88:91:7a:08:23:55:b1: 4f:cc:d4:0d:e6:e6:1c:41:33:b5:bb:78:21:ad:2b: 51:b0:52:00:7c:b8:28:07:7f:71:8d:50:27:fd:2a: e5:de:fd:7e:27:6c:ef:3e:49:b7:70:a2:63:a2:f8: 93:a6:da:aa:5a:db:75:d8:66:70:f9:c2:bd:88:62: 4a:c9:d7:57:10:64:f1:1f:73:6a:c9:2c:e3:f3:d7: 3e:d0:ae:f4:06:3d:af:22:39:c5:db:7e:5a:c3:86: e9:87:92:37:51:1a:61:76:a3:0d:66:93:de:a3:aa: 1d:fa:76:d8:f0:5c:3c:0d:39:0e:c5:8f:7a:ce:38: 84:92:0b:ee:77:3a:e0:40:27:fa:c3:63:83:46:b4: 31:3b:ce:a4:b9:38:c7:f9:1f:78:de:e0:fb:92:9a: 77:98:06:fa:58:a3:c6:6d:39:34:7a:f9:26:89:5c: 9e:92:08:51:c1:b1:e4:df:23:2d:b2:7c:d6:22:75: c6:50:c5:00:1b:69:4a:39:b5:b5:bb:e8:82:33:fd: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EA:8A:EB:38:97:FD:4D:86:6F:A8:BC:D1:B9:15:68:DA:80:3E:F1 X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:28:04:8c:c7:18:9d:e9:2d:70:4a:ea:6d:67:ea:91:bd:c0: 57:e8:93:d3:45:57:e0:bc:cb:f3:26:22:71:72:16:f8:1a:f3: 0d:a3:3f:a4:a0:87:79:b1:0c:53:7f:49:54:ac:c6:a0:1d:9a: 15:4d:7c:5a:91:03:e0:c8:ad:2a:11:6e:a7:8b:2b:60:c9:93: 0c:42:8e:11:72:83:3f:f8:33:21:c3:92:40:57:d8:ed:ef:42: 7b:fb:b3:df:dd:8f:0a:1b:91:d7:f9:6b:f7:cb:ed:f1:cc:a9: c4:7f:58:fa:1d:48:03:cd:dd:17:a5:1c:3c:3a:d5:30:f2:fa: ac:9f:ba:b7:d2:08:60:be:78:b9:21:61:12:f6:df:da:df:4e: 1b:ed:f8:b1:3a:0e:1c:94:7b:31:bf:34:37:96:34:10:bb:4a: 9c:d0:70:0d:19:d8:7c:ed:92:c3:67:eb:96:5e:31:8b:9f:cd: a6:b1:76:5f:0d:f5:0d:5d:58:6d:34:35:99:b2:56:25:c4:45: eb:61:5e:b1:42:95:ce:3a:13:c4:37:dc:44:ae:a4:86:4e:a8: 74:c0:26:a2:bb:d0:ec:26:b3:3b:5a:19:ed:09:2d:fc:a9:06: cf:a0:6e:de:e9:5a:66:18:5f:b3:45:84:35:1e:c0:0b:4d:25: 9b:a8:c3:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjYwNTIxMDYzMDE3WhcNMjYwNTI4MDYzMDE3WjAYMRYwFAYD VQQDEw02YTBlYTY3YS1jMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WEdriU4vPxIcj4RgEnyu7yYEYUK0+9miKUwUCaODxKWKbOxg8JGk9gXH8On YTSf1lnM44iReggjVbFPzNQN5uYcQTO1u3ghrStRsFIAfLgoB39xjVAn/Srl3v1+ J2zvPkm3cKJjoviTptqqWtt12GZw+cK9iGJKyddXEGTxH3NqySzj89c+0K70Bj2v IjnF235aw4bph5I3URphdqMNZpPeo6od+nbY8Fw8DTkOxY96zjiEkgvudzrgQCf6 w2ODRrQxO86kuTjH+R943uD7kpp3mAb6WKPGbTk0evkmiVyekghRwbHk3yMtsnzW InXGUMUAG2lKObW1u+iCM/1dxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3qius4 l/1Nhm+ovNG5FWjagD7xMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkM3Mi85RDVCNTE1NkVDRjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3 bnV5cGpudkhWTXZKa05mV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdCgEjMcYnektcErqbWfqkb3AV+iT00VX4LzL8yYicXIW+BrzDaM/pKCHebEM U39JVKzGoB2aFU18WpED4MitKhFup4srYMmTDEKOEXKDP/gzIcOSQFfY7e9Ce/uz 392PChuR1/lr98vt8cypxH9Y+h1IA83dF6UcPDrVMPL6rJ+6t9IIYL54uSFhEvbf 2t9OG+34sToOHJR7Mb80N5Y0ELtKnNBwDRnYfO2Sw2frll4xi5/NprF2Xw31DV1Y bTQ1mbJWJcRF62FesUKVzjoTxDfcRK6khk6odMAmorvQ7CazO1oZ7Qkt/KkGz6Bu 3ulaZhhfs0WENR7AC00lm6jD/Q== -----END CERTIFICATE-----Generated at Thu May 21 15:05:11 2026 by rpki-client