$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: x1WFE7hZs8tH4ZqUzmJRmOvM/oV5NawnZ2rkh+PRBAY= Subject key identifier: 21:F9:00:39:BA:4F:AF:71:2C:AF:34:DA:AA:99:C1:EE:AC:B2:FD:B3 Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: 012C Signing time: Sun 13 Sep 2026 05:38:55 +0000 Manifest this update: Sun 13 Sep 2026 05:38:55 +0000 Manifest next update: Sun 20 Sep 2026 05:38:55 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: Akwn524bKTr13N/Rhko7HbrnwLxSrLpphbB4AZ6PsBQ=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Sep 2026 05:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: Sep 13 05:38:55 2026 GMT Not After : Sep 20 05:38:55 2026 GMT Subject: CN=6aa636ef-e610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:ea:d2:2b:0d:4a:bf:55:e8:cb:3f:a0:85: 7b:b9:b6:82:3a:97:67:b8:b4:fd:fe:71:75:5e:74: 3e:34:09:2d:50:4e:41:6e:3e:16:af:23:48:76:1d: 74:65:94:07:e7:72:51:19:29:a6:ee:4c:de:09:17: e3:01:c9:5e:8c:2f:39:20:40:d0:8b:fe:5e:90:4d: 99:0f:10:a7:c1:84:33:d6:b0:a2:96:a5:c3:3a:cf: d8:45:ed:bc:a0:bc:4a:72:f7:e4:ac:20:c4:31:4b: dc:2b:42:bb:4b:ca:75:01:8b:cc:2d:da:e8:1a:06: 97:17:8f:bf:b4:44:9a:b6:c4:b5:70:01:d0:a7:0e: 0c:62:58:80:b9:2a:f0:18:3c:f7:fa:d6:c3:5c:92: 2e:38:5b:24:d9:f1:02:e1:1b:a8:aa:90:e6:84:71: ea:23:17:7e:0d:82:fb:1c:a9:1e:01:c7:b0:0a:98: 70:51:c4:4d:ac:69:16:d3:78:e4:51:0c:88:77:6c: 40:d9:28:2a:2f:e6:04:76:1c:05:46:b9:35:35:71: c9:e4:f4:aa:d6:be:0b:60:3a:e4:ab:d8:53:63:1c: bf:68:47:cc:c5:48:b7:99:36:ac:5f:8c:03:aa:77: 40:7e:1f:1b:a6:b7:42:6e:10:2e:b6:d1:31:b7:65: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F9:00:39:BA:4F:AF:71:2C:AF:34:DA:AA:99:C1:EE:AC:B2:FD:B3 X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a4:7e:de:54:8c:08:f2:b5:88:72:98:e8:3c:bc:20:47:97: 5d:b1:38:3b:c8:47:c7:ef:16:72:eb:9d:fe:b0:63:f8:28:d1: 70:cc:58:dd:5f:64:68:2b:b0:ca:7f:c5:c0:de:2c:77:b3:46: 1e:d6:12:81:f7:c0:9a:a7:42:cd:ff:6b:57:a9:2b:c5:66:6a: f7:37:90:bb:98:d3:79:26:c4:37:cc:67:2a:18:7a:77:29:1f: 1f:b0:4d:01:46:65:a8:a2:6d:ee:5e:ee:4c:9a:7c:16:9a:ca: 51:eb:0d:a6:d1:08:e0:27:8e:13:42:1b:a5:3f:de:82:d1:72: 65:79:97:13:da:a5:ce:a5:d0:24:86:7e:77:e3:aa:89:28:8e: 17:56:ea:f6:c3:b9:33:de:ce:d4:58:10:60:79:15:0b:96:a0: d2:0c:4e:b0:59:a0:0b:73:91:c9:91:bd:14:f9:fb:0d:17:3d: 40:6c:44:8a:57:a1:5d:db:87:90:44:d6:ed:24:65:33:c2:fc: 47:90:92:b9:e1:47:a6:61:f5:06:f7:b3:d1:f1:c3:15:99:9b: 42:df:d4:32:54:de:9e:e6:1b:9a:9e:c7:47:aa:b6:86:cf:52: 75:d1:78:83:74:d9:92:60:8f:56:5e:dc:2d:9e:8e:58:f9:3d: 1e:9d:05:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjYwOTEzMDUzODU1WhcNMjYwOTIwMDUzODU1WjAYMRYwFAYD VQQDEw02YWE2MzZlZi1lNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOXq0isNSr9V6Ms/oIV7ubaCOpdnuLT9/nF1XnQ+NAktUE5Bbj4WryNIdh10 ZZQH53JRGSmm7kzeCRfjAclejC85IEDQi/5ekE2ZDxCnwYQz1rCilqXDOs/YRe28 oLxKcvfkrCDEMUvcK0K7S8p1AYvMLdroGgaXF4+/tESatsS1cAHQpw4MYliAuSrw GDz3+tbDXJIuOFsk2fEC4RuoqpDmhHHqIxd+DYL7HKkeAcewCphwUcRNrGkW03jk UQyId2xA2SgqL+YEdhwFRrk1NXHJ5PSq1r4LYDrkq9hTYxy/aEfMxUi3mTasX4wD qndAfh8bprdCbhAuttExt2WsfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH5ADm6 T69xLK802qqZwe6ssv2zMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkM3Mi85RDVCNTE1NkVDRjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3 bnV5cGpudkhWTXZKa05mV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfKR+3lSMCPK1iHKY6Dy8IEeXXbE4O8hHx+8Wcuud/rBj+CjRcMxY3V9kaCuw yn/FwN4sd7NGHtYSgffAmqdCzf9rV6krxWZq9zeQu5jTeSbEN8xnKhh6dykfH7BN AUZlqKJt7l7uTJp8FprKUesNptEI4CeOE0IbpT/egtFyZXmXE9qlzqXQJIZ+d+Oq iSiOF1bq9sO5M97O1FgQYHkVC5ag0gxOsFmgC3ORyZG9FPn7DRc9QGxEilehXduH kETW7SRlM8L8R5CSueFHpmH1Bvez0fHDFZmbQt/UMlTenuYbmp7HR6q2hs9SddF4 g3TZkmCPVl7cLZ6OWPk9Hp0Fgw== -----END CERTIFICATE-----Generated at Sun Sep 13 21:38:24 2026 by rpki-client