$ rpki-client -vvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: aY80EugX2T1EoXq7lXc1PCxAYo4q1+seXFokkBXCkNY= Subject key identifier: 82:68:95:4B:96:79:6D:A8:75:D4:63:B5:06:47:0F:5A:71:E1:76:93 Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 1B Signing time: Sun 31 May 2026 08:47:35 +0000 Manifest this update: Sun 31 May 2026 08:47:35 +0000 Manifest next update: Sun 07 Jun 2026 08:47:35 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: ClUvbKy0x5Ydgro0shB2aPzhnkQVTDZh7fnhzTv3Q4E=) 2: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) 3: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 08:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: May 31 08:47:35 2026 GMT Not After : Jun 7 08:47:35 2026 GMT Subject: CN=6a1bf5a7-6dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:5d:e4:e5:77:68:22:cb:6e:4c:64:4e:a1: 33:fd:d9:90:7d:a0:b2:9f:50:a4:60:89:9f:17:09: 94:43:4c:44:8f:e1:50:b1:33:95:68:ee:b5:91:8b: 15:e2:25:e0:1c:19:cf:b0:80:2b:eb:e5:46:45:2d: 64:8a:7d:1b:49:a6:c9:b6:05:a6:5b:a1:74:bb:a5: f4:85:77:ba:30:78:6c:8d:8e:48:8b:4e:1a:61:80: 83:03:19:e8:e9:68:dd:0e:3d:bb:a2:ef:77:03:7f: 61:ac:9c:52:5d:a4:2f:cd:ee:7e:97:80:81:65:f9: 0e:34:46:2e:10:6c:1e:67:5b:35:1f:32:be:db:21: 7e:e4:6d:06:fd:d5:ab:c5:c2:6d:25:2c:c1:f0:96: 5b:2d:61:16:dd:ff:5c:8e:2a:c0:3f:8a:50:06:87: 6f:50:89:02:43:08:5b:c6:fa:2f:bc:17:80:ac:01: 80:89:81:21:02:62:da:0b:2d:f7:f6:a9:81:90:26: d6:52:07:44:3f:0f:45:95:7c:6f:79:47:fb:d8:1d: da:af:0c:53:4b:c7:9a:ff:27:3d:e9:c1:af:ae:3a: 76:be:7f:10:6f:c0:c5:78:b1:2c:8c:d3:1c:69:3f: 38:9b:f4:42:68:01:08:f6:2c:e5:58:da:0a:ee:31: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:95:4B:96:79:6D:A8:75:D4:63:B5:06:47:0F:5A:71:E1:76:93 X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:68:12:12:39:99:a5:cd:36:83:7d:0b:9e:f6:6f:0e:7e:45: 10:e7:7c:87:43:7d:79:8d:79:c4:b3:9c:f5:5d:14:e4:3b:2f: b7:e7:85:20:b2:31:24:e8:90:8a:f6:7d:99:a8:34:4d:88:dc: 22:0e:23:56:5e:e5:da:77:34:97:b3:67:13:16:d3:49:2b:d3: 45:00:3b:8f:ca:55:8b:bf:99:e1:80:62:9a:63:87:dc:f2:74: 80:ef:83:ee:fa:90:64:46:91:97:b7:f8:fc:a7:59:79:e3:a4: c8:e2:26:40:40:a8:a6:e5:65:08:7b:b2:b0:3d:7c:e0:68:ac: 00:12:e2:ea:2e:6a:ef:92:46:f1:ae:89:ad:18:77:c9:7a:51: bb:66:89:5d:89:1c:6d:07:53:bb:9f:eb:74:0f:7b:ae:92:b9: f2:7c:13:c5:af:d5:47:31:4e:72:65:94:2d:75:8e:b6:9e:ca: c7:26:16:a7:c9:16:2b:00:aa:53:42:60:6a:db:fd:8c:e3:4e: 0e:33:da:9c:46:8d:b6:ca:8f:35:fd:a4:bf:32:83:e8:47:af: 06:ec:45:f0:58:e1:5a:c9:2f:e2:37:58:b6:0d:f1:96:b1:a8: 9b:fb:29:c3:2c:94:14:03:c4:b4:7b:20:2c:4e:4b:fd:73:33: 8f:d4:8c:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjA1MzEwODQ3MzVaFw0yNjA2MDcwODQ3MzVaMBgxFjAUBgNV BAMTDTZhMWJmNWE3LTZkYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtnV3k5XdoIstuTGROoTP92ZB9oLKfUKRgiZ8XCZRDTESP4VCxM5Vo7rWRixXi JeAcGc+wgCvr5UZFLWSKfRtJpsm2BaZboXS7pfSFd7oweGyNjkiLThphgIMDGejp aN0OPbui73cDf2GsnFJdpC/N7n6XgIFl+Q40Ri4QbB5nWzUfMr7bIX7kbQb91avF wm0lLMHwllstYRbd/1yOKsA/ilAGh29QiQJDCFvG+i+8F4CsAYCJgSECYtoLLff2 qYGQJtZSB0Q/D0WVfG95R/vYHdqvDFNLx5r/Jz3pwa+uOna+fxBvwMV4sSyM0xxp Pzib9EJoAQj2LOVY2gruMajzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgmiVS5Z5 bah11GO1BkcPWnHhdpMwHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgaBISOZmlzTaDfQue9m8OfkUQ53yHQ315jXnEs5z1XRTkOy+354UgsjEk6JCK 9n2ZqDRNiNwiDiNWXuXadzSXs2cTFtNJK9NFADuPylWLv5nhgGKaY4fc8nSA74Pu +pBkRpGXt/j8p1l546TI4iZAQKim5WUIe7KwPXzgaKwAEuLqLmrvkkbxromtGHfJ elG7ZoldiRxtB1O7n+t0D3uukrnyfBPFr9VHMU5yZZQtdY62nsrHJhanyRYrAKpT QmBq2/2M404OM9qcRo22yo81/aS/MoPoR68G7EXwWOFayS/iN1i2DfGWsaib+ynD LJQUA8S0eyAsTkv9czOP1Iy8 -----END CERTIFICATE-----Generated at Sun May 31 14:19:03 2026 by rpki-client