$ rpki-client -vvvf rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft File: NHZM7bhiOCXln1WBOjATHQssCWQ.mft (raw, json) Hash identifier: AIGx1IXNWaDi3CIclgOK+NLkLWI1o5uKxOBSPeL6ADU= Subject key identifier: 0D:6B:16:F5:96:AF:43:E3:5B:FD:86:2E:9E:EE:44:7C:04:2B:DB:BC Authority key identifier: 34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 Certificate issuer: /CN=A919588E/serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft Manifest number: 5A Signing time: Mon 05 Oct 2026 08:37:43 +0000 Manifest this update: Mon 05 Oct 2026 08:37:43 +0000 Manifest next update: Mon 12 Oct 2026 08:37:43 +0000 Files and hashes: 1: NHZM7bhiOCXln1WBOjATHQssCWQ.crl (hash: oTrwW6hxFsYEL+ip71jXREHoU+t7KpBXMLi4KX0BZSo=) 2: 900D541C3D5D11F1A70F812BAB833773.roa (hash: hOAE6GYFKcCEtUixdhrZRu64toHXSYY0I91bX8D0qrQ=) 3: 6A00FF4E3D5D11F1A34D081DAB833773.roa (hash: hfHtzaKt+d7NifMPJ+PJLSaSY1cKUA7PNwOy2p46Nn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919588E, serialNumber=34764CEDB8623825E59F55813A30131D0B2C0964 Validity Not Before: Oct 5 08:37:43 2026 GMT Not After : Oct 12 08:37:43 2026 GMT Subject: CN=6ac361d7-ad94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:45:9f:d0:92:a7:3d:4a:12:d9:d6:08:0d: 8a:b4:47:17:3e:3f:9c:9e:d1:38:f0:1b:f1:86:b6: a2:b8:6f:51:b2:ab:b3:42:38:12:67:60:3d:03:3e: ca:21:49:7c:50:a7:47:be:79:6c:7b:2e:ec:6f:dc: d9:7e:13:7a:ee:04:96:19:24:d5:f4:83:a7:c0:c6: 1d:1a:9e:47:c3:82:0b:ef:fd:bf:82:cf:ea:c5:86: fc:81:4b:2e:d8:46:95:aa:ec:92:07:de:38:66:de: 64:c8:bf:25:90:9a:f7:32:fb:fa:5e:02:9f:7c:fe: 53:3f:9a:32:26:4b:02:31:e9:4c:b4:2f:bd:d0:a1: ae:68:a0:ea:c9:eb:91:37:1c:d8:a4:26:db:f0:44: 30:25:4b:e0:67:2c:1e:c9:f9:91:88:d9:aa:be:a2: 76:2d:99:b2:ce:c0:13:04:55:d9:1e:bc:2d:ef:7a: bc:dd:28:0c:dc:9a:1f:6b:f2:a8:b2:0b:19:8e:ec: 27:2e:45:76:c3:e0:33:36:bf:2a:4e:d3:31:12:a2: 69:5b:54:82:d3:48:a6:5e:a4:08:1f:c0:fe:46:a4: 76:a3:e1:39:e0:0e:a8:c0:dd:75:ce:3f:ae:52:5e: c7:6f:a0:85:cf:ed:13:cf:be:fe:ee:4c:e5:eb:3d: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:16:F5:96:AF:43:E3:5B:FD:86:2E:9E:EE:44:7C:04:2B:DB:BC X509v3 Authority Key Identifier: keyid:34:76:4C:ED:B8:62:38:25:E5:9F:55:81:3A:30:13:1D:0B:2C:09:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHZM7bhiOCXln1WBOjATHQssCWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919588E/00B613263D5D11F1884B2D9FAA833773/NHZM7bhiOCXln1WBOjATHQssCWQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6d:ff:e1:d1:6a:38:ee:65:3e:f3:f7:19:76:2e:ac:5d:5a: 12:40:6c:6e:86:10:38:37:f6:4c:e6:0f:f6:06:2b:fe:41:87: 39:c4:50:c6:9f:96:cb:a2:99:37:45:69:4d:00:e7:88:08:7f: 1f:70:8b:7e:6b:23:1f:84:30:45:03:2e:19:9b:17:2d:21:13: d6:12:2e:c6:99:48:53:bf:a1:21:f2:76:0b:c8:10:7c:db:28: 12:e2:16:24:87:33:3a:83:34:41:42:23:a8:e5:38:c9:1f:a7: bf:94:58:56:e7:6b:73:e8:18:cb:e0:8f:30:c3:0b:65:64:25: 50:d4:49:38:4e:03:46:2b:e3:4a:93:09:1f:55:41:4a:24:87: 49:65:6d:2c:23:ee:4d:2b:4e:26:c0:55:23:d1:19:2e:a5:57: ed:9e:71:b4:76:7b:d3:a5:f6:c3:0d:c3:c3:a0:69:0c:7d:7f: 68:3d:05:aa:66:7c:e6:ee:e5:26:32:ab:6f:ab:04:8e:5d:24: 1a:65:82:c5:ab:16:0d:87:7b:b4:03:ed:73:2c:3e:21:ae:42: 1c:68:66:7d:7a:51:e3:4e:06:5d:3e:da:54:2c:92:cd:4c:58: fa:bc:2e:90:95:14:8d:84:ef:ea:92:6c:f1:ac:c3:65:6b:a5: 0d:8a:21:b4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTg4RTExMC8GA1UEBRMoMzQ3NjRDRURCODYyMzgyNUU1OUY1NTgxM0EzMDEzMUQw QjJDMDk2NDAeFw0yNjEwMDUwODM3NDNaFw0yNjEwMTIwODM3NDNaMBgxFjAUBgNV BAMTDTZhYzM2MWQ3LWFkOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXj0Wf0JKnPUoS2dYIDYq0Rxc+P5ye0TjwG/GGtqK4b1Gyq7NCOBJnYD0DPsoh SXxQp0e+eWx7Luxv3Nl+E3ruBJYZJNX0g6fAxh0ankfDggvv/b+Cz+rFhvyBSy7Y RpWq7JIH3jhm3mTIvyWQmvcy+/peAp98/lM/mjImSwIx6Uy0L73Qoa5ooOrJ65E3 HNikJtvwRDAlS+BnLB7J+ZGI2aq+onYtmbLOwBMEVdkevC3verzdKAzcmh9r8qiy CxmO7CcuRXbD4DM2vypO0zESomlbVILTSKZepAgfwP5GpHaj4TngDqjA3XXOP65S XsdvoIXP7RPPvv7uTOXrPWVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDWsW9Zav Q+Nb/YYunu5EfAQr27wwHwYDVR0jBBgwFoAUNHZM7bhiOCXln1WBOjATHQssCWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1ODhFLzAwQjYxMzI2M0Q1 RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NYbG4xV0JPakFUSFFzc0NX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkhaTTdiaGlPQ1hsbjFXQk9qQVRIUXNzQ1dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 ODhFLzAwQjYxMzI2M0Q1RDExRjE4ODRCMkQ5RkFBODMzNzczL05IWk03YmhpT0NY bG4xV0JPakFUSFFzc0NXUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApbf/h0Wo47mU+8/cZdi6sXVoSQGxuhhA4N/ZM5g/2Biv+QYc5xFDGn5bLopk3 RWlNAOeICH8fcIt+ayMfhDBFAy4ZmxctIRPWEi7GmUhTv6Eh8nYLyBB82ygS4hYk hzM6gzRBQiOo5TjJH6e/lFhW52tz6BjL4I8wwwtlZCVQ1Ek4TgNGK+NKkwkfVUFK JIdJZW0sI+5NK04mwFUj0RkupVftnnG0dnvTpfbDDcPDoGkMfX9oPQWqZnzm7uUm MqtvqwSOXSQaZYLFqxYNh3u0A+1zLD4hrkIcaGZ9elHjTgZdPtpULJLNTFj6vC6Q lRSNhO/qkmzxrMNla6UNiiG0 -----END CERTIFICATE-----Generated at Tue Oct 6 23:09:20 2026 by rpki-client