$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: DAVWcNjvvkY+R6xtD9WDxJXisBjmuUHC6P1cHCDXums= Subject key identifier: 13:D3:52:6E:95:B9:5A:0F:EF:66:29:DF:CA:BB:61:4F:98:32:C7:55 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 23 Signing time: Thu 03 Sep 2026 09:04:49 +0000 Manifest this update: Thu 03 Sep 2026 09:04:48 +0000 Manifest next update: Thu 10 Sep 2026 09:04:48 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: hO8saSJcnsxj/Jp5j1W0QvkpbG/TfVbpfX38ogj74BU=) 2: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) 3: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) 4: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Sep 3 09:04:48 2026 GMT Not After : Sep 10 09:04:48 2026 GMT Subject: CN=6a993830-35a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:08:e9:fc:ca:ed:ee:9a:88:82:4c:cc:3d: fe:e8:69:f6:07:8f:e7:07:9c:5c:67:12:d1:ac:6a: 8c:85:88:de:d1:e8:d8:fc:0a:ba:43:85:4a:92:4c: 6c:ce:56:39:0c:d4:67:ab:a4:90:27:32:87:1f:d5: 36:31:30:d3:d4:48:83:1a:c5:bc:f1:fd:7e:1a:74: 4a:55:64:5c:2b:50:2a:2a:41:8f:dd:62:25:b4:54: 6f:25:1a:6e:0e:58:91:fb:de:ee:25:62:45:1e:27: b4:8a:3a:09:9b:97:0d:2f:44:ff:00:a9:11:cd:2c: 02:ab:3e:ce:c8:84:ed:50:f8:82:41:c1:a6:f9:cb: 3f:1e:f5:cf:a6:10:0b:4c:a1:19:92:c1:84:b3:1b: 44:57:fd:f2:8f:90:be:54:d8:d5:bb:41:8f:c9:38: a2:af:34:99:f2:cc:06:9e:1a:4d:dc:b8:28:32:27: 5d:ce:7e:6e:d8:16:f3:9b:ba:bb:0f:6b:f3:23:3d: f7:56:34:f6:62:5d:0a:49:ea:6d:bc:56:33:bf:e8: 66:56:32:ee:89:e8:97:5e:b4:85:b4:f7:41:84:5e: a2:2a:8f:11:3f:71:2d:27:20:18:ee:76:18:a2:6a: 96:35:4a:04:14:3b:6d:23:4b:05:f1:28:3d:43:7f: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:52:6E:95:B9:5A:0F:EF:66:29:DF:CA:BB:61:4F:98:32:C7:55 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:88:3e:b5:8d:20:61:c4:87:fc:f2:84:9a:63:cf:b7:d8:7b: f2:b1:3d:23:42:ee:63:33:f3:93:06:06:d4:25:0f:b3:fc:44: f8:ef:b7:63:a7:ec:33:66:9a:a4:84:03:f8:c3:0a:85:7f:7c: 85:3b:21:8e:12:08:13:cd:93:11:6a:f5:18:96:94:8d:ba:d4: 6f:06:7c:d5:1a:e7:42:48:de:31:73:b6:89:fb:56:b2:1d:1a: 64:75:0e:e7:22:e3:cd:a0:b1:7f:0e:3a:17:a4:72:b9:0a:f2: 38:ea:a5:78:4c:8f:64:26:48:72:3e:74:e5:d3:2c:82:28:e2: 7a:5c:b0:7f:5f:a5:97:2c:02:3b:1d:94:56:3a:79:5c:dc:42: ba:41:9a:47:eb:b7:77:d5:63:c3:e0:7a:94:97:77:22:5c:c6: d7:dc:04:14:14:c5:ea:7e:39:10:99:04:8e:fa:81:f9:25:cc: 3a:da:79:a3:2b:f9:b9:be:63:c5:03:94:87:25:e9:be:7d:01: 72:55:c6:98:3b:69:58:a9:6e:f3:33:f8:2e:b1:aa:6b:ef:42: 4f:71:bc:9a:95:b9:cf:1a:00:57:31:c6:f3:d3:af:01:26:b7: 87:33:26:a7:50:74:1d:ef:2f:6e:fb:14:e6:75:f5:e7:5b:6e: 0f:1d:0d:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA5MDMwOTA0NDhaFw0yNjA5MTAwOTA0NDhaMBgxFjAUBgNV BAMTDTZhOTkzODMwLTM1YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs2Qjp/Mrt7pqIgkzMPf7oafYHj+cHnFxnEtGsaoyFiN7R6Nj8CrpDhUqSTGzO VjkM1GerpJAnMocf1TYxMNPUSIMaxbzx/X4adEpVZFwrUCoqQY/dYiW0VG8lGm4O WJH73u4lYkUeJ7SKOgmblw0vRP8AqRHNLAKrPs7IhO1Q+IJBwab5yz8e9c+mEAtM oRmSwYSzG0RX/fKPkL5U2NW7QY/JOKKvNJnyzAaeGk3cuCgyJ13Ofm7YFvObursP a/MjPfdWNPZiXQpJ6m28VjO/6GZWMu6J6JdetIW090GEXqIqjxE/cS0nIBjudhii apY1SgQUO20jSwXxKD1DfzFVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUE9NSbpW5 Wg/vZinfyrthT5gyx1UwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaiD61jSBhxIf88oSaY8+32HvysT0jQu5jM/OTBgbUJQ+z/ET477djp+wzZpqk hAP4wwqFf3yFOyGOEggTzZMRavUYlpSNutRvBnzVGudCSN4xc7aJ+1ayHRpkdQ7n IuPNoLF/DjoXpHK5CvI46qV4TI9kJkhyPnTl0yyCKOJ6XLB/X6WXLAI7HZRWOnlc 3EK6QZpH67d31WPD4HqUl3ciXMbX3AQUFMXqfjkQmQSO+oH5Jcw62nmjK/m5vmPF A5SHJem+fQFyVcaYO2lYqW7zM/gusapr70JPcbyalbnPGgBXMcbz068BJreHMyan UHQd7y9u+xTmdfXnW24PHQ2T -----END CERTIFICATE-----Generated at Sat Sep 5 05:28:53 2026 by rpki-client