$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: ijfyoX4GKHejMv/odKHstjxA2JUezUdZKMhAsPGAVvA= Subject key identifier: AF:C0:95:9F:24:DB:72:4A:F6:9D:10:17:AF:A2:53:19:31:D1:2E:96 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09FE Signing time: Thu 08 Oct 2026 19:54:31 +0000 Manifest this update: Thu 08 Oct 2026 19:54:30 +0000 Manifest next update: Thu 15 Oct 2026 19:54:30 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: H5mDIqA/GCMPCxyfcl+Ieg27U3JPnCjLyXtcQ+fzZMU=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: /gvEqRmEcBBJsgYPjYvvjjFizcU0bI3zTeQb96cSavo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Oct 8 19:54:30 2026 GMT Not After : Oct 15 19:54:30 2026 GMT Subject: CN=6ac7f4f6-6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:5e:9c:59:b8:32:d7:c1:d8:0d:76:cf:7e: 6e:35:6e:c7:20:27:f7:f0:a3:0a:b7:e1:dc:45:71: 89:ce:d3:79:31:d2:d9:db:4e:31:dd:55:7b:99:8c: de:fe:eb:fc:bc:e2:48:f8:98:2d:fe:15:52:48:34: 40:e4:ac:e7:3d:5f:82:59:a8:92:f0:6c:9d:aa:a6: 31:53:c3:ab:51:1d:66:f9:11:c8:81:27:49:b5:34: d9:6a:6a:c4:d9:ee:18:4c:22:8c:ff:a7:a3:01:14: 45:ea:4d:7a:22:77:5b:12:c7:2f:04:e4:97:36:bd: 95:7e:a7:b9:31:1e:da:be:9e:a6:a1:41:1d:52:22: 0c:58:74:b2:8d:f9:c2:ec:cf:5d:26:13:a4:1a:57: 54:50:6f:77:2a:1a:83:f0:d7:e6:81:0b:b7:2c:85: 2c:01:56:a4:63:bc:19:86:06:0b:44:15:e5:f3:a9: e2:33:ab:d1:a9:12:bb:c0:f1:dc:fe:a6:22:22:15: 4e:dd:5a:79:e4:d6:87:bc:6e:84:07:dc:b2:f1:e2: e1:0c:e5:10:b0:a0:07:d3:10:d8:80:ae:77:4c:79: 4b:3f:58:32:72:d8:4b:63:4c:36:2f:26:75:38:1f: f7:a4:63:77:1b:cf:ed:53:45:3d:5e:74:f4:00:55: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:95:9F:24:DB:72:4A:F6:9D:10:17:AF:A2:53:19:31:D1:2E:96 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8f:26:4c:8d:07:f9:5f:4a:f7:ff:4f:46:6c:1e:1f:50:f1: 49:be:c6:68:e8:da:ba:f1:7d:ed:42:e2:72:37:8d:5a:be:d8: 2b:4d:4b:6f:8b:6e:88:6a:68:6b:62:b7:27:5c:4e:f2:ca:c8: a0:18:cc:21:8d:5e:70:54:12:e4:44:c1:00:08:8f:22:00:2b: 3a:ee:01:0d:5a:1c:77:64:12:6a:c6:d8:7e:4f:29:ab:e6:21: 86:78:c2:d6:34:2f:2c:67:d4:1c:69:59:d0:ca:c0:21:73:29: 70:56:9a:de:42:19:6a:9a:cf:a8:44:83:58:fd:25:89:c6:25: 0e:a2:79:35:52:82:ba:42:37:ef:21:b5:bf:83:28:ca:87:c0: 94:bc:04:ad:f2:0a:d2:66:ce:bf:4a:22:06:05:a5:5e:35:2f: 73:8a:e8:a8:63:e3:3e:16:c7:0b:f0:6e:67:56:fd:50:05:10: c9:57:04:e0:b5:21:94:3a:55:a5:1c:76:17:08:1d:c1:bc:64: 76:ee:ba:7c:cf:85:f0:08:3f:0b:8f:2e:7c:b0:53:35:40:d2: 80:70:f8:be:6c:55:b4:98:2e:ff:9a:8f:02:f2:cb:a8:91:4b: 42:5a:92:37:e2:9b:dc:aa:0f:3b:c3:d3:cd:0d:86:09:0b:60: 0c:13:55:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYxMDA4MTk1NDMwWhcNMjYxMDE1MTk1NDMwWjAYMRYwFAYD VQQDEw02YWM3ZjRmNi02ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvNenFm4MtfB2A12z35uNW7HICf38KMKt+HcRXGJztN5MdLZ204x3VV7mYze /uv8vOJI+Jgt/hVSSDRA5KznPV+CWaiS8GydqqYxU8OrUR1m+RHIgSdJtTTZamrE 2e4YTCKM/6ejARRF6k16IndbEscvBOSXNr2Vfqe5MR7avp6moUEdUiIMWHSyjfnC 7M9dJhOkGldUUG93KhqD8NfmgQu3LIUsAVakY7wZhgYLRBXl86niM6vRqRK7wPHc /qYiIhVO3Vp55NaHvG6EB9yy8eLhDOUQsKAH0xDYgK53THlLP1gycthLY0w2LyZ1 OB/3pGN3G8/tU0U9XnT0AFVptwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/AlZ8k 23JK9p0QF6+iUxkx0S6WMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE48mTI0H+V9K9/9PRmweH1DxSb7GaOjauvF97ULicjeNWr7YK01Lb4tuiGpo a2K3J1xO8srIoBjMIY1ecFQS5ETBAAiPIgArOu4BDVocd2QSasbYfk8pq+YhhnjC 1jQvLGfUHGlZ0MrAIXMpcFaa3kIZaprPqESDWP0licYlDqJ5NVKCukI37yG1v4Mo yofAlLwErfIK0mbOv0oiBgWlXjUvc4roqGPjPhbHC/BuZ1b9UAUQyVcE4LUhlDpV pRx2Fwgdwbxkdu66fM+F8Ag/C48ufLBTNUDSgHD4vmxVtJgu/5qPAvLLqJFLQlqS N+Kb3KoPO8PTzQ2GCQtgDBNVtQ== -----END CERTIFICATE-----Generated at Fri Oct 9 20:03:56 2026 by rpki-client