$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: CLEeWolya8mHO0rqolKHauzNiWctRI9YJZRvDuh7NMc= Subject key identifier: 56:E4:93:3B:F9:02:0D:60:27:25:B3:B5:A9:2D:58:A8:A5:FB:40:B7 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09B4 Signing time: Wed 20 May 2026 19:57:05 +0000 Manifest this update: Wed 20 May 2026 19:57:05 +0000 Manifest next update: Wed 27 May 2026 19:57:05 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: Gg5yqRlGtiKvCi0D4zmcViAlREvc7Q7RzeUgsJdAGys=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: May 20 19:57:05 2026 GMT Not After : May 27 19:57:05 2026 GMT Subject: CN=6a0e1211-60b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:55:51:1e:15:20:5a:18:3d:17:b8:f8:ef: 0e:fd:b9:4a:f6:f5:08:6c:39:dc:e2:c7:3f:bf:fc: c8:d3:ad:e0:16:c1:c5:01:27:5a:c1:12:3b:de:5a: 36:ba:a6:9c:32:00:7a:a1:d6:c1:da:bb:8f:29:03: 18:b7:45:b8:33:e5:89:f9:44:37:89:dc:2a:73:3f: ec:84:b0:38:45:de:44:4d:c1:0d:da:0d:a1:fc:ff: ae:3c:c7:71:91:38:13:b4:b3:8b:46:81:96:10:c0: 41:c0:00:23:e6:0d:c0:09:86:a0:3e:77:2f:22:2c: 76:d9:cd:97:b3:98:90:ac:a1:0a:44:fd:b5:e7:80: e4:e6:09:12:88:52:bc:43:a6:8d:d9:39:98:df:16: c1:21:64:d8:87:13:3b:0b:36:ec:76:5a:d5:6c:32: 9b:4e:49:57:c5:67:6e:5c:c9:7c:f6:68:7e:5f:56: 53:10:f8:59:f6:3b:5a:df:48:a7:34:75:8d:4c:e5: b7:16:dc:d9:5c:3e:a4:42:15:36:df:94:b3:81:7f: 54:6e:72:c2:60:62:6d:ea:df:47:02:5c:9f:f9:a5: 70:3a:d2:4c:f4:78:09:ae:b3:ac:5d:da:12:aa:a0: 92:c9:7e:99:ab:77:d7:e7:db:04:ef:2a:14:a4:c4: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E4:93:3B:F9:02:0D:60:27:25:B3:B5:A9:2D:58:A8:A5:FB:40:B7 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:be:5e:49:3b:c3:ae:25:25:28:a8:cd:a6:d0:2a:dc:ef:a1: 48:f4:e9:e8:7e:01:2d:37:16:86:f0:01:7e:6b:5a:32:24:6c: f2:31:19:54:0a:e4:bc:75:39:02:ab:88:8c:e4:0d:39:e7:0a: 4f:2a:c4:9d:e6:c9:7d:71:22:01:7f:90:0c:b9:88:ed:b1:d2: c3:ba:ae:0c:fe:28:ac:56:b7:e1:18:01:25:bd:35:99:dc:16: b2:8a:b7:fb:1f:be:bf:6b:47:67:18:7e:aa:6b:d8:03:c4:fd: b7:db:6b:5b:5f:77:6d:ef:f1:66:e3:bd:00:b4:15:e5:5f:89: ce:d1:ea:d8:bb:b8:82:f3:7f:5c:ad:bf:2f:78:a2:15:3a:4b: 04:76:47:96:32:7f:65:75:41:10:35:4d:90:ea:bf:ef:79:1e: e0:b6:b0:0d:26:68:36:a7:20:ca:7b:9d:f1:f6:1d:09:35:3d: 60:e6:6c:be:ad:39:2b:bb:50:18:b3:00:7b:c9:1c:7f:70:5c: 46:1c:6a:aa:ab:8c:72:73:ff:cf:cd:49:2c:4b:b9:29:a4:6c: b1:38:9a:4c:a1:2f:5e:a7:c8:8b:6e:38:dc:85:e6:a5:b2:41: 72:2a:a8:20:7d:1a:4e:cf:9b:ed:9f:c3:96:5e:b7:60:5e:97: eb:0e:e0:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwNTIwMTk1NzA1WhcNMjYwNTI3MTk1NzA1WjAYMRYwFAYD VQQDEw02YTBlMTIxMS02MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVZVUR4VIFoYPRe4+O8O/blK9vUIbDnc4sc/v/zI063gFsHFASdawRI73lo2 uqacMgB6odbB2ruPKQMYt0W4M+WJ+UQ3idwqcz/shLA4Rd5ETcEN2g2h/P+uPMdx kTgTtLOLRoGWEMBBwAAj5g3ACYagPncvIix22c2Xs5iQrKEKRP2154Dk5gkSiFK8 Q6aN2TmY3xbBIWTYhxM7CzbsdlrVbDKbTklXxWduXMl89mh+X1ZTEPhZ9jta30in NHWNTOW3FtzZXD6kQhU235SzgX9UbnLCYGJt6t9HAlyf+aVwOtJM9HgJrrOsXdoS qqCSyX6Zq3fX59sE7yoUpMSCdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbkkzv5 Ag1gJyWztaktWKil+0C3MB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ75eSTvDriUlKKjNptAq3O+hSPTp6H4BLTcWhvABfmtaMiRs8jEZVArkvHU5 AquIjOQNOecKTyrEnebJfXEiAX+QDLmI7bHSw7quDP4orFa34RgBJb01mdwWsoq3 +x++v2tHZxh+qmvYA8T9t9trW193be/xZuO9ALQV5V+JztHq2Lu4gvN/XK2/L3ii FTpLBHZHljJ/ZXVBEDVNkOq/73ke4LawDSZoNqcgynud8fYdCTU9YOZsvq05K7tQ GLMAe8kcf3BcRhxqqquMcnP/z81JLEu5KaRssTiaTKEvXqfIi2443IXmpbJBciqo IH0aTs+b7Z/Dll63YF6X6w7gGA== -----END CERTIFICATE-----Generated at Thu May 21 09:37:25 2026 by rpki-client