$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: 9pr/hLIFK5SN3K7RpqaG7gWoLXXHdjLTHLBr4Q98UcU= Subject key identifier: 4D:80:F1:8E:6F:78:AB:5B:8E:36:63:10:A7:5E:1E:D4:41:B0:A8:AB Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 099D Signing time: Sat 04 Apr 2026 19:46:38 +0000 Manifest this update: Sat 04 Apr 2026 19:46:38 +0000 Manifest next update: Sat 11 Apr 2026 19:46:38 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: u6u0L7i0o9lKi4ahU2MimLX6zoh/lHIZT8pmD54KK34=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Apr 4 19:46:38 2026 GMT Not After : Apr 11 19:46:38 2026 GMT Subject: CN=69d16a9e-625f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:f2:1d:54:e5:f3:db:16:06:9c:56:91:a1: c7:21:6c:ac:56:54:d1:ef:f6:56:3c:4b:a4:88:6c: 6b:18:28:46:f3:0f:02:50:83:3c:94:a5:b1:0a:79: 3b:1a:07:43:f8:ad:8b:27:b4:4b:a5:9f:0f:41:5a: 4a:b1:46:fe:ce:db:54:4c:7e:78:22:9e:ad:84:66: 40:75:ed:52:37:14:ff:b6:d8:a7:96:6b:f8:20:f9: ec:64:c6:74:b0:3a:9e:a2:d9:71:92:c1:be:28:63: cd:eb:a8:41:52:a7:0d:27:62:fe:5b:b5:a7:7c:a1: 48:63:92:fe:c7:d3:e1:e2:a9:97:e0:a6:b0:86:89: c6:ed:fd:9a:00:e2:b5:b4:cd:72:b6:d0:8f:2f:9b: af:41:91:66:43:71:a5:2d:8c:ff:89:b4:54:45:44: 1b:7a:09:98:7b:d4:75:55:f5:b0:7d:95:80:7c:39: 11:c9:99:2a:04:6b:2e:e5:69:3e:e5:fd:a6:30:1a: 02:68:eb:b8:59:3e:33:f0:1b:a8:1c:c4:9d:e9:52: 5a:61:9e:d2:dd:35:2c:4b:68:f1:46:0a:ec:dc:bd: 14:3e:25:3d:d1:9d:57:b8:8c:22:2a:e5:f9:b4:74: 48:c5:de:e4:f6:4a:a9:80:ff:f0:2f:61:08:b0:02: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:80:F1:8E:6F:78:AB:5B:8E:36:63:10:A7:5E:1E:D4:41:B0:A8:AB X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e1:48:dd:95:8c:cb:ea:53:34:ab:ac:df:f6:e6:6a:1d:0d: 7a:05:86:f3:81:c2:f9:3f:06:cf:93:00:6b:57:90:39:c5:3f: 19:48:fb:5d:86:6e:d6:fc:86:5c:0d:99:e2:4f:7e:bd:e4:3d: 0a:20:d8:07:93:61:77:6c:70:26:4e:6b:24:22:93:ad:a9:01: 9c:84:1f:26:ac:c6:a8:f1:e6:ab:0d:4f:6d:42:1e:26:f4:19: ab:55:6e:d7:4c:35:61:16:0f:64:52:09:aa:37:2a:8e:4d:92: e8:33:89:08:17:be:0d:3b:46:ad:da:78:71:8e:97:a4:12:1c: 48:72:a4:12:ca:5f:77:d7:f4:97:b1:e4:ba:1b:cd:b3:50:24: 4a:fa:d4:73:62:0e:2d:a6:4d:2b:7e:0f:2e:34:25:e3:83:ad: c8:d7:7f:d5:1e:78:39:0b:c4:f5:18:52:18:bd:a2:42:4e:56: fd:b3:19:e8:fb:f5:1b:ad:48:7f:ee:85:a2:32:1c:14:63:be: 90:42:ec:a7:52:f6:fc:15:dc:42:be:35:97:39:3d:05:0c:a2: 05:78:90:82:e9:cf:b7:b9:0f:3b:9f:8c:02:3b:83:a6:35:e9: 55:8c:df:f7:a7:ac:c0:a8:76:43:ca:61:43:2e:f1:e4:09:1f: f8:89:43:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwNDA0MTk0NjM4WhcNMjYwNDExMTk0NjM4WjAYMRYwFAYD VQQDEw02OWQxNmE5ZS02MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXPyHVTl89sWBpxWkaHHIWysVlTR7/ZWPEukiGxrGChG8w8CUIM8lKWxCnk7 GgdD+K2LJ7RLpZ8PQVpKsUb+zttUTH54Ip6thGZAde1SNxT/ttinlmv4IPnsZMZ0 sDqeotlxksG+KGPN66hBUqcNJ2L+W7WnfKFIY5L+x9Ph4qmX4KawhonG7f2aAOK1 tM1yttCPL5uvQZFmQ3GlLYz/ibRURUQbegmYe9R1VfWwfZWAfDkRyZkqBGsu5Wk+ 5f2mMBoCaOu4WT4z8BuoHMSd6VJaYZ7S3TUsS2jxRgrs3L0UPiU90Z1XuIwiKuX5 tHRIxd7k9kqpgP/wL2EIsAKj7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2A8Y5v eKtbjjZjEKdeHtRBsKirMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbOFI3ZWMy+pTNKus3/bmah0NegWG84HC+T8Gz5MAa1eQOcU/GUj7XYZu1vyG XA2Z4k9+veQ9CiDYB5Nhd2xwJk5rJCKTrakBnIQfJqzGqPHmqw1PbUIeJvQZq1Vu 10w1YRYPZFIJqjcqjk2S6DOJCBe+DTtGrdp4cY6XpBIcSHKkEspfd9f0l7HkuhvN s1AkSvrUc2IOLaZNK34PLjQl44OtyNd/1R54OQvE9RhSGL2iQk5W/bMZ6Pv1G61I f+6FojIcFGO+kELsp1L2/BXcQr41lzk9BQyiBXiQgunPt7kPO5+MAjuDpjXpVYzf 96eswKh2Q8phQy7x5Akf+IlD5g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:24 2026 by rpki-client