$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: z0lwIgI5a0wBbcJDLLW82/cDakfweME353FCv01znZ4= Subject key identifier: 9F:36:8F:6C:38:FB:CE:E1:1A:BF:3C:01:9C:4D:F7:FB:E0:85:25:E4 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1FD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1EE8 Signing time: Wed 10 Jun 2026 16:04:35 +0000 Manifest this update: Wed 10 Jun 2026 16:04:34 +0000 Manifest next update: Wed 17 Jun 2026 16:04:34 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: s+68n4UBLd5sVF/P2zgrr5TKxhvUSFozISHCfdnUSGI=) 2: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=) 3: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: WHxcaULN9Ht//+q/uqSA9HqAeVbgvVuD0sa6vgTe7C4=) 4: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 9gHnkQpVuVjgh/19/P0O5xQq1RyKtz9sAjQNdfQWEbU=) 6: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: E8KCulpW5x2sAiN2CA+1RrMgxss5nyN9/hSLHOWwHsE=) 7: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8149 (0x1fd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Jun 10 16:04:34 2026 GMT Not After : Jun 17 16:04:34 2026 GMT Subject: CN=6a298b13-b3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:83:67:df:df:23:ca:b7:11:af:99:63:0c:44: 05:a8:8b:a2:8f:a1:74:6a:6c:dd:e0:ff:bc:bd:aa: cd:1e:cf:c5:3f:ee:79:07:3d:89:fe:16:a8:a9:64: d6:49:cb:12:f7:b1:fb:46:bc:19:67:a6:2e:6a:b4: 7c:de:89:ce:98:bc:ca:3e:c6:da:ae:9f:a9:8a:29: 4e:52:56:36:68:5e:46:d6:5e:e4:e7:60:6b:e7:54: 71:ea:db:09:b3:66:b1:67:ce:0e:e4:eb:26:d6:89: 98:df:f3:00:01:a5:b2:0c:bc:e9:4c:33:7c:fb:04: c2:19:1e:cd:3f:ba:8a:a8:bc:6a:04:c7:5a:92:33: bf:55:2b:c6:23:98:1f:a9:03:c1:7d:0d:35:7d:92: fc:78:b7:3d:20:f9:61:73:39:2d:1e:34:16:89:10: a1:61:76:1c:b7:54:bf:a1:47:d3:57:8c:46:2c:2a: df:f7:e4:a6:09:14:78:d1:67:94:e6:00:32:63:f4: 37:fa:1e:9a:ec:86:81:23:0f:ff:35:73:73:53:23: 53:72:79:06:00:96:c9:8c:1b:dc:df:22:2f:0e:ca: 04:d8:79:26:72:65:50:fe:26:29:89:db:1c:d4:78: 9b:5b:e1:c2:a6:84:f1:b2:12:cd:71:af:f4:99:c5: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:36:8F:6C:38:FB:CE:E1:1A:BF:3C:01:9C:4D:F7:FB:E0:85:25:E4 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:50:b4:b9:fe:78:1a:97:04:3a:9a:45:b2:fa:d1:31:d7:5b: 63:52:44:09:98:bf:cc:6b:30:fa:83:64:05:7d:06:67:21:59: 61:02:4c:c6:07:7e:6a:4c:1d:94:b2:5e:41:91:47:1c:c8:2e: 1e:a8:2e:59:e1:d6:05:a3:1c:0b:aa:05:cb:14:57:66:17:1f: f2:5c:c3:57:45:f2:40:a6:90:91:f9:68:e6:12:ef:fe:f6:79: 3c:a2:f8:9d:58:eb:ea:8a:5c:d8:6c:25:64:a4:1f:68:6b:82: 49:23:7e:a1:69:43:db:c4:e3:63:a5:62:48:cc:f1:9f:85:02: a5:b5:9f:45:fd:b8:7e:9a:2c:5a:9a:93:df:e3:9e:6d:b8:41: 93:4f:d8:d1:e4:c4:cf:4f:9f:db:dd:89:1c:f3:db:68:12:89: d3:06:1f:97:fc:ac:36:eb:d8:20:87:70:0e:fc:37:30:94:0c: c7:d5:5e:18:90:19:6e:52:f1:74:7d:b2:ca:ba:ab:d6:1f:2d: 1d:79:10:83:4a:06:fa:a9:c1:79:18:8e:a9:7e:d0:94:b2:62: 6b:a2:53:ab:d5:48:91:7d:59:94:4b:90:96:be:98:de:6c:73: f0:d7:8f:13:79:aa:b7:3a:1e:93:50:80:c3:dc:b6:9a:14:53: fd:e6:f4:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwNjEwMTYwNDM0WhcNMjYwNjE3MTYwNDM0WjAYMRYwFAYD VQQDEw02YTI5OGIxMy1iM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8oNn398jyrcRr5ljDEQFqIuij6F0amzd4P+8varNHs/FP+55Bz2J/haoqWTW ScsS97H7RrwZZ6YuarR83onOmLzKPsbarp+piilOUlY2aF5G1l7k52Br51Rx6tsJ s2axZ84O5Osm1omY3/MAAaWyDLzpTDN8+wTCGR7NP7qKqLxqBMdakjO/VSvGI5gf qQPBfQ01fZL8eLc9IPlhczktHjQWiRChYXYct1S/oUfTV4xGLCrf9+SmCRR40WeU 5gAyY/Q3+h6a7IaBIw//NXNzUyNTcnkGAJbJjBvc3yIvDsoE2HkmcmVQ/iYpidsc 1HibW+HCpoTxshLNca/0mcWjeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ82j2w4 +87hGr88AZxN9/vghSXkMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk1C0uf54GpcEOppFsvrRMddbY1JECZi/zGsw+oNkBX0GZyFZYQJMxgd+akwd lLJeQZFHHMguHqguWeHWBaMcC6oFyxRXZhcf8lzDV0XyQKaQkflo5hLv/vZ5PKL4 nVjr6opc2GwlZKQfaGuCSSN+oWlD28TjY6ViSMzxn4UCpbWfRf24fposWpqT3+Oe bbhBk0/Y0eTEz0+f292JHPPbaBKJ0wYfl/ysNuvYIIdwDvw3MJQMx9VeGJAZblLx dH2yyrqr1h8tHXkQg0oG+qnBeRiOqX7QlLJia6JTq9VIkX1ZlEuQlr6Y3mxz8NeP E3mqtzoek1CAw9y2mhRT/eb00w== -----END CERTIFICATE-----Generated at Fri Jun 12 09:57:38 2026 by rpki-client