$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: hC4aLlx2Rkya/nh6xhol6eNg4pXLJsFP7rzidkVMDVo= Subject key identifier: 04:97:05:CE:22:90:66:90:67:FF:42:CF:B8:45:44:4A:DB:61:25:EA Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1EAF Signing time: Thu 12 Mar 2026 16:00:05 +0000 Manifest this update: Thu 12 Mar 2026 16:00:04 +0000 Manifest next update: Thu 19 Mar 2026 16:00:04 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: Dr96BHdew9kU185QJNdO/jO8msuy9HcMitrOjqu0JmQ=) 2: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=) 3: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=) 4: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: 2xXR7lh6PvhBbrH3PRAl3hHCxBoJam2EkOnQ34182QM=) 5: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: CzpDWjG6CA/RX7bXF7dh2aPRoqlocsn3HHK5kgU2yi0=) 6: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=) 7: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: KoK5Iooccdm7bF48V5K9NM5q4apf+ptZxZFi9KLj3gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8083 (0x1f93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Mar 12 16:00:04 2026 GMT Not After : Mar 19 16:00:04 2026 GMT Subject: CN=69b2e305-3cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:27:03:20:2d:e4:2a:39:1b:fe:6a:20:60: f3:7a:5c:9d:b5:98:dd:d3:f4:05:0d:79:05:b6:d7: 1f:f2:27:af:40:9b:38:94:e5:03:bf:b7:cb:73:14: 9a:19:96:83:0f:66:19:b7:3f:6f:ac:67:92:66:f0: 81:fe:f4:65:89:fc:66:56:e0:cf:ed:8e:72:15:d9: e8:71:c4:66:59:9d:f7:15:f9:73:82:e6:08:86:64: 08:8d:b6:4b:84:84:04:5c:99:df:c1:46:18:9f:7b: 3c:ef:f2:47:8b:b7:93:bd:6b:68:d6:46:67:7c:b6: 8e:09:06:dd:57:db:5a:ad:9c:1f:50:a3:60:8a:39: d8:7c:7c:5c:0e:89:71:50:52:8a:57:11:3a:d4:50: f1:ed:18:b8:80:09:ad:20:ff:c2:a1:2d:e0:ba:9e: 97:0e:cd:78:a1:cd:76:31:48:a2:f0:9b:8e:c7:b5: cf:d4:b2:d1:0c:ff:1f:21:b3:f8:2d:6d:1a:97:29: 8a:9c:92:df:b0:73:10:1d:15:0b:75:0b:3d:dc:b4: a6:34:bb:1e:39:25:94:fa:93:e8:47:ab:1e:b8:ee: b9:b2:59:32:99:e0:5c:0b:2f:05:8c:a8:3a:8c:5a: b4:45:cd:18:65:2c:3f:48:2f:50:c2:33:8d:77:43: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:97:05:CE:22:90:66:90:67:FF:42:CF:B8:45:44:4A:DB:61:25:EA X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:77:df:49:c3:b4:e0:21:cb:cb:8f:44:cc:df:e2:52:c1:3d: 62:04:c7:a4:75:ee:ea:c2:51:fa:f9:1c:0d:b5:a1:cf:50:78: d2:1a:4c:7a:4f:c2:bc:2b:e8:4e:fb:3a:7b:0d:af:68:71:81: 1a:c7:18:b4:8a:98:05:0e:7e:08:10:98:cb:a5:c7:12:7f:35: c3:86:8e:3f:8d:8b:f7:38:4a:a5:56:18:62:81:84:e2:c4:d9: b6:7f:d6:a4:19:03:c3:31:30:d3:77:b1:cc:8c:92:98:da:44: 4d:ad:ee:29:82:28:23:75:e4:e2:0f:8f:b1:0a:13:9a:a2:4f: 08:6c:71:8e:9e:aa:7f:82:7f:69:ad:c9:27:53:93:51:1e:52: ec:10:8c:69:f8:fe:cf:f3:f6:32:44:a9:bf:2f:b3:01:97:ee: f6:95:c0:68:19:f9:50:61:30:4a:b5:ad:5f:d8:99:66:4e:93: 8c:23:f1:94:6b:6c:ef:83:95:e9:a4:47:1a:25:bc:fb:31:9e: 9a:1b:33:41:6a:1c:2d:18:99:24:7e:bc:ed:ac:fe:52:74:b6: ca:fa:12:5e:20:e7:b7:4b:1c:d1:22:db:2f:0b:a9:45:3d:01: f2:b0:29:8c:13:4f:9f:8f:c4:c6:41:c8:8e:cf:f8:a5:72:74: 8e:fc:f1:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwMzEyMTYwMDA0WhcNMjYwMzE5MTYwMDA0WjAYMRYwFAYD VQQDEw02OWIyZTMwNS0zY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0onAyAt5Co5G/5qIGDzelydtZjd0/QFDXkFttcf8ievQJs4lOUDv7fLcxSa GZaDD2YZtz9vrGeSZvCB/vRlifxmVuDP7Y5yFdnoccRmWZ33FflzguYIhmQIjbZL hIQEXJnfwUYYn3s87/JHi7eTvWto1kZnfLaOCQbdV9tarZwfUKNgijnYfHxcDolx UFKKVxE61FDx7Ri4gAmtIP/CoS3gup6XDs14oc12MUii8JuOx7XP1LLRDP8fIbP4 LW0alymKnJLfsHMQHRULdQs93LSmNLseOSWU+pPoR6seuO65slkymeBcCy8FjKg6 jFq0Rc0YZSw/SC9QwjONd0NmpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASXBc4i kGaQZ/9Cz7hFRErbYSXqMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdnffScO04CHLy49EzN/iUsE9YgTHpHXu6sJR+vkcDbWhz1B40hpMek/CvCvo Tvs6ew2vaHGBGscYtIqYBQ5+CBCYy6XHEn81w4aOP42L9zhKpVYYYoGE4sTZtn/W pBkDwzEw03exzIySmNpETa3uKYIoI3Xk4g+PsQoTmqJPCGxxjp6qf4J/aa3JJ1OT UR5S7BCMafj+z/P2MkSpvy+zAZfu9pXAaBn5UGEwSrWtX9iZZk6TjCPxlGts74OV 6aRHGiW8+zGemhszQWocLRiZJH687az+UnS2yvoSXiDnt0sc0SLbLwupRT0B8rAp jBNPn4/ExkHIjs/4pXJ0jvzx+Q== -----END CERTIFICATE-----Generated at Fri Mar 13 03:49:19 2026 by rpki-client