$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: 2gSToya12Vada7zkx0Qs3zufRLz+HbOKk2OJIkD0Kpc= Subject key identifier: 6E:6D:FD:23:C7:77:36:EC:85:9E:8B:55:7A:8B:FD:54:76:42:35:4C Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1FAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1EC6 Signing time: Sun 26 Apr 2026 16:01:18 +0000 Manifest this update: Sun 26 Apr 2026 16:01:18 +0000 Manifest next update: Sun 03 May 2026 16:01:18 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: gEM5Cbc0tfOp6TxlX6l+oKpx3IIu2t2hjK2b8KoDcOA=) 2: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=) 3: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=) 4: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: KoK5Iooccdm7bF48V5K9NM5q4apf+ptZxZFi9KLj3gs=) 5: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=) 6: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: 2xXR7lh6PvhBbrH3PRAl3hHCxBoJam2EkOnQ34182QM=) 7: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: CzpDWjG6CA/RX7bXF7dh2aPRoqlocsn3HHK5kgU2yi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8106 (0x1faa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Apr 26 16:01:18 2026 GMT Not After : May 3 16:01:18 2026 GMT Subject: CN=69ee36ce-af69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:ba:21:82:0f:df:2a:b8:9c:5e:50:c7:3d: ba:dc:98:bf:9e:47:d5:65:e3:b3:d1:23:9f:98:1f: 9a:e3:4e:44:2a:d5:f2:95:25:b5:26:5a:1a:d9:59: 0e:ee:8d:8e:21:16:c9:34:20:ef:47:b4:ab:e7:2f: 38:1b:2c:ad:6d:82:5d:64:86:75:15:71:b7:ea:d5: ea:bb:c9:a0:64:2d:ed:ec:96:a4:0d:44:0f:d2:36: 57:1d:59:57:60:cf:d0:20:0e:55:96:71:cf:f4:70: d0:28:75:58:0b:8c:0a:66:2e:45:ba:2c:ec:3f:6b: 23:ad:46:a1:32:ac:94:aa:fd:58:ad:70:ca:d5:87: 9f:33:af:76:06:60:98:28:83:f9:02:00:7a:97:e0: 57:39:d5:58:08:ca:f3:ab:97:8a:fc:b6:e3:68:80: 39:42:43:f0:10:dc:fb:81:c9:89:24:71:05:ec:71: 17:ee:91:da:47:70:63:e9:5e:22:c0:c3:67:f0:80: 91:50:61:77:c8:14:15:51:38:5a:f6:19:f5:4d:dc: 54:01:d0:95:0f:86:ca:d8:5e:51:6a:5e:2d:32:6c: 5f:f7:58:62:ca:20:e9:d1:d0:40:1a:bb:c5:ec:f6: 27:d4:13:88:b7:ed:23:b8:e0:06:28:69:7a:bb:e5: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6D:FD:23:C7:77:36:EC:85:9E:8B:55:7A:8B:FD:54:76:42:35:4C X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:65:e2:f0:a8:cb:46:b7:8c:de:38:67:5b:ae:0a:a4:e5:b6: f4:eb:61:d7:9e:45:a6:29:eb:2e:67:99:53:8a:bb:3b:9d:68: d1:cd:a2:32:43:71:74:35:89:4e:86:76:e7:c6:28:fe:9d:ab: 4b:73:24:66:5c:4d:b8:80:17:43:16:5f:c2:32:cc:fa:ef:a1: c5:12:76:6b:3c:b6:fc:3c:50:05:a0:45:6d:5d:65:2f:71:a1: 76:fb:73:f1:c2:96:bd:0f:59:1d:15:8c:06:55:e9:8d:39:0b: 7b:21:b4:93:4c:32:be:40:29:6c:50:85:18:fe:07:77:14:dd: f4:55:df:10:5e:51:3d:0b:1d:23:c1:7f:87:fd:bc:65:cb:dd: 80:a4:28:f4:fb:00:bf:1f:93:ee:8a:72:fa:ff:3e:dd:8a:3e: 72:e9:a5:f8:64:b0:0a:87:85:ff:e9:3d:33:5b:64:93:af:f1: 0d:da:e2:c2:ea:16:49:94:0b:97:80:e1:33:1d:87:4b:d0:46: 4f:b2:9e:95:b7:77:0d:d5:bc:ee:81:68:86:21:5a:e7:f5:dd: a1:65:5e:3b:c8:b2:ea:25:1c:09:bf:f9:5e:cc:b0:4d:86:e4: 00:e3:78:61:7e:81:1e:ec:5a:b9:2f:2b:59:64:85:b0:5d:2e: cf:f4:9e:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwNDI2MTYwMTE4WhcNMjYwNTAzMTYwMTE4WjAYMRYwFAYD VQQDEw02OWVlMzZjZS1hZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZG6IYIP3yq4nF5Qxz263Ji/nkfVZeOz0SOfmB+a405EKtXylSW1Jloa2VkO 7o2OIRbJNCDvR7Sr5y84GyytbYJdZIZ1FXG36tXqu8mgZC3t7JakDUQP0jZXHVlX YM/QIA5VlnHP9HDQKHVYC4wKZi5FuizsP2sjrUahMqyUqv1YrXDK1YefM692BmCY KIP5AgB6l+BXOdVYCMrzq5eK/LbjaIA5QkPwENz7gcmJJHEF7HEX7pHaR3Bj6V4i wMNn8ICRUGF3yBQVUTha9hn1TdxUAdCVD4bK2F5Ral4tMmxf91hiyiDp0dBAGrvF 7PYn1BOIt+0juOAGKGl6u+X1RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5t/SPH dzbshZ6LVXqL/VR2QjVMMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG2Xi8KjLRreM3jhnW64KpOW29Oth155FpinrLmeZU4q7O51o0c2iMkNxdDWJ ToZ258Yo/p2rS3MkZlxNuIAXQxZfwjLM+u+hxRJ2azy2/DxQBaBFbV1lL3Ghdvtz 8cKWvQ9ZHRWMBlXpjTkLeyG0k0wyvkApbFCFGP4HdxTd9FXfEF5RPQsdI8F/h/28 ZcvdgKQo9PsAvx+T7opy+v8+3Yo+cuml+GSwCoeF/+k9M1tkk6/xDdriwuoWSZQL l4DhMx2HS9BGT7Kelbd3DdW87oFohiFa5/XdoWVeO8iy6iUcCb/5XsywTYbkAON4 YX6BHuxauS8rWWSFsF0uz/Se4A== -----END CERTIFICATE-----Generated at Tue Apr 28 04:34:38 2026 by rpki-client