$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: GlAdUGLfVjIPdVmgsTV4goEs+wqw9X7xxCfm7b/rOWo= Subject key identifier: 4B:22:C5:03:B0:A5:5F:61:9B:85:58:35:CE:A2:0C:7B:C3:0A:04:66 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 04DD Signing time: Mon 12 Oct 2026 23:56:07 +0000 Manifest this update: Mon 12 Oct 2026 23:56:07 +0000 Manifest next update: Mon 19 Oct 2026 23:56:07 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: Q7j4uvk5QAyW0dR/e73uTJMsWscQBRpxK+ypuS1oS9c=) 2: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: czE7NJl7/t7hwLc6wB3QFn+FdCDmuyeRfw1z4n513xg=) 3: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: WL7M1FpRwrUsyaj0X9ZGaQ0c/XqE32u0/lc5P4wkeOI=) 4: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: h7on1h70EQUkl7YA2uV3PQ8RC/fzA9+qPqnRbP0SURQ=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: B6+cUUkQlPaj9J4kFZO9C4R2/ipX521sHO4j6bzzqNE=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: VWdUzB6vXIKkRn/XdO/qNXY7fvd6Iad/udykpaussds=) 7: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /ybLb79FD1QsPf5vPSYHi+deCRb+HGVM3JZtL0Bj/K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 23:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Oct 12 23:56:07 2026 GMT Not After : Oct 19 23:56:07 2026 GMT Subject: CN=6acd7397-9d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:97:2b:f7:f9:6a:6f:db:9f:29:ce:bc:55: 39:7d:01:01:e4:f5:cd:ed:49:19:04:c1:42:52:fe: 28:f0:40:9a:e8:a6:37:4f:5e:29:00:da:4f:9b:03: 21:c0:58:61:27:8f:ab:d1:87:33:9d:90:8a:4e:0d: 16:31:e0:51:75:84:92:80:6f:1d:8c:e6:0e:15:f6: e1:fa:cc:a1:5b:2f:e1:37:51:4a:8a:da:eb:64:1a: 56:1e:72:dd:fc:ee:d4:a1:91:52:09:1a:a9:74:74: 05:b8:34:99:cd:9a:98:8a:d4:7e:59:ee:58:0c:9b: f8:f2:de:b6:5e:62:6a:03:09:97:9e:2d:58:b8:23: 2f:46:03:c7:d4:44:39:53:1a:82:b3:cc:b7:d9:1e: 04:a4:e7:4b:0f:3a:90:59:46:77:36:42:12:01:ff: 28:b4:0d:d1:7f:fe:6e:0b:d0:4b:4c:d9:93:a3:ca: b4:f5:76:3a:bc:08:d2:0f:9f:59:68:68:6a:e8:ec: 80:31:96:bc:52:78:7f:e6:fa:3f:0a:cf:e6:9e:e7: 34:0d:68:57:f5:c8:eb:cc:ff:f2:ae:12:c5:56:75: 98:50:f1:fd:93:72:f8:7c:39:42:d2:6b:30:a6:73: ed:f3:07:90:3d:17:f5:f6:c8:07:d5:45:0b:59:2c: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:22:C5:03:B0:A5:5F:61:9B:85:58:35:CE:A2:0C:7B:C3:0A:04:66 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:2d:80:aa:12:c7:aa:fa:b0:4f:fb:dc:e5:39:34:50:ec: d0:95:ac:8f:8d:64:47:d5:ab:f1:4d:ea:10:53:32:a7:30:cf: dd:69:41:8f:22:bd:f1:c2:82:f1:81:cc:ff:4d:5f:e6:12:93: ec:eb:b7:7e:55:02:76:e6:a9:55:ab:31:db:d9:39:09:5a:8a: fe:45:c7:ff:0f:ef:70:03:68:13:17:97:55:d1:ae:41:dd:3d: d3:78:df:6f:92:31:fa:f7:18:c9:55:a7:4a:2c:9e:2d:3b:a9: e1:e7:18:53:1c:06:2a:f8:bd:9d:b5:44:d0:2e:be:68:3e:4f: b2:bc:e3:16:38:fa:98:dc:2c:02:e4:aa:43:9b:92:4f:0a:a2: fd:73:95:43:b1:fe:02:2e:3e:88:49:ac:89:4b:84:d3:fc:22: 26:47:71:25:d5:d8:e7:0f:50:14:21:75:2b:ac:7b:de:c4:bd: 1c:cb:44:4f:7a:f8:d1:0d:b6:04:d1:92:8a:b3:69:34:95:8c: 98:05:83:08:2c:34:f4:e4:40:71:32:5c:01:80:46:43:ac:a9: 16:cd:45:74:a8:21:25:af:2b:02:99:56:84:d8:b9:4d:91:c0: 6c:ce:3e:b4:99:a4:ed:64:ed:2b:96:11:d8:1a:3c:35:6c:a2: 93:4d:2f:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYxMDEyMjM1NjA3WhcNMjYxMDE5MjM1NjA3WjAYMRYwFAYD VQQDEw02YWNkNzM5Ny05ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf6XK/f5am/bnynOvFU5fQEB5PXN7UkZBMFCUv4o8ECa6KY3T14pANpPmwMh wFhhJ4+r0YcznZCKTg0WMeBRdYSSgG8djOYOFfbh+syhWy/hN1FKitrrZBpWHnLd /O7UoZFSCRqpdHQFuDSZzZqYitR+We5YDJv48t62XmJqAwmXni1YuCMvRgPH1EQ5 UxqCs8y32R4EpOdLDzqQWUZ3NkISAf8otA3Rf/5uC9BLTNmTo8q09XY6vAjSD59Z aGhq6OyAMZa8Unh/5vo/Cs/mnuc0DWhX9cjrzP/yrhLFVnWYUPH9k3L4fDlC0msw pnPt8weQPRf19sgH1UULWSx6NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsixQOw pV9hm4VYNc6iDHvDCgRmMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEOItgKoSx6r6sE/73OU5NFDs0JWsj41kR9Wr8U3qEFMypzDP3WlBjyK98cKC 8YHM/01f5hKT7Ou3flUCduapVasx29k5CVqK/kXH/w/vcANoExeXVdGuQd0903jf b5Ix+vcYyVWnSiyeLTup4ecYUxwGKvi9nbVE0C6+aD5PsrzjFjj6mNwsAuSqQ5uS Twqi/XOVQ7H+Ai4+iEmsiUuE0/wiJkdxJdXY5w9QFCF1K6x73sS9HMtET3r40Q22 BNGSirNpNJWMmAWDCCw09ORAcTJcAYBGQ6ypFs1FdKghJa8rAplWhNi5TZHAbM4+ tJmk7WTtK5YR2Bo8NWyik00vHQ== -----END CERTIFICATE-----Generated at Wed Oct 14 05:00:05 2026 by rpki-client