$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: fDzbSZX4+nRbYgjRjaYBztc2jTu7rVBOV4uSKD+QZas= Subject key identifier: 0C:FF:B6:1C:ED:93:E7:E9:E6:85:94:BE:7F:09:5C:D9:25:1C:39:AD Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CC4 Signing time: Thu 16 Apr 2026 18:34:20 +0000 Manifest this update: Thu 16 Apr 2026 18:34:19 +0000 Manifest next update: Thu 23 Apr 2026 18:34:19 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: GuUWj6VDW6A2qzfhRNuWxKMYAL5mjoq02cj8S6KoGwQ=) 2: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 4: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 5: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) 6: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 7: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Apr 16 18:34:19 2026 GMT Not After : Apr 23 18:34:19 2026 GMT Subject: CN=69e12bac-73b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:9e:9b:19:ae:5e:ed:36:35:7e:d6:51:d7: 4f:8b:c9:96:e1:2b:7e:f3:d9:6b:0e:62:2b:8c:aa: c5:3e:6e:4b:5d:c7:f9:d5:0f:ac:b7:28:55:2c:18: d1:b8:72:4c:1f:e5:1b:fc:f3:0a:31:9b:79:5d:ef: 88:1d:d9:9d:ce:bf:99:ea:74:b3:54:7b:25:31:a9: 86:d6:db:6c:4c:fc:09:d4:c0:98:45:47:9d:84:a0: f0:55:dd:93:13:41:05:54:0e:e4:34:49:e5:0c:0b: e6:12:dc:5d:a8:39:1d:91:69:08:fd:24:37:53:5f: 9e:a8:7a:56:1e:44:fa:a9:68:7e:e8:8a:32:75:78: 82:34:3b:1e:a4:6d:30:db:11:6a:3c:e8:92:50:49: 5e:06:35:dc:d6:1f:3e:8c:b0:e9:56:f2:11:9d:3b: 8d:f1:5d:97:b6:cf:98:fd:19:fe:b6:6d:60:1d:f7: 22:31:c4:4d:87:21:89:5f:61:f7:ff:f7:28:98:a7: fa:62:f0:c3:01:02:7a:85:b6:fd:27:5a:c3:9d:b2: 59:ca:53:2a:e6:1d:19:38:20:65:16:80:c1:a6:83: 1d:c0:eb:e7:fd:7b:b7:87:4c:a9:2c:f8:3a:55:0a: 24:3c:c6:37:0c:d7:36:07:b6:63:80:56:b9:28:d5: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FF:B6:1C:ED:93:E7:E9:E6:85:94:BE:7F:09:5C:D9:25:1C:39:AD X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:86:fc:06:43:99:9f:8c:60:fb:f9:74:46:b3:2f:cb:c8:c3: e9:b1:71:c0:58:08:2c:3c:95:f4:64:b9:ae:6e:33:7c:95:15: c6:16:94:72:49:7e:32:b9:36:23:ef:74:8c:c2:29:ae:5b:7b: 7c:df:9a:0d:76:64:d8:a1:cf:81:bc:06:86:29:b1:48:b6:58: 57:85:06:bb:f7:65:69:ba:06:ee:b3:7d:70:7b:ab:70:8e:72: d4:83:18:b4:09:a0:a5:2d:4b:10:77:18:bb:ab:7b:a1:9c:d1: 3c:a5:ed:ca:85:f8:5e:dc:17:11:07:20:2f:9f:c4:09:08:a2: b2:ec:b7:96:28:19:05:74:01:c6:c1:ab:d9:f6:5b:2e:d3:d2: 4a:28:1f:25:69:cf:e3:61:68:10:5b:2d:31:c1:80:e9:0a:66: b7:d2:aa:9e:7b:4a:93:79:aa:27:93:64:73:e4:7f:85:01:d0: 95:1a:47:92:06:9d:d5:e5:49:9b:81:cb:38:12:1b:b7:ce:b1: 8c:c5:38:33:09:ca:24:0a:8e:1b:25:5b:ce:64:11:1f:3d:7a: f2:23:fb:9c:cf:13:73:df:74:d7:b8:f2:73:5e:e8:55:19:05: 33:35:86:ec:03:a9:5a:7e:10:cc:1e:a2:b6:9e:91:45:28:9c: d2:28:45:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNDE2MTgzNDE5WhcNMjYwNDIzMTgzNDE5WjAYMRYwFAYD VQQDEw02OWUxMmJhYy03M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQaemxmuXu02NX7WUddPi8mW4St+89lrDmIrjKrFPm5LXcf51Q+styhVLBjR uHJMH+Ub/PMKMZt5Xe+IHdmdzr+Z6nSzVHslMamG1ttsTPwJ1MCYRUedhKDwVd2T E0EFVA7kNEnlDAvmEtxdqDkdkWkI/SQ3U1+eqHpWHkT6qWh+6IoydXiCNDsepG0w 2xFqPOiSUEleBjXc1h8+jLDpVvIRnTuN8V2Xts+Y/Rn+tm1gHfciMcRNhyGJX2H3 //comKf6YvDDAQJ6hbb9J1rDnbJZylMq5h0ZOCBlFoDBpoMdwOvn/Xu3h0ypLPg6 VQokPMY3DNc2B7ZjgFa5KNUJFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz/thzt k+fp5oWUvn8JXNklHDmtMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4b8BkOZn4xg+/l0RrMvy8jD6bFxwFgILDyV9GS5rm4zfJUVxhaUckl+Mrk2 I+90jMIprlt7fN+aDXZk2KHPgbwGhimxSLZYV4UGu/dlaboG7rN9cHurcI5y1IMY tAmgpS1LEHcYu6t7oZzRPKXtyoX4XtwXEQcgL5/ECQiisuy3ligZBXQBxsGr2fZb LtPSSigfJWnP42FoEFstMcGA6Qpmt9KqnntKk3mqJ5Nkc+R/hQHQlRpHkgad1eVJ m4HLOBIbt86xjMU4MwnKJAqOGyVbzmQRHz168iP7nM8Tc99017jyc17oVRkFMzWG 7AOpWn4QzB6itp6RRSic0ihFQg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:41 2026 by rpki-client