$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: SvxXO2HGQpNLz1QNAlCM+VE7wWX/XBKo7Ae1mPN9v90= Subject key identifier: DB:65:EB:F9:13:43:3F:A6:0D:69:EB:05:92:39:70:1A:A7:84:17:92 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CE1 Signing time: Fri 12 Jun 2026 18:37:14 +0000 Manifest this update: Fri 12 Jun 2026 18:37:14 +0000 Manifest next update: Fri 19 Jun 2026 18:37:14 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: Sdu0ldMgBuLmR40UmVp5p3uTmlcY5Led5Z2xYGRauZk=) 2: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=) 3: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=) 4: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=) 5: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=) 7: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Jun 12 18:37:14 2026 GMT Not After : Jun 19 18:37:14 2026 GMT Subject: CN=6a2c51da-38fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:4a:65:37:56:4d:4a:8c:fe:05:19:38:cc: 56:94:1a:9b:86:c9:29:16:d8:eb:cc:9e:1d:c2:dd: 1f:99:3a:e2:2d:64:85:93:18:8c:75:85:7f:d4:b0: cd:ec:62:cd:5a:f3:6f:8e:ac:78:62:e4:96:78:7b: c2:7b:6d:04:77:6d:57:44:14:72:27:87:f6:b9:38: 2c:bd:1e:8d:f8:31:93:62:d0:4f:28:03:60:ea:d6: d3:20:45:94:55:77:77:ae:0f:cd:0c:2a:16:c5:fe: 1a:15:38:e3:5a:ae:42:a2:21:56:fd:22:2a:c0:65: a3:ab:06:35:c9:6a:36:50:52:23:e0:98:0d:86:9c: 98:45:e4:e3:19:fc:d5:52:37:5d:d0:8e:40:33:3f: d5:51:cd:cd:fa:1c:ee:75:98:e8:d6:bb:64:0a:06: 36:4b:51:c4:a7:c0:34:cb:ed:8c:69:88:90:f5:03: 11:2f:2e:a0:c7:55:5b:a2:57:5a:ae:94:5f:48:28: 2b:d7:c8:90:9b:21:c8:2e:80:36:8c:ef:c5:30:f5: 3f:6a:ae:b3:56:bc:d7:20:75:01:24:2a:0b:f1:74: a9:69:12:78:de:ee:4b:22:a6:eb:f4:1c:32:eb:79: 07:51:fb:ee:ab:9f:1f:6f:70:60:43:89:d6:0d:05: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:65:EB:F9:13:43:3F:A6:0D:69:EB:05:92:39:70:1A:A7:84:17:92 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:56:0a:14:87:6c:4e:e0:e4:74:00:85:af:e4:a9:3c:10:3d: d0:ff:df:fe:22:e4:80:2e:11:75:73:fa:92:04:c0:5d:40:08: e8:c6:15:76:4c:26:11:2d:1c:1d:d3:ff:fa:8e:3a:6a:7a:ea: f9:0c:70:f8:69:24:90:fe:a6:fd:ad:21:56:8b:b5:64:b7:4d: da:ba:cf:66:64:37:7b:72:71:f9:4f:f1:ef:36:a7:1f:c7:46: 10:ad:e4:31:d2:b1:0d:1d:ae:5e:02:b6:c4:e7:f2:40:f5:5f: 87:54:f0:e8:23:18:14:ec:5a:7c:21:6b:0d:de:29:29:2b:43: bc:cf:78:47:fe:e2:50:47:c4:89:40:fc:b7:95:1d:27:26:16: 21:55:80:a8:a1:2f:f2:03:03:41:7e:c5:76:ab:71:39:4d:e9: 1b:2b:28:70:c5:3a:b0:c5:fa:5c:6f:38:b9:31:69:34:49:41: c4:fd:e3:12:26:67:5a:f7:b2:93:89:ce:fa:f8:53:c1:70:75: ea:88:1e:ef:3a:7c:08:3a:00:f8:55:2b:4d:4b:c3:4f:f0:6b: 9d:50:ee:51:00:12:88:db:50:84:49:35:10:99:83:cb:a3:fc: 4f:76:80:d1:83:76:76:02:b1:2a:7c:dd:0a:62:32:65:dd:cf: f4:cb:1a:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwNjEyMTgzNzE0WhcNMjYwNjE5MTgzNzE0WjAYMRYwFAYD VQQDEw02YTJjNTFkYS0zOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWRKZTdWTUqM/gUZOMxWlBqbhskpFtjrzJ4dwt0fmTriLWSFkxiMdYV/1LDN 7GLNWvNvjqx4YuSWeHvCe20Ed21XRBRyJ4f2uTgsvR6N+DGTYtBPKANg6tbTIEWU VXd3rg/NDCoWxf4aFTjjWq5CoiFW/SIqwGWjqwY1yWo2UFIj4JgNhpyYReTjGfzV Ujdd0I5AMz/VUc3N+hzudZjo1rtkCgY2S1HEp8A0y+2MaYiQ9QMRLy6gx1Vbolda rpRfSCgr18iQmyHILoA2jO/FMPU/aq6zVrzXIHUBJCoL8XSpaRJ43u5LIqbr9Bwy 63kHUfvuq58fb3BgQ4nWDQWYSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtl6/kT Qz+mDWnrBZI5cBqnhBeSMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlYKFIdsTuDkdACFr+SpPBA90P/f/iLkgC4RdXP6kgTAXUAI6MYVdkwmES0c HdP/+o46anrq+Qxw+GkkkP6m/a0hVou1ZLdN2rrPZmQ3e3Jx+U/x7zanH8dGEK3k MdKxDR2uXgK2xOfyQPVfh1Tw6CMYFOxafCFrDd4pKStDvM94R/7iUEfEiUD8t5Ud JyYWIVWAqKEv8gMDQX7FdqtxOU3pGysocMU6sMX6XG84uTFpNElBxP3jEiZnWvey k4nO+vhTwXB16oge7zp8CDoA+FUrTUvDT/BrnVDuUQASiNtQhEk1EJmDy6P8T3aA 0YN2dgKxKnzdCmIyZd3P9MsaOQ== -----END CERTIFICATE-----Generated at Sun Jun 14 00:52:08 2026 by rpki-client