$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: 4dYHUxg5Wpln/BJKCBLpRnvazZge7SoQcH3FIFUBbMs= Subject key identifier: D4:B2:85:FC:D7:DA:67:72:24:75:13:51:67:A5:6C:E1:53:7C:DF:EA Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 098E Signing time: Sun 20 Sep 2026 20:22:58 +0000 Manifest this update: Sun 20 Sep 2026 20:22:57 +0000 Manifest next update: Sun 27 Sep 2026 20:22:57 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: wfYLJyi3seTWZiuIWXxKGHEFP52aV54JHbrLt+n+ZwA=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI=) 4: 47B17AE48B2911F198C4B09681EE528E.roa (hash: jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Sep 20 20:22:57 2026 GMT Not After : Sep 27 20:22:57 2026 GMT Subject: CN=6ab040a2-9d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:bb:f8:18:e5:61:96:27:cc:23:78:89:f1: 4a:d0:8a:27:65:91:77:03:b2:fc:9a:b8:49:bc:71: 17:8c:d5:f9:ad:69:70:a5:fd:60:ca:69:2d:04:41: 0a:10:0d:f8:5f:99:d1:c3:7e:d2:f4:98:31:ac:2c: 0e:a3:1d:89:2c:5b:ea:5f:68:d1:78:40:58:24:43: 6f:8e:2f:c5:8a:36:04:a2:5e:d4:2d:a6:a1:85:bb: a7:7c:92:e0:98:43:95:41:47:a5:cf:87:41:1c:d1: 7c:22:83:91:b4:4d:fd:3b:36:b1:fd:82:b5:1d:6a: 74:b4:16:1c:a5:de:b6:12:07:9f:d4:b6:27:e2:fe: 20:d5:97:46:93:35:98:23:14:62:de:79:57:24:44: e1:e1:8a:f9:1b:db:97:5d:d2:d8:9a:9f:e5:6c:2b: 93:d9:6c:b1:5a:1b:fb:16:a4:23:d1:91:e1:83:80: 24:9b:5b:2e:e9:7a:9a:4c:78:9c:74:be:d5:90:96: 1b:d6:ba:c1:8b:9c:1e:06:f3:87:ca:ec:96:af:5a: b9:7a:8f:6a:9d:62:10:87:de:80:f9:64:2e:71:e0: e4:77:d4:ea:38:30:bc:b1:af:c4:31:1f:3c:d2:bb: e6:64:61:18:ce:50:63:49:85:02:d3:98:07:c9:4b: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:85:FC:D7:DA:67:72:24:75:13:51:67:A5:6C:E1:53:7C:DF:EA X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:95:88:9b:3e:7c:b7:df:df:2b:92:a9:e1:17:dd:68:b5:51: 8d:0c:10:fc:cd:27:28:08:74:53:b4:52:8f:09:78:5c:4b:7c: f8:48:28:c6:0d:ef:a3:ba:73:ef:0b:9a:f5:da:95:aa:a5:9e: 4e:1e:8c:2f:9f:6e:f7:86:90:6a:dd:f1:d9:c6:b7:a0:59:61: 96:84:b0:33:96:ab:4f:06:8c:57:d4:fe:f4:60:cc:d1:21:3c: 6c:43:18:75:68:80:6c:be:b6:05:d4:2b:0b:54:74:fd:ae:7f: 2e:36:23:56:38:d1:d6:53:5b:ba:50:6c:2e:d2:2e:ec:de:74: af:5b:e4:21:96:3e:dd:35:f4:c0:ea:81:33:a5:3b:0d:6d:e9: 70:17:d3:3a:f6:e2:87:bf:43:e2:d0:2b:f7:9d:f4:fc:0f:e2: 60:ad:f8:d0:76:2d:f6:69:be:71:c4:97:02:8c:e7:f3:16:0d: 36:86:f0:1b:31:94:45:9e:25:36:97:9e:8f:d7:cc:f2:05:eb: 14:ef:4e:9e:9d:35:c1:fb:bf:09:86:46:bc:19:7d:87:59:82: 67:a4:33:f8:3a:7e:33:2e:bb:fd:6c:57:ec:1a:77:0a:28:86: 90:c1:76:7f:3f:a5:0e:b0:00:95:f8:6f:29:be:c5:c8:88:cb: 12:07:ac:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwOTIwMjAyMjU3WhcNMjYwOTI3MjAyMjU3WjAYMRYwFAYD VQQDEw02YWIwNDBhMi05ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRS7+BjlYZYnzCN4ifFK0IonZZF3A7L8mrhJvHEXjNX5rWlwpf1gymktBEEK EA34X5nRw37S9JgxrCwOox2JLFvqX2jReEBYJENvji/FijYEol7ULaahhbunfJLg mEOVQUelz4dBHNF8IoORtE39Ozax/YK1HWp0tBYcpd62Egef1LYn4v4g1ZdGkzWY IxRi3nlXJETh4Yr5G9uXXdLYmp/lbCuT2WyxWhv7FqQj0ZHhg4Akm1su6XqaTHic dL7VkJYb1rrBi5weBvOHyuyWr1q5eo9qnWIQh96A+WQuceDkd9TqODC8sa/EMR88 0rvmZGEYzlBjSYUC05gHyUuYIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSyhfzX 2mdyJHUTUWelbOFTfN/qMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACpWImz58t9/fK5Kp4RfdaLVRjQwQ/M0nKAh0U7RSjwl4XEt8+Egoxg3vo7pz 7wua9dqVqqWeTh6ML59u94aQat3x2ca3oFlhloSwM5arTwaMV9T+9GDM0SE8bEMY dWiAbL62BdQrC1R0/a5/LjYjVjjR1lNbulBsLtIu7N50r1vkIZY+3TX0wOqBM6U7 DW3pcBfTOvbih79D4tAr9530/A/iYK340HYt9mm+ccSXAozn8xYNNobwGzGURZ4l Npeej9fM8gXrFO9Onp01wfu/CYZGvBl9h1mCZ6Qz+Dp+My67/WxX7Bp3CiiGkMF2 fz+lDrAAlfhvKb7FyIjLEgeszw== -----END CERTIFICATE-----Generated at Tue Sep 22 02:20:05 2026 by rpki-client