$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: 2KwxiFvOWZqfvHlbZ9e4cgNTvwZFGGgtonbCZyze6NI= Subject key identifier: 33:6E:E4:6D:95:AC:DC:EC:CE:81:90:42:61:03:06:69:F2:B1:C5:C9 Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: 0114 Signing time: Wed 29 Jul 2026 07:22:59 +0000 Manifest this update: Wed 29 Jul 2026 07:22:58 +0000 Manifest next update: Wed 05 Aug 2026 07:22:58 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: 1ULzmD1pGmQSCtir2Ke8aEM9iG6xS+lW8GAZ1mvpoXc=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: Jul 29 07:22:58 2026 GMT Not After : Aug 5 07:22:58 2026 GMT Subject: CN=6a69aa53-89df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:34:5a:39:ca:11:ca:a6:2d:87:40:0f:98: 62:fe:44:bb:1f:c6:20:1f:dd:c6:ca:4c:62:a3:c3: 7e:5a:f0:25:da:b9:e2:ba:69:d3:d5:c7:2f:7f:4a: 7f:8a:af:30:c1:e9:17:3e:57:c2:3f:2e:3c:fe:2b: f1:7f:50:79:f9:76:03:51:d5:23:33:6a:d3:a1:41: 55:be:af:93:c9:42:27:5c:73:eb:26:15:c0:e2:8c: b9:c6:cc:b4:b7:c0:a5:41:0c:19:85:11:2d:55:eb: e1:ce:db:58:a8:32:65:4f:d9:db:34:37:e7:d3:ce: 10:ac:1e:ea:16:5c:d9:73:6f:26:34:bf:c4:da:fa: 02:ce:d1:8d:1b:20:ea:d5:60:6d:99:75:3f:a6:36: 7d:9b:c5:87:d8:3a:27:7d:ed:39:63:d7:d3:0c:c0: 5c:02:48:69:7b:32:39:65:37:da:23:96:08:6d:be: 26:33:1d:97:3f:1c:d9:42:50:e1:46:f4:b7:9b:64: 63:44:c0:19:12:ac:60:74:11:d2:21:29:3f:f2:a9: f4:b6:57:7a:5d:43:a2:f2:1e:f8:8f:ac:49:1c:4f: 90:68:8d:78:b5:5d:a8:3c:5b:30:cd:fe:46:35:a1: 39:2f:e1:1d:46:62:ef:c6:c4:0d:4a:5e:fa:bb:01: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:E4:6D:95:AC:DC:EC:CE:81:90:42:61:03:06:69:F2:B1:C5:C9 X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:a1:5b:d0:d7:e4:74:31:70:51:7e:4c:09:d3:c4:bb:4c: 32:d0:e7:71:ca:c9:2c:68:24:5e:17:0f:50:b1:87:2c:8d:50: 9f:4e:b0:cf:ec:6a:8d:4b:12:e6:09:0d:7f:0c:99:32:e9:ab: 35:54:1f:79:2e:ee:6d:89:96:65:c7:64:d5:03:6e:17:a8:16: 65:ce:9d:a0:b9:93:d7:2b:49:67:af:fa:c3:58:be:79:e2:66: 84:b2:91:ff:44:98:02:9e:0d:b1:eb:0b:80:8a:6a:22:53:4b: 5a:c1:af:d0:3b:dd:42:09:71:75:ab:76:df:98:46:a7:79:36: 9a:0b:34:b4:6b:2b:f6:48:c4:a7:bb:45:4a:94:0e:e1:64:74: 58:0e:fc:55:96:e1:a1:c2:a4:e5:28:68:86:32:33:33:a8:1f: 07:c6:b7:7a:77:3a:d1:86:01:b0:9c:92:18:f2:88:80:b5:f1: 4b:45:74:5c:ab:3d:7e:6c:69:84:1f:b0:04:38:b4:cb:08:f0: 77:42:cd:8e:0b:7e:20:b8:ce:1f:6f:75:71:9f:1c:20:e2:8f: a7:4e:04:1b:a4:47:1b:2c:4b:11:1b:27:60:04:25:b3:d8:d8: fa:13:b4:eb:4b:d0:c7:d6:a0:08:5c:49:46:fc:e2:18:c7:b1: 2d:82:ff:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjYwNzI5MDcyMjU4WhcNMjYwODA1MDcyMjU4WjAYMRYwFAYD VQQDEw02YTY5YWE1My04OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY40WjnKEcqmLYdAD5hi/kS7H8YgH93Gykxio8N+WvAl2rniumnT1ccvf0p/ iq8wwekXPlfCPy48/ivxf1B5+XYDUdUjM2rToUFVvq+TyUInXHPrJhXA4oy5xsy0 t8ClQQwZhREtVevhzttYqDJlT9nbNDfn084QrB7qFlzZc28mNL/E2voCztGNGyDq 1WBtmXU/pjZ9m8WH2Donfe05Y9fTDMBcAkhpezI5ZTfaI5YIbb4mMx2XPxzZQlDh RvS3m2RjRMAZEqxgdBHSISk/8qn0tld6XUOi8h74j6xJHE+QaI14tV2oPFswzf5G NaE5L+EdRmLvxsQNSl76uwF9cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNu5G2V rNzszoGQQmEDBmnyscXJMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkM3Mi85RDVCNTE1NkVDRjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3 bnV5cGpudkhWTXZKa05mV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlehW9DX5HQxcFF+TAnTxLtMMtDnccrJLGgkXhcPULGHLI1Qn06wz+xqjUsS 5gkNfwyZMumrNVQfeS7ubYmWZcdk1QNuF6gWZc6doLmT1ytJZ6/6w1i+eeJmhLKR /0SYAp4NsesLgIpqIlNLWsGv0DvdQglxdat235hGp3k2mgs0tGsr9kjEp7tFSpQO 4WR0WA78VZbhocKk5ShohjIzM6gfB8a3enc60YYBsJySGPKIgLXxS0V0XKs9fmxp hB+wBDi0ywjwd0LNjgt+ILjOH291cZ8cIOKPp04EG6RHGyxLERsnYAQls9jY+hO0 60vQx9agCFxJRvziGMexLYL/eA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:35:10 2026 by rpki-client