$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json) Hash identifier: lpyV/Mu8UX00BOZEidFVoHQM33O+16/Z1QdAaWyfOwM= Subject key identifier: D7:00:A5:20:D0:EF:6F:52:70:B5:13:49:B1:4D:26:B8:8B:D4:8C:A1 Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 Certificate issuer: /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft Manifest number: 4B Signing time: Sun 27 Sep 2026 08:57:47 +0000 Manifest this update: Sun 27 Sep 2026 08:57:46 +0000 Manifest next update: Sun 04 Oct 2026 08:57:46 +0000 Files and hashes: 1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: TP27q4ptQSdkHfknAQmCWVoLiqwtvl/DBXSm01mvoIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Validity Not Before: Sep 27 08:57:46 2026 GMT Not After : Oct 4 08:57:46 2026 GMT Subject: CN=6ab8da8a-cf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:6a:fd:d0:67:5a:aa:e3:85:9c:c2:50:fc: b1:f4:86:0d:77:90:a5:35:f2:5a:ca:c8:4e:a6:70: ae:18:8b:82:34:15:9d:07:77:ac:de:6f:2c:8e:56: 60:2a:33:20:47:38:68:fc:b3:15:58:39:b2:5a:94: 07:b0:f2:09:a8:e8:35:bd:5f:07:45:2c:3d:0b:9a: a8:bf:3d:ca:c2:32:ee:95:ef:10:1c:06:56:87:28: db:74:49:e2:e2:e6:76:14:e4:c4:ee:46:0b:cb:3d: 41:57:6d:25:ca:91:a1:4b:40:95:ed:12:14:bd:1d: 82:e4:2c:04:5e:8a:ba:eb:1e:d0:c3:11:cf:ce:49: 3b:7c:70:ca:dd:10:6b:16:0f:f1:57:81:0a:f5:7d: 52:f5:b1:59:a7:29:51:8f:59:3b:16:17:aa:4d:96: 2f:89:a4:55:12:38:2c:8b:49:9f:23:93:83:7b:f2: 2d:76:4b:1f:b5:e3:eb:2f:b0:86:60:4f:ce:6d:2e: e5:76:fe:24:5b:10:e4:21:99:83:3b:62:a5:c7:07: ee:cb:72:51:8b:9a:d4:6c:10:8c:8c:7e:ac:05:71: 44:d2:66:e7:dc:90:33:38:d2:2d:82:0c:03:ab:70: 05:63:e9:08:86:28:51:87:43:55:58:44:4c:47:b1: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:00:A5:20:D0:EF:6F:52:70:B5:13:49:B1:4D:26:B8:8B:D4:8C:A1 X509v3 Authority Key Identifier: keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:47:4f:9e:ba:e6:4b:14:1c:64:8d:b5:06:21:f4:6a:47: 2e:e8:a9:68:8d:21:b3:56:b8:cd:b9:c0:b0:30:ad:29:f6:eb: 9a:82:77:9b:12:a0:89:d1:99:c6:87:a4:3c:7a:bb:4b:76:5f: 57:d7:5d:dc:3b:e0:9a:15:be:15:fc:e5:22:e1:1f:1a:b5:9f: 9d:d5:97:56:1e:58:7c:60:aa:d4:f1:46:43:67:f5:97:c2:40: 28:f1:37:c7:33:4b:1b:21:1c:76:d3:c0:7c:70:a4:39:95:7c: 51:47:ad:87:1d:6a:08:a2:13:98:d4:3d:31:2e:95:bc:80:46: 7e:8a:26:b9:2a:33:85:d0:3e:11:30:a6:d4:b8:c2:eb:a3:ea: bd:1e:d8:48:9d:fc:c2:3a:c5:6b:9c:06:d1:15:10:ea:6a:bf: 5c:b9:05:a0:6e:ec:d1:65:4b:af:12:25:3f:ad:34:80:0f:f3: 13:25:75:e4:1a:b2:b7:74:32:a7:af:95:74:9c:1f:18:c6:76: f1:e6:0a:02:c9:44:b2:40:b5:9d:50:5d:8b:89:ea:5c:33:e4: 52:28:75:c5:c9:ad:4f:be:cb:83:b1:1b:4b:ac:ce:22:ba:ce: f8:3a:ac:9a:dc:25:db:eb:77:fc:2d:8e:b6:84:d6:1b:d9:95: 2d:54:6c:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDcyNzExMC8GA1UEBRMoMzYxMDRBRDVEMUNFMjlGQTZGMDM1RDU5NjkwQ0ZFMTIz OTExODU5NTAeFw0yNjA5MjcwODU3NDZaFw0yNjEwMDQwODU3NDZaMBgxFjAUBgNV BAMTDTZhYjhkYThhLWNmNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDILmr90GdaquOFnMJQ/LH0hg13kKU18lrKyE6mcK4Yi4I0FZ0Hd6zebyyOVmAq MyBHOGj8sxVYObJalAew8gmo6DW9XwdFLD0Lmqi/PcrCMu6V7xAcBlaHKNt0SeLi 5nYU5MTuRgvLPUFXbSXKkaFLQJXtEhS9HYLkLAReirrrHtDDEc/OSTt8cMrdEGsW D/FXgQr1fVL1sVmnKVGPWTsWF6pNli+JpFUSOCyLSZ8jk4N78i12Sx+14+svsIZg T85tLuV2/iRbEOQhmYM7YqXHB+7LclGLmtRsEIyMfqwFcUTSZufckDM40i2CDAOr cAVj6QiGKFGHQ1VYRExHsUIXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1wClINDv b1JwtRNJsU0muIvUjKEwHwYDVR0jBBgwFoAUNhBK1dHOKfpvA11ZaQz+EjkRhZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0Y4MjNDOUE4NDlG RDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2ZwdkExMVphUXotRWprUmha VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhCSzFkSE9LZnB2QTExWmFRei1FamtSaFpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NzI3L0Y4MjNDOUE4NDlGRDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2Zw dkExMVphUXotRWprUmhaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHMEdPnrrmSxQcZI21BiH0akcu6KlojSGzVrjNucCwMK0p9uuagnebEqCJ0ZnG h6Q8ertLdl9X113cO+CaFb4V/OUi4R8atZ+d1ZdWHlh8YKrU8UZDZ/WXwkAo8TfH M0sbIRx208B8cKQ5lXxRR62HHWoIohOY1D0xLpW8gEZ+iia5KjOF0D4RMKbUuMLr o+q9HthInfzCOsVrnAbRFRDqar9cuQWgbuzRZUuvEiU/rTSAD/MTJXXkGrK3dDKn r5V0nB8Yxnbx5goCyUSyQLWdUF2LiepcM+RSKHXFya1PvsuDsRtLrM4ius74Oqya 3CXb63f8LY62hNYb2ZUtVGy5 -----END CERTIFICATE-----Generated at Sun Sep 27 19:35:13 2026 by rpki-client