$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: lgxJii1k8ezSy7FMp2kMTvLoN3w2JXbwp7tYAv3adt8= Subject key identifier: 32:5F:DC:00:9F:B4:67:05:97:51:90:7F:D6:FD:1E:C5:D5:56:3E:4F Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 3C Signing time: Tue 27 Oct 2026 08:49:01 +0000 Manifest this update: Tue 27 Oct 2026 08:49:01 +0000 Manifest next update: Tue 03 Nov 2026 08:49:01 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: cSBi9YIFEbcKmDoqO6Jtjc4anT8/yMRHX1y3YFi/WZY=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Oct 27 08:49:01 2026 GMT Not After : Nov 3 08:49:01 2026 GMT Subject: CN=6ae0657d-2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:83:60:ee:48:fa:f2:b7:4a:90:04:8b:ef: 9e:46:9c:25:99:f0:17:43:43:00:50:9b:b1:46:f7: ac:b4:42:aa:64:de:cc:bd:6e:8a:68:3c:a6:d2:0c: 2d:ab:02:d9:db:ab:66:53:59:4c:67:7f:17:52:1b: 8d:84:b4:23:c5:8c:80:ab:fa:00:86:27:a6:e5:bf: 66:da:3a:56:94:c7:ab:23:83:25:37:c3:c5:1f:b8: 2b:3d:4f:b5:a0:87:5f:f2:8e:d2:2d:ad:77:3e:ff: 8b:bd:51:58:2a:1d:7b:f6:f8:41:07:b5:3b:e8:cf: 49:7a:a8:c0:3e:19:f4:db:f9:d4:72:74:1f:29:0a: f2:9f:d4:17:fd:88:6a:17:aa:04:94:ec:82:fc:9d: bb:11:17:61:36:81:c9:e5:7d:55:1b:7f:96:77:1d: ba:de:2a:b9:19:fa:86:a6:84:2e:66:6b:f7:f5:8f: fd:25:32:57:b8:d1:00:09:87:70:79:ba:ce:4c:ff: 48:f3:ca:05:20:5a:7c:05:9d:bf:8b:84:c7:a6:ea: 6d:02:0c:e1:2c:70:34:e0:c4:50:05:a3:28:6c:3b: 36:da:cb:ac:28:6e:fd:f9:92:ef:6c:84:71:fb:36: 36:50:59:2b:bd:2f:8c:38:74:a8:be:a6:ec:31:eb: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:DC:00:9F:B4:67:05:97:51:90:7F:D6:FD:1E:C5:D5:56:3E:4F X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:76:4a:80:69:a9:1b:d4:b5:8f:38:0f:f1:2c:f0:67:25:fd: 25:fc:67:76:ea:c2:d2:cd:71:a6:d4:24:9a:2d:39:07:ae:f7: 3c:68:d7:7e:a4:c0:d7:9e:e1:55:51:9b:4d:ca:ca:51:0c:08: 71:e3:4e:c4:63:dd:ac:da:54:a1:bc:9a:d6:59:5a:60:58:37: 08:a9:5a:ed:5a:52:4a:f9:41:a9:d5:73:3a:ea:2c:b4:a0:8e: c1:68:b1:11:8a:5f:fd:af:73:38:cd:67:fa:89:60:7e:42:fe: 31:08:48:d3:ab:49:33:61:4f:ef:9a:51:fe:92:90:6a:59:e5: a8:1b:5a:2d:93:71:e1:23:2a:77:c4:fd:2a:31:42:99:7c:22: 19:6a:b9:73:aa:1e:42:f2:12:60:20:68:e6:80:a8:65:2e:b2: 14:ff:d5:d4:10:5c:10:76:60:72:c0:d4:ed:7c:80:85:8d:e4: 1d:8b:d9:af:47:5b:d4:58:2f:61:59:e5:c7:01:01:71:69:63: 57:12:90:23:44:f6:4c:cb:c0:55:c2:a3:84:6d:21:1f:ca:54: e4:be:51:07:94:ac:a9:ae:9d:4c:13:e1:ff:a9:87:cf:8b:00: 2f:6c:63:a4:40:8a:6f:79:be:4d:66:a2:3e:bd:16:84:1e:b8: 1d:61:92:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjEwMjcwODQ5MDFaFw0yNjExMDMwODQ5MDFaMBgxFjAUBgNV BAMTDTZhZTA2NTdkLTJhZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK14Ng7kj68rdKkASL755GnCWZ8BdDQwBQm7FG96y0Qqpk3sy9bopoPKbSDC2r Atnbq2ZTWUxnfxdSG42EtCPFjICr+gCGJ6blv2baOlaUx6sjgyU3w8UfuCs9T7Wg h1/yjtItrXc+/4u9UVgqHXv2+EEHtTvoz0l6qMA+GfTb+dRydB8pCvKf1Bf9iGoX qgSU7IL8nbsRF2E2gcnlfVUbf5Z3HbreKrkZ+oamhC5ma/f1j/0lMle40QAJh3B5 us5M/0jzygUgWnwFnb+LhMem6m0CDOEscDTgxFAFoyhsOzbay6wobv35ku9shHH7 NjZQWSu9L4w4dKi+puwx67c3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMl/cAJ+0 ZwWXUZB/1v0exdVWPk8wHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2dkqAaakb1LWPOA/xLPBnJf0l/Gd26sLSzXGm1CSaLTkHrvc8aNd+pMDXnuFV UZtNyspRDAhx407EY92s2lShvJrWWVpgWDcIqVrtWlJK+UGp1XM66iy0oI7BaLER il/9r3M4zWf6iWB+Qv4xCEjTq0kzYU/vmlH+kpBqWeWoG1otk3HhIyp3xP0qMUKZ fCIZarlzqh5C8hJgIGjmgKhlLrIU/9XUEFwQdmBywNTtfICFjeQdi9mvR1vUWC9h WeXHAQFxaWNXEpAjRPZMy8BVwqOEbSEfylTkvlEHlKyprp1ME+H/qYfPiwAvbGOk QIpveb5NZqI+vRaEHrgdYZJB -----END CERTIFICATE-----Generated at Wed Oct 28 18:54:52 2026 by rpki-client