$ rpki-client -vvvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: soIPY4dXxJ71H25GwO6AxLJ2cwH5rZktsq4Grq9o5dM= Subject key identifier: C7:5B:53:B3:0A:7A:89:6B:5D:95:4C:BF:FB:FB:3A:4F:C3:07:D5:E9 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0D6C Signing time: Thu 08 Oct 2026 18:19:51 +0000 Manifest this update: Thu 08 Oct 2026 18:19:50 +0000 Manifest next update: Thu 15 Oct 2026 18:19:50 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: 0NbmRwcy07dUpEh1+PKNcpe+FsrvRIGPoqp0ZtX0hMg=) 2: IwZbjAE-iBn_grqhwq9A787douc.asa (hash: O4OpQ2ClZ0gTwudEScXKCnu8tV0CDg/yIj0Apdccrpc=) 3: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Oct 8 18:19:50 2026 GMT Not After : Oct 15 18:19:50 2026 GMT Subject: CN=6ac7dec6-d797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:00:60:2a:bd:c8:4a:53:26:67:85:16:f2: e1:61:d9:0d:ca:18:24:dc:ec:09:1d:a7:14:5d:73: 29:c8:c5:97:3b:66:f4:08:73:30:a3:aa:53:8a:14: a0:5a:07:61:49:17:b1:b1:71:b1:74:ba:ac:4e:23: 2a:d0:b6:90:f3:34:33:5b:b9:fc:f1:57:4e:70:75: a9:76:b4:f9:43:d8:82:b4:d3:c0:4a:ae:2e:bf:e3: a7:02:f1:fc:b3:d2:d9:85:77:7c:5b:ff:d2:33:07: e4:2c:d4:22:e1:99:56:e3:fa:83:e9:01:dc:40:a2: 62:4b:75:7c:3d:ee:a3:f0:5c:e7:4d:e8:99:ba:5a: 2e:86:22:d1:b1:1a:d6:e5:bc:f7:e8:75:0a:f3:30: d4:2d:e7:1e:bc:cd:6a:9b:f0:a6:b4:9b:8c:08:7f: 4d:b5:53:a1:00:18:dc:19:e6:e3:33:c0:f3:c3:38: 5d:1b:50:e2:de:e0:fa:52:01:0d:ba:52:30:42:ab: f2:fd:cf:77:a3:6b:34:37:75:41:b1:07:0f:53:7e: 7c:d6:2b:c3:c7:6e:dd:ac:b9:88:96:ca:9f:ae:29: 68:a0:a3:fd:36:31:de:ab:31:e6:76:1e:99:35:5c: a3:61:a9:f4:bc:9a:07:4c:bb:25:ed:52:3e:78:8a: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5B:53:B3:0A:7A:89:6B:5D:95:4C:BF:FB:FB:3A:4F:C3:07:D5:E9 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:91:be:92:6e:99:b9:3a:ab:9b:66:f1:a3:b3:0d:c3:18: 4e:0c:58:8a:eb:f6:d9:9b:f5:3d:2c:65:75:e0:dc:c1:06:ec: 99:ee:58:d0:14:76:94:73:f2:86:69:23:21:b5:95:c1:76:08: 65:1d:48:88:88:71:27:4b:95:df:56:ae:2f:44:cc:a2:61:48: 47:8b:82:98:e1:4a:8c:5a:88:1a:85:d8:6d:0a:99:73:2d:e3: 7c:ed:cb:1d:71:17:56:34:9d:8d:32:8a:5d:a3:7d:03:c4:10: 79:70:86:63:a0:17:6a:98:f5:03:fc:45:7c:e2:a9:1d:da:08: fe:8c:fe:51:21:4f:24:47:93:b2:3e:79:77:2c:8d:93:13:d2: 9a:a5:6e:f9:81:a3:6b:82:c4:bc:fe:97:0b:17:13:28:61:9a: 7c:e3:dd:c1:d1:00:7c:d7:35:69:cb:0a:ab:8e:f2:06:b8:cb: 33:c8:a3:1e:50:dc:da:8c:35:51:aa:c9:a2:31:9f:88:d7:6b: d7:ad:74:26:d6:f7:85:15:92:d2:95:29:5c:ba:d3:1c:70:60: b5:44:29:11:e8:05:a9:2e:62:c1:5a:a9:50:12:a7:b6:60:98: 64:8d:20:1c:47:b2:d9:1f:6a:25:57:47:4f:d4:2c:81:ab:b7: 7e:88:6d:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjYxMDA4MTgxOTUwWhcNMjYxMDE1MTgxOTUwWjAYMRYwFAYD VQQDEw02YWM3ZGVjNi1kNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssEAYCq9yEpTJmeFFvLhYdkNyhgk3OwJHacUXXMpyMWXO2b0CHMwo6pTihSg WgdhSRexsXGxdLqsTiMq0LaQ8zQzW7n88VdOcHWpdrT5Q9iCtNPASq4uv+OnAvH8 s9LZhXd8W//SMwfkLNQi4ZlW4/qD6QHcQKJiS3V8Pe6j8FznTeiZulouhiLRsRrW 5bz36HUK8zDULecevM1qm/CmtJuMCH9NtVOhABjcGebjM8DzwzhdG1Di3uD6UgEN ulIwQqvy/c93o2s0N3VBsQcPU3581ivDx27drLmIlsqfrilooKP9NjHeqzHmdh6Z NVyjYan0vJoHTLsl7VI+eIoBxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdbU7MK eolrXZVMv/v7Ok/DB9XpMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGm6RvpJumbk6q5tm8aOzDcMYTgxYiuv22Zv1PSxldeDcwQbsme5Y0BR2lHPy hmkjIbWVwXYIZR1IiIhxJ0uV31auL0TMomFIR4uCmOFKjFqIGoXYbQqZcy3jfO3L HXEXVjSdjTKKXaN9A8QQeXCGY6AXapj1A/xFfOKpHdoI/oz+USFPJEeTsj55dyyN kxPSmqVu+YGja4LEvP6XCxcTKGGafOPdwdEAfNc1acsKq47yBrjLM8ijHlDc2ow1 UarJojGfiNdr1610Jtb3hRWS0pUpXLrTHHBgtUQpEegFqS5iwVqpUBKntmCYZI0g HEey2R9qJVdHT9Qsgau3fohtIw== -----END CERTIFICATE-----Generated at Fri Oct 9 03:26:46 2026 by rpki-client