$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: E8jto9UI/Cbh376whPsfbzY6hyKAhK3Wsa7jw3x/Gj8= Subject key identifier: 59:23:A6:52:E8:47:7F:7C:EC:25:01:82:9B:7A:D1:C4:12:EB:FF:4D Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 49 Signing time: Mon 31 Aug 2026 08:46:37 +0000 Manifest this update: Mon 31 Aug 2026 08:46:36 +0000 Manifest next update: Mon 07 Sep 2026 08:46:36 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: DsIK1RBAdcJ9suyIjK2clZQ3TmQIW3+F4NUYtVVI7XI=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Aug 31 08:46:36 2026 GMT Not After : Sep 7 08:46:36 2026 GMT Subject: CN=6a953f6d-16c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:b9:52:9b:07:49:90:3f:17:c3:91:44:11: 74:74:1c:62:74:ad:78:19:77:6b:d7:77:43:0c:7c: cf:97:fb:4b:01:35:34:91:35:70:24:64:0e:07:ad: b3:af:53:8c:a4:f0:41:0e:2a:ff:74:f3:ca:e9:5e: b9:c7:a6:77:20:9b:6a:5b:49:e0:d5:3d:cc:70:bd: 61:53:d3:83:4d:d5:f8:81:c0:55:47:37:b0:1a:39: 5e:e6:f2:95:89:31:a8:d7:2e:93:58:83:64:48:b9: 35:c2:4d:d8:0d:3f:10:ad:25:f5:27:68:dd:67:79: 5d:12:f1:9a:37:33:af:57:33:a3:d3:62:39:aa:e5: f7:55:9b:81:57:06:8f:0a:79:23:d2:59:9a:70:6d: b8:eb:70:d8:17:81:85:cd:fd:4d:1d:6a:0f:a8:86: 09:6e:ef:3a:e6:0f:f8:c0:15:23:d0:5d:1f:83:97: 43:b8:21:ee:76:c2:79:92:9d:cd:fd:81:f9:61:d0: 50:ae:43:19:93:b3:fb:fd:83:d3:b1:6c:f2:7b:c3: d8:bb:9b:d3:c4:38:e5:a7:1c:42:83:d9:2e:05:c8: 92:a6:5a:38:44:df:2e:3f:5b:3c:d4:37:e6:3e:96: 5c:74:26:cb:56:95:55:0c:39:e0:0c:12:53:e0:68: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:A6:52:E8:47:7F:7C:EC:25:01:82:9B:7A:D1:C4:12:EB:FF:4D X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e1:f3:3e:e7:c7:ad:35:e6:9a:84:d3:75:2b:f3:86:39:16: be:f8:87:c7:b1:9a:da:3d:d3:0c:64:4a:01:21:e7:3d:50:94: 86:ad:ea:b0:e5:d7:76:cb:17:00:ad:5a:a7:54:e3:97:2c:73: f4:7c:92:4b:36:43:3e:77:5e:56:de:fc:96:df:95:0e:bd:a3: 28:0d:b9:f2:2e:af:93:ed:11:f0:ad:2c:a1:ce:a5:a6:8a:3e: 32:8c:0d:0c:b0:1e:f3:4c:b3:cb:6a:32:5d:0a:b1:00:08:7c: cb:23:b9:0d:d7:08:b5:3b:3b:54:47:0f:60:2e:26:98:03:02: 56:ae:8f:86:3b:7c:ee:6c:74:81:63:22:7f:3f:33:ca:cf:a0: f3:36:6f:ce:10:98:75:cf:12:f1:70:18:fb:e2:ab:88:7a:8c: 50:ef:45:dc:01:ea:a9:05:14:0a:0e:04:aa:95:96:e0:04:01: a7:46:a4:14:b4:b4:82:04:b8:ba:ac:92:9f:66:71:5b:ea:3b: 79:d5:1c:66:c2:67:17:b3:57:13:1e:c0:a5:77:a0:db:e1:8b: 10:43:53:57:27:b7:e5:b3:9d:53:2d:7e:d7:74:d2:4b:65:cc: 59:82:6f:9d:bd:b5:41:5c:2f:0e:d6:ca:1b:c1:99:56:15:5e: bc:80:f2:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA4MzEwODQ2MzZaFw0yNjA5MDcwODQ2MzZaMBgxFjAUBgNV BAMTDTZhOTUzZjZkLTE2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx+LlSmwdJkD8Xw5FEEXR0HGJ0rXgZd2vXd0MMfM+X+0sBNTSRNXAkZA4HrbOv U4yk8EEOKv9088rpXrnHpncgm2pbSeDVPcxwvWFT04NN1fiBwFVHN7AaOV7m8pWJ MajXLpNYg2RIuTXCTdgNPxCtJfUnaN1neV0S8Zo3M69XM6PTYjmq5fdVm4FXBo8K eSPSWZpwbbjrcNgXgYXN/U0dag+ohglu7zrmD/jAFSPQXR+Dl0O4Ie52wnmSnc39 gflh0FCuQxmTs/v9g9OxbPJ7w9i7m9PEOOWnHEKD2S4FyJKmWjhE3y4/WzzUN+Y+ llx0JstWlVUMOeAMElPgaNJFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWSOmUuhH f3zsJQGCm3rRxBLr/00wHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw4fM+58etNeaahNN1K/OGORa++IfHsZraPdMMZEoBIec9UJSGreqw5dd2yxcA rVqnVOOXLHP0fJJLNkM+d15W3vyW35UOvaMoDbnyLq+T7RHwrSyhzqWmij4yjA0M sB7zTLPLajJdCrEACHzLI7kN1wi1OztURw9gLiaYAwJWro+GO3zubHSBYyJ/PzPK z6DzNm/OEJh1zxLxcBj74quIeoxQ70XcAeqpBRQKDgSqlZbgBAGnRqQUtLSCBLi6 rJKfZnFb6jt51RxmwmcXs1cTHsCld6Db4YsQQ1NXJ7fls51TLX7XdNJLZcxZgm+d vbVBXC8O1sobwZlWFV68gPKq -----END CERTIFICATE-----Generated at Tue Sep 1 05:10:20 2026 by rpki-client