$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft File: NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json) Hash identifier: cxHBOm36W37F2Pc/8ZCKHYVU4suFsQAPHNuciNFVwEQ= Subject key identifier: 0C:6D:37:35:2B:74:74:18:32:D6:1C:66:6A:86:2F:43:BE:73:C9:58 Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft Manifest number: 96 Signing time: Tue 25 Aug 2026 07:25:26 +0000 Manifest this update: Tue 25 Aug 2026 07:25:26 +0000 Manifest next update: Tue 01 Sep 2026 07:25:26 +0000 Files and hashes: 1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: 1/42lEQSknqwiya9fnWcz2AXkIj2w2+YnLUN5c6/1PI=) 2: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=) 3: 21D4377C8C4511F19227BDCF5411F970.roa (hash: Q5nqflo0XdbDKgMTEhv81FckTDKKK7RQBGI9jc5A/cI=) 4: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 07:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Validity Not Before: Aug 25 07:25:26 2026 GMT Not After : Sep 1 07:25:26 2026 GMT Subject: CN=6a8d4366-b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:81:f6:7f:22:e3:4d:ff:41:01:a4:cc:97:67: 88:66:75:8b:a6:95:9b:2a:1f:e0:b1:84:11:05:b1: 00:63:d4:95:ee:e0:c3:54:84:7d:9a:ec:0a:2a:7a: e9:8c:67:d3:5f:32:49:59:f3:b0:74:fa:35:9d:d0: 35:75:c1:59:8d:c1:63:62:92:38:fa:3c:26:0f:a3: c6:a3:f1:61:94:cc:70:90:7b:40:75:53:ac:12:ba: ea:1f:e1:89:74:83:2c:c8:53:40:06:b6:57:15:b9: 57:f0:57:38:61:32:72:c0:e3:4d:8e:28:3a:29:94: b4:10:6c:f0:05:9a:65:e2:d8:6d:9c:46:5b:54:aa: af:29:99:31:69:83:d6:4f:0b:12:62:e0:c1:15:78: 0b:34:b2:85:07:9e:3e:41:7d:66:ce:d0:f1:98:57: 32:bd:f8:c8:a8:35:f7:eb:66:46:24:83:4f:32:66: 89:9e:d9:f9:83:33:31:d2:be:ac:df:8a:bf:81:cd: 63:a6:79:4d:b9:18:55:cf:bc:7f:84:7d:f0:08:b6: 74:65:01:0b:3d:63:31:9d:16:4c:57:e9:b4:b6:3f: 17:ce:11:ad:67:39:e4:54:bc:63:ab:71:7f:91:2a: 3c:f3:22:47:1e:36:00:34:db:97:00:ac:90:f3:66: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6D:37:35:2B:74:74:18:32:D6:1C:66:6A:86:2F:43:BE:73:C9:58 X509v3 Authority Key Identifier: keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:52:34:39:c4:81:e9:e2:db:1f:a3:3d:1a:05:28:75:55:0e: 6d:a8:8f:8e:9a:51:60:06:2c:93:64:e9:4d:73:e7:79:be:f8: e8:36:ad:5b:d3:ef:9c:5a:85:f6:9a:01:9d:a2:08:41:df:a5: 89:80:3a:0b:bb:ac:eb:76:94:27:aa:a6:a6:20:8e:44:c0:0e: 2c:ae:56:7a:2e:6e:5d:2f:d7:d0:93:d5:8b:a2:fc:cc:68:30: 80:a4:47:38:0b:c1:92:77:59:25:31:a9:64:e3:48:a9:4c:ac: f7:1b:6f:00:87:e5:f8:c6:15:6f:8e:fe:23:e4:53:d8:40:6b: fc:9e:49:71:af:26:c2:cc:46:f9:70:42:ba:f0:2e:9e:9a:93: 58:4b:65:a1:41:71:a6:d7:11:ed:95:a7:72:4e:c7:d5:3e:07: 2f:1f:47:9f:8d:fb:ef:1e:bb:27:a9:1c:23:e7:b9:a8:24:88: 34:ea:9d:07:03:fd:1f:76:da:ba:76:5e:73:6f:ab:fe:d5:96: e8:1f:8a:e7:45:dd:89:45:b6:42:11:49:00:d8:f9:1c:e6:58: 8b:96:e0:8c:9b:7a:58:4b:48:e0:e8:68:db:45:33:d3:e5:79: 1e:c8:79:3f:cd:9e:e4:92:b2:7d:6e:6f:36:8b:67:26:c8:e2: 2e:8c:15:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NjYxMTAvBgNVBAUTKDM1MDgxOTdBMTBGRUE0NkE3MTg0NjMzMTRGRUJBOTM5 NDRCNjI0OEIwHhcNMjYwODI1MDcyNTI2WhcNMjYwOTAxMDcyNTI2WjAYMRYwFAYD VQQDEw02YThkNDM2Ni1iNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14H2fyLjTf9BAaTMl2eIZnWLppWbKh/gsYQRBbEAY9SV7uDDVIR9muwKKnrp jGfTXzJJWfOwdPo1ndA1dcFZjcFjYpI4+jwmD6PGo/FhlMxwkHtAdVOsErrqH+GJ dIMsyFNABrZXFblX8Fc4YTJywONNjig6KZS0EGzwBZpl4thtnEZbVKqvKZkxaYPW TwsSYuDBFXgLNLKFB54+QX1mztDxmFcyvfjIqDX362ZGJINPMmaJntn5gzMx0r6s 34q/gc1jpnlNuRhVz7x/hH3wCLZ0ZQELPWMxnRZMV+m0tj8XzhGtZznkVLxjq3F/ kSo88yJHHjYANNuXAKyQ82abzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxtNzUr dHQYMtYcZmqGL0O+c8lYMB8GA1UdIwQYMBaAFDUIGXoQ/qRqcYRjMU/rqTlEtiSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY2Ni85OTM2MUE3Q0M5 MjkxMUYwQjIzOEYyODFDNEY5QUUwMi9OUWdaZWhELXBHcHhoR014VC11cE9VUzJK SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RZ1plaEQtcEdweGhHTXhULXVwT1VTMkpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY2Ni85OTM2MUE3Q0M5MjkxMUYwQjIzOEYyODFDNEY5QUUwMi9OUWdaZWhELXBH cHhoR014VC11cE9VUzJKSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFI0OcSB6eLbH6M9GgUodVUObaiPjppRYAYsk2TpTXPneb746DatW9PvnFqF 9poBnaIIQd+liYA6C7us63aUJ6qmpiCORMAOLK5Wei5uXS/X0JPVi6L8zGgwgKRH OAvBkndZJTGpZONIqUys9xtvAIfl+MYVb47+I+RT2EBr/J5Jca8mwsxG+XBCuvAu npqTWEtloUFxptcR7ZWnck7H1T4HLx9Hn4377x67J6kcI+e5qCSINOqdBwP9H3ba unZec2+r/tWW6B+K50XdiUW2QhFJANj5HOZYi5bgjJt6WEtI4Oho20Uz0+V5Hsh5 P82e5JKyfW5vNotnJsjiLowVDw== -----END CERTIFICATE-----Generated at Wed Aug 26 21:25:22 2026 by rpki-client