$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 7plw7G1WfxcIOzqxopdeaWF62QNbO1E7G1+gLykiqKc= Subject key identifier: C8:49:92:A4:08:0F:EF:1F:23:20:28:6D:6F:CB:BE:45:39:91:38:4A Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 034D Signing time: Wed 07 Oct 2026 01:06:20 +0000 Manifest this update: Wed 07 Oct 2026 01:06:19 +0000 Manifest next update: Wed 14 Oct 2026 01:06:19 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: WosKkXVUYylWeKSiMlj7d4bK1r3FUT5nU5aFH94/YRs=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: W2elL5IfPSqn4ywyt6yNfSULfkUCxwa6QPF7Ucquq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Oct 7 01:06:19 2026 GMT Not After : Oct 14 01:06:19 2026 GMT Subject: CN=6ac59b0c-35aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:2a:0b:a7:90:98:aa:a3:31:c3:41:05:21: cb:04:86:c0:8f:bb:c7:d2:c7:33:37:82:d0:a3:c3: 84:53:64:14:b8:47:0f:cc:d5:30:d6:95:6d:57:ef: ed:4d:c8:7d:e9:a4:c6:70:52:21:73:ac:a5:31:5c: d4:ce:b1:b2:80:e3:12:35:31:a8:aa:3d:d5:9b:a5: 27:a6:a8:b0:42:a1:52:06:66:0e:00:0d:96:58:db: 1f:c3:e3:f6:48:34:db:af:ad:81:a3:82:f4:fc:4a: ad:2d:97:68:c9:72:9f:48:8b:94:34:e6:15:29:26: 29:07:0c:4f:88:f2:25:41:ec:7c:66:6e:a6:70:0d: 6f:91:88:ea:30:f3:63:87:b2:f2:ec:a1:70:b5:e3: 90:81:ef:5f:0b:9c:f3:3e:03:55:9f:6c:9c:be:46: e8:54:eb:64:28:1a:f8:ec:2e:33:6e:4b:91:a7:e3: aa:c6:05:49:35:d8:be:9a:34:ae:95:d9:8a:a8:d5: c0:06:2c:c6:67:0d:9e:44:4d:f6:1b:a4:65:29:2f: a7:2b:fa:a1:28:c1:71:e7:72:99:22:2c:9b:ea:1a: dd:04:1b:c4:84:11:99:a1:95:9b:07:45:99:a2:66: 3e:e8:b4:5d:62:05:92:15:41:e0:d1:d5:e3:04:92: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:92:A4:08:0F:EF:1F:23:20:28:6D:6F:CB:BE:45:39:91:38:4A X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:42:4c:b6:77:df:c2:90:5d:37:71:1b:87:4b:32:ed:a2:cd: 26:b6:f7:b2:d2:6d:2d:2f:bf:86:4b:f4:e1:3c:b3:06:55:14: 1b:a3:61:b2:44:f7:1b:0d:77:d5:bc:6b:d3:15:d6:6a:3c:d3: c1:1f:c0:6f:d7:54:b2:bd:78:4d:91:30:26:d3:ab:39:e3:5c: 23:f7:be:55:b5:0d:08:de:ce:c5:f8:e3:e2:58:b8:22:e9:c3: cd:63:e1:c4:ff:d6:d9:51:de:c8:b7:f9:59:55:73:32:e0:21: 0f:8f:82:5f:8f:ab:ae:11:06:a3:79:3f:2e:37:4f:d1:23:2e: c8:70:cf:de:99:66:d6:a3:75:c7:0b:c9:d0:30:2e:5e:c3:8a: 72:f6:65:47:03:2b:ca:45:d9:27:5a:c9:5e:ba:ae:47:f5:3d: a2:cc:b4:b3:de:62:07:3c:70:4c:0c:6c:e5:70:6c:bc:ae:5a: b0:1b:3b:e2:29:1e:36:e7:5c:6f:b7:4e:80:6f:ce:de:34:19: 95:e0:15:1c:ab:fa:dd:42:97:c8:61:42:95:8e:14:17:3b:30: c7:3c:58:50:e7:9f:1d:b1:2b:20:fc:a4:9b:8b:81:b3:0a:eb: 08:98:e7:31:a5:fb:95:9e:20:f1:7b:2e:7e:d6:6c:9c:a2:90: b8:c9:3d:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYxMDA3MDEwNjE5WhcNMjYxMDE0MDEwNjE5WjAYMRYwFAYD VQQDEw02YWM1OWIwYy0zNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjgqC6eQmKqjMcNBBSHLBIbAj7vH0sczN4LQo8OEU2QUuEcPzNUw1pVtV+/t Tch96aTGcFIhc6ylMVzUzrGygOMSNTGoqj3Vm6UnpqiwQqFSBmYOAA2WWNsfw+P2 SDTbr62Bo4L0/EqtLZdoyXKfSIuUNOYVKSYpBwxPiPIlQex8Zm6mcA1vkYjqMPNj h7Ly7KFwteOQge9fC5zzPgNVn2ycvkboVOtkKBr47C4zbkuRp+OqxgVJNdi+mjSu ldmKqNXABizGZw2eRE32G6RlKS+nK/qhKMFx53KZIiyb6hrdBBvEhBGZoZWbB0WZ omY+6LRdYgWSFUHg0dXjBJLwxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhJkqQI D+8fIyAobW/LvkU5kThKMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUJMtnffwpBdN3Ebh0sy7aLNJrb3stJtLS+/hkv04TyzBlUUG6NhskT3Gw13 1bxr0xXWajzTwR/Ab9dUsr14TZEwJtOrOeNcI/e+VbUNCN7Oxfjj4li4IunDzWPh xP/W2VHeyLf5WVVzMuAhD4+CX4+rrhEGo3k/LjdP0SMuyHDP3plm1qN1xwvJ0DAu XsOKcvZlRwMrykXZJ1rJXrquR/U9osy0s95iBzxwTAxs5XBsvK5asBs74ikeNudc b7dOgG/O3jQZleAVHKv63UKXyGFClY4UFzswxzxYUOefHbErIPykm4uBswrrCJjn MaX7lZ4g8XsuftZsnKKQuMk9Dg== -----END CERTIFICATE-----Generated at Thu Oct 8 09:04:57 2026 by rpki-client