$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: gnbgych7+HkPsDk/Ze3obRTav9ghX/dxXzCeeXcUQuQ= Subject key identifier: D4:0E:A3:FF:FD:B8:0B:E3:40:CE:2F:EA:33:AD:F5:2B:DF:2B:06:65 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 0285 Signing time: Fri 04 Sep 2026 16:57:20 +0000 Manifest this update: Fri 04 Sep 2026 16:57:19 +0000 Manifest next update: Fri 11 Sep 2026 16:57:19 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: DVu6QMIiswLV+A6KfNRWztBILdKVMTJOMo8I3T8ocqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Sep 4 16:57:19 2026 GMT Not After : Sep 11 16:57:19 2026 GMT Subject: CN=6a9af870-3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:8f:fc:09:d4:74:c9:7d:21:03:de:76:e2: 50:ea:78:50:9b:65:4c:2f:95:c7:98:aa:72:0d:89: df:cd:4d:f0:18:d0:37:85:6a:3a:fe:c5:7b:e3:98: 1b:f6:6f:52:53:a1:3a:b4:fb:02:fc:10:e7:bd:b5: fe:39:f3:04:63:13:c8:f3:b4:a5:b6:82:69:5a:40: 7b:ca:03:98:d3:c4:fd:c4:ef:f9:3f:1f:94:5f:a5: ce:7f:34:89:10:15:6c:2f:ce:7c:8b:40:0f:28:c6: 40:75:27:16:06:0f:7f:03:48:22:19:52:c2:ce:d0: 29:e1:0d:bd:02:73:19:29:b0:1e:c9:62:2e:0b:31: 19:77:ae:42:88:c9:37:fd:41:78:45:9f:e3:1c:4b: e9:44:2b:61:35:f8:81:98:9d:22:e8:2d:1e:8c:3d: 07:24:2c:ad:b0:d9:a9:d7:3b:c4:ff:05:64:c6:2b: a4:39:e8:12:0a:94:cd:d5:bc:d2:c8:62:fb:5d:a6: 6f:dc:aa:64:e2:b8:2d:0f:a4:57:76:f8:c9:cd:fc: 31:8a:58:13:07:9f:92:09:03:9e:08:d0:e2:a4:50: b1:6a:22:de:42:1d:e3:d8:1f:d8:f8:c0:40:c7:ce: f4:1c:89:e5:73:3c:82:b3:83:0e:96:49:dc:09:44: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:A3:FF:FD:B8:0B:E3:40:CE:2F:EA:33:AD:F5:2B:DF:2B:06:65 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:9b:2f:f9:b1:66:a6:66:71:c3:ba:a3:17:07:db:0e:01: 3c:7f:e8:3d:09:1b:16:ab:e3:ae:41:37:f5:31:8e:af:cb:ba: 03:bf:f9:3f:d8:88:e0:25:9f:48:2b:5a:f2:2c:dc:b5:10:4f: 2e:d9:1b:8c:17:1c:f9:44:1d:90:cc:66:51:81:c1:e8:66:03: ed:55:3c:c9:98:36:13:10:79:45:49:63:ca:a6:39:bd:d6:55: 9a:fc:11:14:28:32:83:b9:97:0c:38:af:ab:92:8b:1e:be:1f: 74:cd:57:f5:f0:83:fb:eb:f5:03:8f:b6:87:18:40:f2:d3:1a: 84:b2:57:39:c3:a6:e5:4e:92:a1:a9:bf:6a:a2:14:11:05:b7: 2e:fd:1b:25:b8:b6:ba:ab:1f:b9:6f:65:d5:01:00:1f:68:60: f8:9d:23:95:ea:b2:3c:cf:4b:25:54:65:cd:cc:04:b4:54:2d: ad:4f:4f:50:34:de:1a:ea:de:e1:f3:28:fd:1d:59:8d:89:4f: cf:d8:27:55:c9:7c:12:7d:ad:f3:97:d6:c5:77:e1:59:7e:7f: 6c:cf:9b:1e:77:cd:c0:1d:89:2b:3f:b1:c8:03:6e:59:6e:33: 6e:4d:e6:18:4b:1e:8c:21:8f:79:1b:32:7b:86:56:97:54:83: bd:20:d0:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjYwOTA0MTY1NzE5WhcNMjYwOTExMTY1NzE5WjAYMRYwFAYD VQQDEw02YTlhZjg3MC0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJWP/AnUdMl9IQPeduJQ6nhQm2VML5XHmKpyDYnfzU3wGNA3hWo6/sV745gb 9m9SU6E6tPsC/BDnvbX+OfMEYxPI87SltoJpWkB7ygOY08T9xO/5Px+UX6XOfzSJ EBVsL858i0APKMZAdScWBg9/A0giGVLCztAp4Q29AnMZKbAeyWIuCzEZd65CiMk3 /UF4RZ/jHEvpRCthNfiBmJ0i6C0ejD0HJCytsNmp1zvE/wVkxiukOegSCpTN1bzS yGL7XaZv3Kpk4rgtD6RXdvjJzfwxilgTB5+SCQOeCNDipFCxaiLeQh3j2B/Y+MBA x870HInlczyCs4MOlkncCUT+ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQOo//9 uAvjQM4v6jOt9SvfKwZlMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVyebL/mxZqZmccO6oxcH2w4BPH/oPQkbFqvjrkE39TGOr8u6A7/5P9iI4CWf SCta8izctRBPLtkbjBcc+UQdkMxmUYHB6GYD7VU8yZg2ExB5RUljyqY5vdZVmvwR FCgyg7mXDDivq5KLHr4fdM1X9fCD++v1A4+2hxhA8tMahLJXOcOm5U6Soam/aqIU EQW3Lv0bJbi2uqsfuW9l1QEAH2hg+J0jleqyPM9LJVRlzcwEtFQtrU9PUDTeGure 4fMo/R1ZjYlPz9gnVcl8En2t85fWxXfhWX5/bM+bHnfNwB2JKz+xyANuWW4zbk3m GEsejCGPeRsye4ZWl1SDvSDQWg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:40:14 2026 by rpki-client