$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: Q3u36ify1TRFUs5XCocpw0kGb7l0zVpvDV0cr+PzqvM= Subject key identifier: 81:91:24:47:05:62:CB:AB:85:11:C7:FB:94:74:71:DE:3D:36:35:71 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 0277 Signing time: Tue 01 Sep 2026 02:02:05 +0000 Manifest this update: Tue 01 Sep 2026 02:02:05 +0000 Manifest next update: Tue 08 Sep 2026 02:02:05 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: WvbcCZ3nHiXVLhhXOmEdoxuEFZ+zzVTLtwvfqmzxFd0=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 01:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Sep 1 02:02:05 2026 GMT Not After : Sep 8 02:02:05 2026 GMT Subject: CN=6a96321d-dc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:5e:79:65:3d:4a:4b:ff:f7:9c:3a:f2:f2: e1:ef:bb:52:83:d1:04:1e:97:0e:ad:b6:fe:a4:15: 88:10:ac:7f:86:ff:66:97:7d:6f:77:d5:75:e6:a0: f3:27:69:47:74:ea:b9:64:3d:6e:da:62:a0:3d:b6: dc:ef:cb:6f:fa:80:f1:16:c3:ff:70:50:6e:45:b3: 22:e9:a7:c5:35:13:99:dc:d3:ce:f7:f5:bb:e9:90: fc:7a:7f:2f:a5:cc:6c:88:ca:65:ee:59:b0:62:cc: d6:c0:50:ac:83:ae:7f:de:05:82:95:6b:ba:da:95: bb:5f:c2:9a:d4:c8:ff:23:73:e4:cc:a4:94:b9:e0: c5:b7:79:f3:47:be:9d:ab:5a:dc:d1:9b:5d:00:8f: 2f:ec:eb:80:8f:e3:12:9b:2d:b8:5c:35:40:00:92: 24:9c:49:e0:0c:fe:4e:2a:d4:c3:af:cd:db:8d:5a: 47:f5:48:b1:5a:0e:a0:f5:cd:54:8c:18:96:54:ff: 29:bb:b7:ac:72:81:b0:c9:f3:00:ef:a2:94:ec:8e: 12:97:1e:41:ff:2d:eb:e9:d5:0e:79:5f:ac:65:c8: cf:1d:a2:2f:73:a4:1a:2f:71:ea:5b:19:0f:10:89: 56:37:20:2c:49:c2:e8:1c:c8:46:bf:83:e8:f1:f2: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:24:47:05:62:CB:AB:85:11:C7:FB:94:74:71:DE:3D:36:35:71 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:1e:34:57:a0:f3:e6:2d:58:60:99:34:9f:63:8d:c7:12: 31:d5:82:d0:0c:5c:07:1c:40:c2:bc:6f:7c:73:5b:b8:d7:1e: e8:04:a3:8c:94:f3:29:47:20:e0:80:76:b4:14:bf:6d:b7:5b: d9:d3:0f:60:58:17:0f:4d:45:cd:cf:22:0c:30:59:9a:76:5e: e7:b0:43:8d:76:35:a3:80:3e:5f:47:8a:0b:2b:46:c0:9a:ff: 34:64:de:02:41:22:c7:c0:0f:43:bf:dd:3a:ea:fd:a6:3d:e9: e2:f2:63:5c:35:31:1e:7f:5c:1c:17:a7:aa:90:c9:39:b6:b0: a3:9c:53:c9:bf:d3:9a:d6:0d:ce:af:0a:5e:26:02:ad:99:fd: cd:f3:fb:76:26:b2:d2:d6:7a:1c:bd:8b:8c:82:80:d6:96:5c: 4d:35:af:dd:25:56:14:fd:dc:d7:9e:67:59:d8:7c:ee:8e:0d: b6:8c:36:32:8f:df:83:40:ec:9e:b4:cb:ea:ae:fd:95:80:9a: ec:3d:a5:df:c8:4b:00:27:79:70:39:b1:42:86:4d:18:f4:28: 25:3b:30:0a:e3:16:3f:fe:01:b4:db:37:7c:39:bc:4e:e3:40: 2e:ee:a4:c6:a8:6a:c6:51:67:83:9e:4b:35:1f:39:4c:96:41: f1:df:35:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjYwOTAxMDIwMjA1WhcNMjYwOTA4MDIwMjA1WjAYMRYwFAYD VQQDEw02YTk2MzIxZC1kYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi9eeWU9Skv/95w68vLh77tSg9EEHpcOrbb+pBWIEKx/hv9ml31vd9V15qDz J2lHdOq5ZD1u2mKgPbbc78tv+oDxFsP/cFBuRbMi6afFNROZ3NPO9/W76ZD8en8v pcxsiMpl7lmwYszWwFCsg65/3gWClWu62pW7X8Ka1Mj/I3PkzKSUueDFt3nzR76d q1rc0ZtdAI8v7OuAj+MSmy24XDVAAJIknEngDP5OKtTDr83bjVpH9UixWg6g9c1U jBiWVP8pu7escoGwyfMA76KU7I4Slx5B/y3r6dUOeV+sZcjPHaIvc6QaL3HqWxkP EIlWNyAsScLoHMhGv4Po8fJGMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGRJEcF YsurhRHH+5R0cd49NjVxMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIpQeNFeg8+YtWGCZNJ9jjccSMdWC0AxcBxxAwrxvfHNbuNce6ASjjJTzKUcg 4IB2tBS/bbdb2dMPYFgXD01Fzc8iDDBZmnZe57BDjXY1o4A+X0eKCytGwJr/NGTe AkEix8APQ7/dOur9pj3p4vJjXDUxHn9cHBenqpDJObawo5xTyb/TmtYNzq8KXiYC rZn9zfP7diay0tZ6HL2LjIKA1pZcTTWv3SVWFP3c155nWdh87o4Ntow2Mo/fg0Ds nrTL6q79lYCa7D2l38hLACd5cDmxQoZNGPQoJTswCuMWP/4BtNs3fDm8TuNALu6k xqhqxlFng55LNR85TJZB8d81Hw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:17 2026 by rpki-client