$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json) Hash identifier: cpkLhf5SU4Pk94IabOFVnp7EkVyw+XgB/huTLfKYsjE= Subject key identifier: C0:FD:6B:0B:D9:78:4B:A5:8C:0A:0D:B4:5A:DA:F1:37:AA:A7:1A:18 Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft Manifest number: 48 Signing time: Fri 11 Sep 2026 08:27:11 +0000 Manifest this update: Fri 11 Sep 2026 08:27:10 +0000 Manifest next update: Fri 18 Sep 2026 08:27:10 +0000 Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: kqmsgmEb+jIOemToXEjbyee5/WQIGqeJHvr704nKPUs=) 2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Validity Not Before: Sep 11 08:27:10 2026 GMT Not After : Sep 18 08:27:10 2026 GMT Subject: CN=6aa3bb5f-4a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:55:0f:bf:2a:41:80:06:9e:82:b8:fd:69: 19:da:ac:1a:d7:0b:f9:c4:79:be:a5:87:b1:98:75: 50:2f:8b:98:4a:ec:23:46:f3:3f:e0:49:cd:35:a3: 6f:dd:41:4f:37:29:ee:6a:54:96:25:f4:73:fb:67: 9c:65:eb:28:14:a1:a3:11:27:97:82:6f:41:13:f7: a9:4a:64:81:57:d2:07:cc:de:f8:9b:71:57:d4:da: c8:1b:aa:f6:42:56:5a:e7:05:85:25:60:90:bb:d4: fd:b5:cc:6f:a8:e3:49:15:e7:20:01:22:eb:20:e9: 36:85:dd:98:01:6d:19:4e:fb:30:59:c1:4f:f3:17: 86:dc:74:c3:66:22:9b:c0:af:ba:a2:f9:28:85:9c: 23:fb:05:32:ec:03:0b:22:cb:f9:28:ac:b6:d6:81: f5:71:5d:3f:2d:f7:30:eb:46:bb:92:90:48:23:69: f2:0c:de:8e:ba:42:8f:4d:fe:c0:03:c2:37:0f:67: 9f:25:d7:f5:87:49:82:13:9f:d1:b9:d0:83:ff:13: 7a:88:ec:61:b2:a1:98:46:e2:76:ba:fc:4d:69:ec: 86:0a:37:92:96:c3:7b:49:db:b4:2b:3e:55:93:67: 49:cc:f4:97:fc:55:a1:a7:fb:cd:0e:c7:84:0a:ab: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:6B:0B:D9:78:4B:A5:8C:0A:0D:B4:5A:DA:F1:37:AA:A7:1A:18 X509v3 Authority Key Identifier: keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8a:ec:46:43:1f:be:cc:f7:0f:c0:9f:20:03:7d:a2:41:66: 45:ed:7f:65:c1:b9:ea:19:a5:01:a0:75:b2:94:08:69:39:e8: a0:ec:56:54:81:9a:00:91:22:00:85:97:b3:0d:44:0d:12:6c: 16:f9:07:f8:87:34:b3:81:b3:9a:49:45:5e:e4:e7:10:5b:04: 48:5a:e4:2a:03:cc:17:e6:c2:f0:ba:fe:21:ff:10:d9:1c:8d: 90:e5:2f:45:49:2f:31:f2:5e:2e:cd:b5:b1:c2:b9:73:ab:bf: f3:86:6e:2c:fd:0d:71:41:76:b3:79:df:1b:99:6e:41:66:88: 83:59:bb:1e:36:cd:5d:47:dd:d2:ad:46:d7:a2:22:b1:7d:9e: 6a:bf:a1:0f:40:a9:ef:e0:98:b2:3e:1c:78:cd:49:ad:b2:78: 99:2d:a0:4f:b3:ad:e9:3e:42:e0:8d:f8:5f:c4:83:e9:69:6a: c7:de:a0:e3:a7:0a:ea:ce:cd:f4:67:d9:ca:64:25:dd:04:49: 23:45:17:9e:a3:20:30:22:6c:f1:00:5e:28:1a:a7:59:82:3b: a1:7d:f3:9f:32:50:bc:5f:80:9f:a7:de:84:f7:76:4a:8b:a7: 98:e4:13:89:49:16:1c:04:25:c9:e5:f1:9e:d2:31:03:f6:b3: 34:9a:01:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoMzU3NjREOTQyMDdENDREODlBNzA1NTdDNjZEMkEyRUYz RDFDNTQ4MDAeFw0yNjA5MTEwODI3MTBaFw0yNjA5MTgwODI3MTBaMBgxFjAUBgNV BAMTDTZhYTNiYjVmLTRhMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYG1UPvypBgAaegrj9aRnarBrXC/nEeb6lh7GYdVAvi5hK7CNG8z/gSc01o2/d QU83Ke5qVJYl9HP7Z5xl6ygUoaMRJ5eCb0ET96lKZIFX0gfM3vibcVfU2sgbqvZC VlrnBYUlYJC71P21zG+o40kV5yABIusg6TaF3ZgBbRlO+zBZwU/zF4bcdMNmIpvA r7qi+SiFnCP7BTLsAwsiy/korLbWgfVxXT8t9zDrRruSkEgjafIM3o66Qo9N/sAD wjcPZ58l1/WHSYITn9G50IP/E3qI7GGyoZhG4na6/E1p7IYKN5KWw3tJ27QrPlWT Z0nM9Jf8VaGn+80Ox4QKq+0fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwP1rC9l4 S6WMCg20WtrxN6qnGhgwHwYDVR0jBBgwFoAUNXZNlCB9RNiacFV8ZtKi7z0cVIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzg4QTNCNEJBM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5pYWNGVjhadEtpN3owY1ZJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlhaTmxDQjlSTmlhY0ZWOFp0S2k3ejBjVklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzg4QTNCNEJBM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5p YWNGVjhadEtpN3owY1ZJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbiuxGQx++zPcPwJ8gA32iQWZF7X9lwbnqGaUBoHWylAhpOeig7FZUgZoAkSIA hZezDUQNEmwW+Qf4hzSzgbOaSUVe5OcQWwRIWuQqA8wX5sLwuv4h/xDZHI2Q5S9F SS8x8l4uzbWxwrlzq7/zhm4s/Q1xQXazed8bmW5BZoiDWbseNs1dR93SrUbXoiKx fZ5qv6EPQKnv4JiyPhx4zUmtsniZLaBPs63pPkLgjfhfxIPpaWrH3qDjpwrqzs30 Z9nKZCXdBEkjRReeoyAwImzxAF4oGqdZgjuhffOfMlC8X4Cfp96E93ZKi6eY5BOJ SRYcBCXJ5fGe0jED9rM0mgEW -----END CERTIFICATE-----Generated at Fri Sep 11 18:37:34 2026 by rpki-client