$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: fDlwgOH/zQuMREKNqZ1N49IAPmLM2MA24dSe5Goi8f4= Subject key identifier: EB:2E:90:57:36:8B:9A:DA:0C:A9:7B:46:53:BF:FB:17:BE:93:6C:85 Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 3A Signing time: Fri 23 Oct 2026 09:07:58 +0000 Manifest this update: Fri 23 Oct 2026 09:07:58 +0000 Manifest next update: Fri 30 Oct 2026 09:07:58 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: sOspToZAdKbV/NWljFde/7O8TLH2vDjvNwy6saTqiWs=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Oct 23 09:07:58 2026 GMT Not After : Oct 30 09:07:58 2026 GMT Subject: CN=6adb23ee-4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:e0:a0:a2:27:9a:45:8c:24:bc:53:0c:1d: 35:7c:3f:f3:95:cf:64:ca:32:f6:a6:e2:e9:eb:0c: 9c:fa:29:2a:27:a8:e6:d5:cd:07:c4:c7:6d:31:c0: ae:99:f4:4c:a4:f9:21:12:43:fc:f4:38:ed:b0:3f: 6e:c9:e1:ea:4c:1d:8f:65:4d:94:08:dd:50:d2:a4: ce:69:0a:2d:f3:f8:44:fd:03:c9:c5:8f:dd:c6:0a: af:ab:20:b1:4c:1b:10:91:e3:65:7b:ab:c3:6f:7f: c5:95:38:ba:97:32:bd:e0:6c:ac:29:4c:c2:83:76: 93:02:b5:88:e3:3e:75:40:e4:dc:ea:96:04:4a:a9: 49:f2:83:b9:3e:5e:78:22:91:42:cd:59:57:eb:a6: 64:f7:68:fe:db:4a:11:79:48:38:78:b9:5b:1e:6e: 08:1b:59:82:9f:6e:d4:28:1f:45:d8:42:a3:28:24: 18:f6:07:d7:76:02:db:e7:d7:ac:84:92:89:a4:fb: 42:ed:69:15:92:29:70:67:6c:a8:4c:f9:d0:8a:8c: 9f:df:41:46:43:2f:b1:d7:68:1e:db:9f:b4:16:91: 2a:f6:00:99:07:0c:c4:6a:8a:9e:c3:f8:9c:3a:67: ac:8e:55:ce:a8:8f:2a:e3:96:78:6f:c1:74:15:63: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:90:57:36:8B:9A:DA:0C:A9:7B:46:53:BF:FB:17:BE:93:6C:85 X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f5:4a:41:46:87:fb:d2:c8:d0:cc:2b:94:7a:ac:73:7d:2c: f1:ab:84:2e:7a:54:b5:bf:50:86:2d:64:eb:29:18:20:4c:c4: 73:a1:f4:ab:44:9d:05:33:86:0e:b7:fa:27:0d:7e:9d:5e:3d: 14:1c:dd:48:49:91:40:13:74:d6:d1:6c:d2:21:b7:53:23:44: f8:06:99:71:b9:b3:69:c9:7a:d1:ba:8e:c5:4f:44:59:9f:aa: 96:80:e9:d2:9c:71:62:e6:5b:8a:dd:f9:3b:e1:9d:51:93:8f: ee:9b:79:55:93:f1:4a:6b:63:d6:21:9a:bc:b0:c8:f0:53:f2: 32:fe:37:e2:cd:0a:af:10:23:73:a2:b4:2f:53:77:ea:ef:bd: 99:cd:70:6c:92:e0:c8:b7:18:30:35:3e:2f:39:03:32:d8:d5: 2d:1b:a5:2d:c3:99:90:76:84:b2:c3:5c:8a:ca:70:c5:2e:df: b9:06:e7:f4:9d:ae:29:12:1a:0f:9f:3a:70:0d:6e:d5:09:eb: 45:c9:55:b7:89:14:30:13:81:7c:7e:48:54:84:b5:02:f0:73: 23:a1:3a:df:b7:e4:31:65:9d:56:d5:6d:56:27:4c:43:47:3f: 47:95:fd:d2:a6:6e:b0:31:b5:ed:3b:f9:bf:7d:a4:2b:d5:44: c5:f8:47:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjEwMjMwOTA3NThaFw0yNjEwMzAwOTA3NThaMBgxFjAUBgNV BAMTDTZhZGIyM2VlLTRmZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8ruCgoieaRYwkvFMMHTV8P/OVz2TKMvam4unrDJz6KSonqObVzQfEx20xwK6Z 9Eyk+SESQ/z0OO2wP27J4epMHY9lTZQI3VDSpM5pCi3z+ET9A8nFj93GCq+rILFM GxCR42V7q8Nvf8WVOLqXMr3gbKwpTMKDdpMCtYjjPnVA5NzqlgRKqUnyg7k+Xngi kULNWVfrpmT3aP7bShF5SDh4uVsebggbWYKfbtQoH0XYQqMoJBj2B9d2Atvn16yE komk+0LtaRWSKXBnbKhM+dCKjJ/fQUZDL7HXaB7bn7QWkSr2AJkHDMRqip7D+Jw6 Z6yOVc6ojyrjlnhvwXQVY4wfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6y6QVzaL mtoMqXtGU7/7F76TbIUwHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBn9UpBRof70sjQzCuUeqxzfSzxq4QuelS1v1CGLWTrKRggTMRzofSrRJ0FM4YO t/onDX6dXj0UHN1ISZFAE3TW0WzSIbdTI0T4BplxubNpyXrRuo7FT0RZn6qWgOnS nHFi5luK3fk74Z1Rk4/um3lVk/FKa2PWIZq8sMjwU/Iy/jfizQqvECNzorQvU3fq 772ZzXBskuDItxgwNT4vOQMy2NUtG6Utw5mQdoSyw1yKynDFLt+5Buf0na4pEhoP nzpwDW7VCetFyVW3iRQwE4F8fkhUhLUC8HMjoTrft+QxZZ1W1W1WJ0xDRz9Hlf3S pm6wMbXtO/m/faQr1UTF+EdK -----END CERTIFICATE-----Generated at Sat Oct 24 09:39:29 2026 by rpki-client