$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: TdMI/9Tns2cyPvefuP1p96BtGR2Z6Zv8d2Xr21nbuco= Subject key identifier: CF:69:BA:42:F2:E5:B9:6C:2E:02:E6:CB:2E:80:8F:62:79:EA:78:25 Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 39 Signing time: Wed 21 Oct 2026 09:09:27 +0000 Manifest this update: Wed 21 Oct 2026 09:09:27 +0000 Manifest next update: Wed 28 Oct 2026 09:09:27 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: O/4W8fasVTc6/Eb9I/YMOqEb4QYioa2e/KHX8dlccrM=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 09:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Oct 21 09:09:27 2026 GMT Not After : Oct 28 09:09:27 2026 GMT Subject: CN=6ad88147-a364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:9b:1e:9e:45:9a:94:d1:55:db:5d:1f:63: 7b:71:d1:c3:53:d7:4b:c1:0b:f2:0c:67:95:88:6d: 0a:a5:89:ba:fa:f5:86:18:e6:e6:c7:e1:8e:bd:1c: 50:0d:42:5f:27:4d:78:b7:af:72:8d:98:4a:16:f6: 96:f1:7a:97:31:f1:2a:e9:01:06:7e:84:b4:af:ab: a1:6e:17:c2:b4:e1:95:08:5c:e5:c7:0f:e6:83:69: 59:d7:0e:d3:91:fd:f9:a2:19:e3:14:39:21:ca:90: b6:2d:76:ac:96:5e:ed:3a:6e:d2:86:95:04:c8:83: d5:b4:f9:f0:ad:25:8c:d1:e9:1e:08:f5:dc:82:34: 86:e4:aa:15:0b:c7:2b:77:7a:c1:c9:76:6d:65:19: af:d0:76:45:d0:93:83:ad:d9:1d:b8:b2:3d:95:ed: ba:c7:a2:19:45:fa:d7:3f:28:c1:7c:f2:54:0b:7e: bd:b3:2b:15:6a:54:05:59:d3:a4:93:7d:db:cb:9b: 6e:92:e9:42:58:87:d9:07:5b:dc:e3:4e:c1:38:39: de:a8:eb:d8:55:40:7d:1b:f9:4f:d4:cb:c1:1e:56: 01:a2:2f:a6:1e:bf:e8:e9:ff:f5:ff:85:96:d7:db: 72:74:74:8f:d0:a5:e5:c8:9a:ca:6e:c0:40:5a:a2: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:69:BA:42:F2:E5:B9:6C:2E:02:E6:CB:2E:80:8F:62:79:EA:78:25 X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:2a:53:74:b9:83:e2:14:13:6f:8a:11:c5:ce:27:a5:57: 1c:71:99:78:2f:3f:7e:58:81:98:c1:ab:9d:5f:70:b3:2f:d6: d7:5c:73:00:82:2c:fc:77:40:b1:6d:13:5c:b3:53:63:6b:99: ce:0c:32:4f:6a:c5:cf:72:86:1e:b9:22:bb:cc:90:c9:9f:4a: af:48:75:df:78:4c:16:8e:69:57:40:01:75:1d:7e:5d:b3:ed: 7e:42:18:b5:c6:36:9d:af:2d:e5:65:74:06:5b:57:8d:78:68: 2e:8d:fc:5f:e2:9b:80:b3:6c:b0:7f:47:5f:0d:00:f9:d2:b1: c9:40:9f:05:d6:3b:b7:82:bf:60:98:06:34:8a:0c:97:3a:9b: e2:31:de:aa:4e:19:23:de:4c:6c:5b:aa:8c:0c:60:5d:70:a1: 90:0a:3a:30:6e:87:aa:cb:0d:22:48:ad:1d:77:c3:fd:1e:e2: 8d:18:80:d4:c3:ca:6f:51:d9:17:d8:35:da:30:2c:ae:8b:2a: b7:9c:53:3e:77:07:ad:bd:1f:f6:3d:6c:b4:28:25:99:1c:59: f7:91:91:dc:3d:74:8d:90:63:f5:47:38:19:24:ec:29:d0:de: 23:12:6f:09:9e:48:14:a3:4e:a5:fb:80:53:2b:a8:4a:44:d8: f1:07:fb:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjEwMjEwOTA5MjdaFw0yNjEwMjgwOTA5MjdaMBgxFjAUBgNV BAMTDTZhZDg4MTQ3LWEzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuZ5senkWalNFV210fY3tx0cNT10vBC/IMZ5WIbQqlibr69YYY5ubH4Y69HFAN Ql8nTXi3r3KNmEoW9pbxepcx8SrpAQZ+hLSvq6FuF8K04ZUIXOXHD+aDaVnXDtOR /fmiGeMUOSHKkLYtdqyWXu06btKGlQTIg9W0+fCtJYzR6R4I9dyCNIbkqhULxyt3 esHJdm1lGa/QdkXQk4Ot2R24sj2V7brHohlF+tc/KMF88lQLfr2zKxVqVAVZ06ST fdvLm26S6UJYh9kHW9zjTsE4Od6o69hVQH0b+U/Uy8EeVgGiL6Yev+jp//X/hZbX 23J0dI/QpeXImspuwEBaoikNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz2m6QvLl uWwuAubLLoCPYnnqeCUwHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRSSpTdLmD4hQTb4oRxc4npVcccZl4Lz9+WIGYwaudX3CzL9bXXHMAgiz8d0Cx bRNcs1Nja5nODDJPasXPcoYeuSK7zJDJn0qvSHXfeEwWjmlXQAF1HX5ds+1+Qhi1 xjadry3lZXQGW1eNeGgujfxf4puAs2ywf0dfDQD50rHJQJ8F1ju3gr9gmAY0igyX OpviMd6qThkj3kxsW6qMDGBdcKGQCjowboeqyw0iSK0dd8P9HuKNGIDUw8pvUdkX 2DXaMCyuiyq3nFM+dwetvR/2PWy0KCWZHFn3kZHcPXSNkGP1RzgZJOwp0N4jEm8J nkgUo06l+4BTK6hKRNjxB/sl -----END CERTIFICATE-----Generated at Fri Oct 23 11:24:06 2026 by rpki-client