$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: 4+JKTOhLIkFjk2Bjq6mY39x/nW06/djKfO57Px2A+YA= Subject key identifier: AC:E7:DF:39:54:69:08:05:00:3D:A6:B3:7A:F7:51:3F:ED:A8:1E:8E Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 028D Signing time: Mon 05 Oct 2026 02:07:32 +0000 Manifest this update: Mon 05 Oct 2026 02:07:32 +0000 Manifest next update: Mon 12 Oct 2026 02:07:32 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: njq28HjBCD4A60mo5T5IR4/UponB8MqmfcBn0UMc7nI=) 2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: JQxpDjqWc8ui35z89oOOUAIJ1KA8AcGds/aW6/ghpkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Oct 5 02:07:32 2026 GMT Not After : Oct 12 02:07:32 2026 GMT Subject: CN=6ac30664-fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:7c:b9:cc:53:af:b1:e3:f6:fe:c5:c9:9a: 4f:87:d4:44:5d:60:c2:cb:77:b1:de:45:45:6b:d1: 85:2e:df:fb:c4:53:70:9a:8f:0d:33:ee:45:f0:11: d6:db:f6:d5:89:6d:9d:1e:f2:76:ac:54:d7:36:21: 1f:a8:5e:00:d6:be:bf:40:9d:b5:49:bd:5e:40:1c: 97:16:67:4e:a6:f1:17:2a:33:e4:62:11:f7:8c:f9: f7:37:05:8c:d9:70:72:de:c6:87:f5:49:4d:9e:54: 97:a3:80:08:4a:00:74:38:de:c5:54:1a:d1:9d:b6: 5d:58:d0:06:2b:ba:75:aa:9f:20:cb:51:71:9e:a6: e1:49:cc:24:89:4e:fd:9e:86:7e:87:b9:be:fe:00: f8:8e:08:34:3e:96:60:e8:f3:89:42:1e:91:97:74: 35:ed:2e:7e:8a:21:a4:54:03:bf:ae:d9:b7:eb:da: a5:3e:5e:01:4c:e9:2e:8d:bb:c9:54:17:83:f3:30: d5:24:4e:3c:ec:58:cf:fd:7e:fc:3b:d5:0d:24:32: c7:d3:8a:7f:e9:bc:f9:3a:b6:8c:0d:6d:1e:57:d9: fe:b3:6b:33:1c:45:d4:ae:21:10:d6:57:ec:8d:24: ef:38:76:60:cd:4f:9b:a5:df:0f:76:8a:e2:34:b5: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:DF:39:54:69:08:05:00:3D:A6:B3:7A:F7:51:3F:ED:A8:1E:8E X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:08:0b:a0:bc:c7:0a:cf:a8:f8:e0:50:3a:ea:81:03:06:00: 74:eb:8c:70:e0:df:29:10:83:4a:6b:ab:59:50:42:a7:b3:41: c4:cc:e5:01:9c:c5:28:8f:b7:9d:8c:47:43:d7:49:d8:d0:74: 89:fd:c5:81:27:3e:de:f4:5e:b8:5a:d8:c1:88:cb:9d:c8:52: 3f:74:8e:81:ec:ab:11:c8:b3:19:b5:3a:06:9e:a1:ac:bb:cf: 3c:c3:d4:11:3b:7c:6f:9a:e5:2f:cd:26:08:8d:54:93:8b:03: df:19:46:48:23:8e:0c:5c:80:be:fb:44:6a:2d:50:28:9e:18: 22:38:4d:e5:a7:4f:b3:6e:92:17:d8:d0:ee:ed:6f:e9:bf:db: 78:21:3a:b2:4d:c9:22:12:99:77:8f:cc:94:85:e5:a3:28:a3: 92:6d:5c:8b:2c:a9:b6:9a:1f:86:bc:2a:dd:aa:29:90:1d:bd: d4:98:29:6b:0b:9c:e4:b4:b6:04:1f:4b:cf:54:aa:16:90:fc: cf:d7:4f:c4:d2:bb:a5:65:0a:c4:54:b4:9f:73:30:7e:09:e4: 71:f6:fd:8e:46:88:eb:1e:74:fb:c0:83:48:ea:65:6e:94:74: 85:18:bf:cc:2b:fc:c2:27:c9:d7:9a:87:fd:30:e9:f4:ac:a9: c1:34:b1:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjYxMDA1MDIwNzMyWhcNMjYxMDEyMDIwNzMyWjAYMRYwFAYD VQQDEw02YWMzMDY2NC1mYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwV8ucxTr7Hj9v7FyZpPh9REXWDCy3ex3kVFa9GFLt/7xFNwmo8NM+5F8BHW 2/bViW2dHvJ2rFTXNiEfqF4A1r6/QJ21Sb1eQByXFmdOpvEXKjPkYhH3jPn3NwWM 2XBy3saH9UlNnlSXo4AISgB0ON7FVBrRnbZdWNAGK7p1qp8gy1FxnqbhScwkiU79 noZ+h7m+/gD4jgg0PpZg6POJQh6Rl3Q17S5+iiGkVAO/rtm369qlPl4BTOkujbvJ VBeD8zDVJE487FjP/X78O9UNJDLH04p/6bz5OraMDW0eV9n+s2szHEXUriEQ1lfs jSTvOHZgzU+bpd8PdoriNLXStwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzn3zlU aQgFAD2ms3r3UT/tqB6OMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWggLoLzHCs+o+OBQOuqBAwYAdOuMcODfKRCDSmurWVBCp7NBxMzlAZzFKI+3 nYxHQ9dJ2NB0if3FgSc+3vReuFrYwYjLnchSP3SOgeyrEcizGbU6Bp6hrLvPPMPU ETt8b5rlL80mCI1Uk4sD3xlGSCOODFyAvvtEai1QKJ4YIjhN5adPs26SF9jQ7u1v 6b/beCE6sk3JIhKZd4/MlIXloyijkm1ciyyptpofhrwq3aopkB291Jgpawuc5LS2 BB9Lz1SqFpD8z9dPxNK7pWUKxFS0n3Mwfgnkcfb9jkaI6x50+8CDSOplbpR0hRi/ zCv8wifJ15qH/TDp9KypwTSxMQ== -----END CERTIFICATE-----Generated at Tue Oct 6 20:32:13 2026 by rpki-client