$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: 4R7TIQscr1ggtp+fst60GxvIve7Gc69sBdIaYblKtIA= Subject key identifier: 49:21:30:77:67:44:17:44:4E:F7:8B:F2:25:94:39:2E:F6:57:FA:31 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1A2A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4C28 Signing time: Tue 08 Sep 2026 15:22:59 +0000 Manifest this update: Tue 08 Sep 2026 15:22:59 +0000 Manifest next update: Tue 15 Sep 2026 15:22:59 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 5ri5Orq945RbXbxiStAoFWbCQh/zKuEPeUzcbYjRP7w=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: gEyD44KlU7kGIP6KThcKtoihoaJv7b+z5iLc4Ql5KJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 15:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6698 (0x1a2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Sep 8 15:22:59 2026 GMT Not After : Sep 15 15:22:59 2026 GMT Subject: CN=6aa02853-d834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:73:47:af:72:c1:5e:c1:b3:b0:35:bb:83: 17:48:03:ae:cb:90:a5:a8:68:b1:c9:35:7b:fe:55: b2:71:56:85:50:cb:ad:0e:b4:5a:13:da:ce:45:e5: 6a:2e:a4:3c:ce:e9:01:80:ab:87:71:7b:12:4d:dc: 76:06:1e:82:a9:85:8d:86:88:64:9b:51:fa:8a:da: dc:d0:84:92:13:3a:35:1f:47:ae:21:05:95:31:08: b6:e7:e4:4f:6f:29:14:f6:10:7d:8e:77:82:bd:31: 41:e2:32:51:4f:1a:a9:26:91:ed:e2:7b:d2:54:9b: 3c:c1:b6:92:71:7b:ae:cb:f1:2c:07:d1:0c:4d:42: 43:46:a8:32:c7:86:c1:83:56:f8:82:1d:4c:fe:7a: 32:50:aa:ac:8d:75:58:69:aa:4b:6c:a9:f6:1d:97: e3:c3:23:77:db:b5:50:5b:73:bc:2b:ce:5d:d3:20: f7:99:7d:51:26:3b:1a:87:5f:91:15:e6:e7:6e:8b: e4:f0:8f:10:3d:a7:3c:14:f9:a6:46:d3:07:20:0c: a2:33:9c:34:2a:2a:76:fb:97:43:66:a9:2b:ee:df: 11:79:13:bc:29:95:99:9d:6b:ec:53:bb:fe:e1:c6: dd:a7:a5:a8:f9:e6:ca:2f:a3:76:f9:db:b1:38:28: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:21:30:77:67:44:17:44:4E:F7:8B:F2:25:94:39:2E:F6:57:FA:31 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1e:53:ad:9a:3a:8d:a4:56:8c:26:a1:27:5c:a1:94:67:e5: 31:59:0e:7b:c9:57:f0:a8:66:4f:f0:c6:81:6b:df:7f:70:da: 4b:5c:e8:49:ca:56:27:ad:2f:e2:ef:dc:bb:dd:51:80:f1:50: 86:20:2f:b1:7d:2a:af:bd:5e:e3:e6:2a:b1:39:0b:57:69:9c: 79:aa:43:3a:03:d8:c9:9a:f1:f7:12:3e:5f:07:9b:6d:2b:72: bc:dd:78:0e:bc:f4:ed:69:f0:8e:09:93:02:15:b7:c3:2e:e8: 00:c1:cd:0f:ab:a4:23:81:8b:d3:c7:9b:c5:62:47:da:2c:a2: d9:c1:8a:0f:09:01:5f:3a:b0:c5:8a:ea:5c:23:fe:08:54:2e: 7d:0c:ac:fb:25:fd:e7:eb:0f:ca:32:4c:28:ac:4f:88:48:7e: 39:50:6b:7e:d1:96:5d:0c:78:8a:d3:58:39:c3:23:eb:c1:a5: ff:b0:62:be:e4:68:80:32:58:4f:04:1f:00:ad:5f:bc:69:1d: 7d:13:d3:cf:51:e2:6d:3a:de:d9:5c:50:3d:77:2f:3a:2f:d9: f5:d8:97:ca:15:c8:dc:fb:6c:a3:ca:fe:88:19:5b:5c:91:fc: d0:ce:cc:fa:58:ae:b6:2e:a8:d5:35:97:d2:6c:ea:3c:38:c1: 6a:d3:56:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjYwOTA4MTUyMjU5WhcNMjYwOTE1MTUyMjU5WjAYMRYwFAYD VQQDEw02YWEwMjg1My1kODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtJzR69ywV7Bs7A1u4MXSAOuy5ClqGixyTV7/lWycVaFUMutDrRaE9rOReVq LqQ8zukBgKuHcXsSTdx2Bh6CqYWNhohkm1H6itrc0ISSEzo1H0euIQWVMQi25+RP bykU9hB9jneCvTFB4jJRTxqpJpHt4nvSVJs8wbaScXuuy/EsB9EMTUJDRqgyx4bB g1b4gh1M/noyUKqsjXVYaapLbKn2HZfjwyN327VQW3O8K85d0yD3mX1RJjsah1+R Febnbovk8I8QPac8FPmmRtMHIAyiM5w0Kip2+5dDZqkr7t8ReRO8KZWZnWvsU7v+ 4cbdp6Wo+ebKL6N2+duxOCj9QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkhMHdn RBdETveL8iWUOS72V/oxMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsB5TrZo6jaRWjCahJ1yhlGflMVkOe8lX8KhmT/DGgWvff3DaS1zoScpWJ60v 4u/cu91RgPFQhiAvsX0qr71e4+YqsTkLV2mceapDOgPYyZrx9xI+XwebbStyvN14 Drz07WnwjgmTAhW3wy7oAMHND6ukI4GL08ebxWJH2iyi2cGKDwkBXzqwxYrqXCP+ CFQufQys+yX95+sPyjJMKKxPiEh+OVBrftGWXQx4itNYOcMj68Gl/7BivuRogDJY TwQfAK1fvGkdfRPTz1HibTre2VxQPXcvOi/Z9diXyhXI3Ptso8r+iBlbXJH80M7M +liuti6o1TWX0mzqPDjBatNW0g== -----END CERTIFICATE-----Generated at Wed Sep 9 09:53:20 2026 by rpki-client