$ rpki-client -vvvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft File: 0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json) Hash identifier: ZaVltuQkiQ107FV5nkzTUiuhs7sy/xgi0AIrvgcysxs= Subject key identifier: 80:87:B3:7B:52:10:DE:87:AE:BE:0D:65:3F:36:F1:57:AA:CB:E3:6A Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft Manifest number: 0950 Signing time: Fri 04 Sep 2026 20:05:56 +0000 Manifest this update: Fri 04 Sep 2026 20:05:55 +0000 Manifest next update: Fri 11 Sep 2026 20:05:55 +0000 Files and hashes: 1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: vAFdQAetRjDxg1/302QfkDQOZOpyFXZKKR5aVVikVuE=) 2: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=) 3: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=) 4: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=) 5: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Sep 4 20:05:55 2026 GMT Not After : Sep 11 20:05:55 2026 GMT Subject: CN=6a9b24a4-8070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:f3:13:57:d2:99:c3:89:51:fe:53:18:4c: 6a:83:86:3a:84:82:e5:66:a0:49:26:10:a6:0e:02: f2:94:a5:0a:65:5d:98:5b:d8:82:c4:06:63:51:34: bf:5d:55:97:f7:78:7f:ed:ae:7e:18:6f:01:8a:fd: d3:30:db:f5:df:d0:06:b7:d8:19:4c:f5:14:b0:59: 03:0d:fa:a2:aa:12:f7:d3:0f:73:4a:51:27:1d:39: 89:c9:8f:16:09:84:47:90:44:a8:af:0b:4f:08:d6: df:94:f0:4c:50:9c:81:26:a9:30:fb:75:ca:60:fb: 66:45:e6:69:7e:1c:57:01:ab:a2:1c:1f:9f:c6:af: b9:bf:56:c3:8f:5f:58:c7:53:13:c2:f9:98:76:42: 02:b6:b3:b5:14:26:4f:c8:1b:b5:54:2e:d9:1b:7a: 8c:95:85:f0:12:f5:83:eb:d8:bf:7c:fb:5f:f6:fd: ea:fe:96:ba:6f:b7:c4:23:ae:c6:17:fd:5d:c7:33: 1d:3e:76:fb:0d:a8:a6:e2:cc:e2:f4:3f:25:fa:97: a6:07:e6:e3:29:5c:e5:4b:16:cd:f3:63:ac:9b:b8: e2:20:0b:37:36:6b:59:91:64:75:79:a5:d8:c3:8f: e4:39:26:f0:6b:02:79:11:b7:e3:63:23:3b:e7:e3: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:B3:7B:52:10:DE:87:AE:BE:0D:65:3F:36:F1:57:AA:CB:E3:6A X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e1:01:22:b2:91:24:94:86:eb:ea:60:d0:c9:28:8c:0b:32: 1c:55:88:4b:44:e8:24:ad:7f:f7:8e:38:1d:7f:71:44:4a:d8: 95:54:8e:f3:b0:98:50:d0:33:4e:c3:ff:7c:46:38:b4:cf:ff: 93:64:45:75:e3:0d:bd:9b:72:90:f6:36:e5:31:70:c2:1d:b7: cd:eb:42:27:4b:32:c5:6e:70:fd:4d:93:ff:a3:4e:3d:e6:e3: 52:72:8e:ce:54:8b:b0:88:fa:bc:b3:74:35:60:47:9c:b3:3e: 77:68:b8:17:91:e0:e9:74:55:e2:8f:3b:8e:10:04:a4:56:2a: f9:93:5f:af:4c:a8:17:d4:bd:c6:4a:c9:0b:4b:28:94:d4:b4: ed:aa:a8:0c:53:c8:07:d5:91:4d:28:ec:65:da:79:7d:44:fd: 35:fe:db:8a:b7:85:79:df:55:99:33:21:ed:9a:8f:51:0d:6c: 50:41:b4:2c:1f:a6:3e:71:46:a0:9a:c1:00:9e:a5:69:f0:69: fd:db:23:38:31:d2:d2:61:1d:8e:42:16:4e:8e:ba:48:ff:84: ab:9f:7f:9e:df:6a:ea:bb:09:b3:2a:b6:e0:99:27:10:b5:87: ed:65:fd:d0:56:36:c3:c6:8d:a3:bc:5d:bb:3c:47:0f:b9:3d: eb:d8:90:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjYwOTA0MjAwNTU1WhcNMjYwOTExMjAwNTU1WjAYMRYwFAYD VQQDEw02YTliMjRhNC04MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZnzE1fSmcOJUf5TGExqg4Y6hILlZqBJJhCmDgLylKUKZV2YW9iCxAZjUTS/ XVWX93h/7a5+GG8Biv3TMNv139AGt9gZTPUUsFkDDfqiqhL30w9zSlEnHTmJyY8W CYRHkESorwtPCNbflPBMUJyBJqkw+3XKYPtmReZpfhxXAauiHB+fxq+5v1bDj19Y x1MTwvmYdkICtrO1FCZPyBu1VC7ZG3qMlYXwEvWD69i/fPtf9v3q/pa6b7fEI67G F/1dxzMdPnb7Daim4szi9D8l+pemB+bjKVzlSxbN82Osm7jiIAs3NmtZkWR1eaXY w4/kOSbwawJ5EbfjYyM75+MLpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICHs3tS EN6Hrr4NZT828Veqy+NqMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhuEBIrKRJJSG6+pg0MkojAsyHFWIS0ToJK1/9444HX9xRErYlVSO87CYUNAz TsP/fEY4tM//k2RFdeMNvZtykPY25TFwwh23zetCJ0syxW5w/U2T/6NOPebjUnKO zlSLsIj6vLN0NWBHnLM+d2i4F5Hg6XRV4o87jhAEpFYq+ZNfr0yoF9S9xkrJC0so lNS07aqoDFPIB9WRTSjsZdp5fUT9Nf7bireFed9VmTMh7ZqPUQ1sUEG0LB+mPnFG oJrBAJ6lafBp/dsjODHS0mEdjkIWTo66SP+Eq59/nt9q6rsJsyq24JknELWH7WX9 0FY2w8aNo7xduzxHD7k969iQFg== -----END CERTIFICATE-----Generated at Sat Sep 5 07:35:20 2026 by rpki-client