$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: iMD7+tHdz/cE47GnMd3ladU9vlaCo5s8NaksFNyVqXk= Subject key identifier: F0:C5:DB:B7:B0:47:DC:CD:E5:49:03:AA:27:DD:CE:E3:87:BE:AC:5B Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 0A0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 0A00 Signing time: Fri 02 Oct 2026 20:01:59 +0000 Manifest this update: Fri 02 Oct 2026 20:01:58 +0000 Manifest next update: Fri 09 Oct 2026 20:01:58 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: 6k9l0sUTIe3TQsM33PD9J1YFmia6W/QdOMdtklZPci8=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: 8Bst/i6kLHW0IcCwxsUo93WqVLek67ZtmgFeQJKwT8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Oct 2 20:01:58 2026 GMT Not After : Oct 9 20:01:58 2026 GMT Subject: CN=6ac00db6-2671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:0f:48:5a:1c:f6:0a:9b:32:8a:b7:09:2f: 37:28:ab:fe:2e:64:c8:96:21:e3:27:97:9e:4d:29: b7:06:22:3a:06:6e:a8:01:e9:6b:38:c6:f1:73:e9: f5:84:0b:ad:1c:da:c8:a4:f3:5d:93:5e:3f:6c:6e: 4d:87:a6:c9:a3:e7:e2:2a:52:b3:a5:92:ed:cd:d3: 0a:53:ee:7f:94:1e:f7:3e:af:b6:29:05:66:a4:89: 9d:05:23:5d:2a:1c:2e:75:5d:e0:4b:77:f2:54:6c: 39:2a:9f:3f:b9:e2:cd:9d:d9:f4:5f:7a:a8:cd:db: 71:2e:9a:e4:69:b4:bd:d8:39:10:5c:fb:95:a1:8e: 05:ad:d0:1b:81:b6:e4:53:77:9d:62:2b:d2:e6:62: 33:10:cf:9a:c6:1d:ff:cb:af:de:23:39:26:29:81: a6:bd:90:a7:ab:e0:07:74:3c:ee:cf:79:8d:81:f2: 0c:7b:eb:cd:e4:8a:6d:2e:b0:86:a2:81:d4:3d:75: 16:e0:d6:c4:e4:49:99:f7:69:e9:98:cb:f2:45:c6: 5a:dc:19:5a:60:de:1e:a5:a8:5d:a4:ad:67:06:a2: e6:57:e9:77:aa:ea:f2:5f:4f:06:10:bf:70:4d:5e: 0c:ba:dd:9a:51:c1:f5:e2:f6:ad:5e:37:ee:1a:85: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:DB:B7:B0:47:DC:CD:E5:49:03:AA:27:DD:CE:E3:87:BE:AC:5B X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6a:bd:33:14:73:5f:f0:8e:95:63:53:74:51:e9:5e:35:1d: f8:e1:95:ae:9d:73:7e:cc:15:8d:22:ae:ee:10:38:c1:60:84: cb:3c:35:ae:f1:99:a1:e5:b5:fb:bd:fa:d3:65:d2:ca:b9:3b: 1d:e6:57:16:4c:d8:e1:b4:1a:9f:d3:7a:c3:62:df:3e:c9:68: 00:4c:e1:1e:df:08:60:cc:42:1f:f9:9e:6f:7c:c9:84:90:75: b0:20:74:dd:a9:33:23:a5:62:4f:7c:53:52:35:be:d7:cf:00: a2:10:f4:1f:6d:bf:a9:2f:41:c9:d3:04:bb:0f:31:97:b5:28: 79:2b:cf:9f:cc:2c:f0:a9:15:c9:99:dc:88:7f:52:2c:6d:7d: f4:3f:3b:d7:33:fc:5c:74:42:dd:86:a2:e4:1d:a6:ca:fd:81: 3b:28:9d:07:01:7b:e4:c5:6f:f3:00:26:d9:db:8e:12:da:5b: 11:a2:86:09:52:65:e8:cc:b3:7c:01:a0:1a:04:21:0d:28:af: 08:8d:7c:69:f9:94:31:75:29:3e:41:6f:0e:82:5e:b5:fc:3f: dd:c9:5b:9e:02:53:fc:55:2a:59:54:b0:52:3e:91:d0:9f:be: 89:ee:34:f5:ab:4d:ea:e0:68:1d:64:7b:d6:64:c7:3a:53:06: 0e:9f:54:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjYxMDAyMjAwMTU4WhcNMjYxMDA5MjAwMTU4WjAYMRYwFAYD VQQDEw02YWMwMGRiNi0yNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuIPSFoc9gqbMoq3CS83KKv+LmTIliHjJ5eeTSm3BiI6Bm6oAelrOMbxc+n1 hAutHNrIpPNdk14/bG5Nh6bJo+fiKlKzpZLtzdMKU+5/lB73Pq+2KQVmpImdBSNd KhwudV3gS3fyVGw5Kp8/ueLNndn0X3qozdtxLprkabS92DkQXPuVoY4FrdAbgbbk U3edYivS5mIzEM+axh3/y6/eIzkmKYGmvZCnq+AHdDzuz3mNgfIMe+vN5IptLrCG ooHUPXUW4NbE5EmZ92npmMvyRcZa3BlaYN4epahdpK1nBqLmV+l3quryX08GEL9w TV4Mut2aUcH14vatXjfuGoVskQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDF27ew R9zN5UkDqifdzuOHvqxbMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVmq9MxRzX/COlWNTdFHpXjUd+OGVrp1zfswVjSKu7hA4wWCEyzw1rvGZoeW1 +73602XSyrk7HeZXFkzY4bQan9N6w2LfPsloAEzhHt8IYMxCH/meb3zJhJB1sCB0 3akzI6ViT3xTUjW+188AohD0H22/qS9BydMEuw8xl7UoeSvPn8ws8KkVyZnciH9S LG199D871zP8XHRC3Yai5B2myv2BOyidBwF75MVv8wAm2duOEtpbEaKGCVJl6Myz fAGgGgQhDSivCI18afmUMXUpPkFvDoJetfw/3clbngJT/FUqWVSwUj6R0J++ie40 9atN6uBoHWR71mTHOlMGDp9U4Q== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:54 2026 by rpki-client